Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: vurvSQRW0OunAihl/0w2n1armq1tRl2zuhTEXvUseuI=
Subject key identifier: 6B:3A:C7:EE:A3:15:6C:5D:88:86:EF:36:25:22:F5:5D:EF:44:46:4E
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019E1EA36B847F97DF1F2F69D541C0B2D3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0D87
Signing time: Wed 13 May 2026 00:01:26 +0000
Manifest this update: Wed 13 May 2026 00:01:26 +0000
Manifest next update: Thu 14 May 2026 00:01:26 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: 7DsvWOnkKbb3zkcLjs+yeUMEJQno14IcwP3AVtux09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:6b:84:7f:97:df:1f:2f:69:d5:41:c0:b2:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: May 13 00:01:26 2026 GMT
Not After : May 14 00:01:26 2026 GMT
Subject: CN=6b3ac7eea3156c5d8886ef362522f55def44464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:6c:d7:20:6c:72:f5:80:e0:c2:5a:af:c6:
c4:12:da:2f:30:c9:28:d0:12:e9:78:19:0c:f9:09:
9b:4a:e7:e4:81:e4:9d:86:5e:93:74:da:95:66:77:
df:e6:29:dd:ce:1c:1f:1e:e6:d0:d9:6e:8f:a6:e6:
f8:ac:88:bc:1a:93:c0:4e:47:4a:99:59:e8:a8:71:
c2:62:a6:64:da:07:7a:a9:9c:07:2e:72:6e:23:01:
96:0a:4c:82:84:e1:7e:05:df:16:ca:f9:45:1f:8f:
50:f7:9c:6d:10:91:a7:cb:74:93:7b:29:96:e7:90:
98:00:d4:eb:0f:dc:9b:a0:71:98:65:40:fd:13:b9:
38:12:e1:30:24:8a:b3:bc:2f:9f:b9:93:cf:5a:b3:
74:6d:b1:52:32:cf:a9:d6:2d:b2:d4:08:17:09:c9:
f1:49:24:20:60:d7:ff:37:e8:7c:66:ed:1c:15:39:
55:0a:bd:09:39:67:ca:f6:42:61:37:fc:2f:7d:43:
98:c1:b8:0b:d2:a3:b7:99:27:51:5f:ad:4c:3f:f2:
a3:31:0c:96:27:92:70:6a:57:d5:aa:d9:3f:a0:56:
8a:7b:00:e7:c4:8f:c7:31:6d:40:c3:36:02:09:5a:
43:b3:98:dc:0f:6e:4b:d7:59:f6:ff:4d:b2:a9:68:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:C7:EE:A3:15:6C:5D:88:86:EF:36:25:22:F5:5D:EF:44:46:4E
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:04:d5:09:c2:fa:bd:d6:5c:40:c8:da:50:e2:d5:d1:4b:fe:
44:64:7f:69:bd:0b:3a:b1:4c:ba:d0:8b:66:6b:7f:35:f9:13:
9e:2a:ac:6c:e7:b8:d1:c9:85:75:e5:0d:07:02:50:52:67:db:
c3:a7:16:e0:0d:2e:45:0f:60:ba:c0:5f:38:99:cc:7d:1c:af:
04:6f:eb:6c:5f:c4:de:eb:be:6b:4a:dc:ee:78:a0:51:05:14:
8d:b6:e8:ac:c6:b9:6c:52:8a:80:5d:1e:0b:bc:9f:86:43:b9:
af:8c:3f:e4:5e:65:58:5b:6c:35:6f:9d:d1:43:df:e0:4e:75:
9d:34:3c:ac:4b:e8:d3:bd:92:52:d1:61:84:2c:96:ef:cd:94:
47:46:4a:a3:6d:d7:71:5e:3e:ab:c3:90:d4:69:98:56:e7:cd:
f5:6f:03:e3:f8:ce:23:19:28:bb:73:91:3e:1a:b7:1c:43:8c:
63:bb:b9:e6:83:fc:53:e9:7a:44:7a:29:46:f1:24:67:24:9c:
95:82:ab:91:dc:14:8e:7e:ae:d8:f4:6a:eb:c0:a0:07:fb:1d:
ee:6c:24:28:c5:e5:2a:b1:de:3d:f8:e3:e6:38:7c:71:ae:0b:
83:ab:26:fe:b5:b6:32:c1:9a:f7:69:95:d3:13:96:2e:c5:c6:
e2:01:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:26:02 2026 by rpki-client