Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: Heq8FPSZ5eOg0aRof7ANs/U0ayjcGdTxNHpI5vxtHew=
Subject key identifier: 7E:57:20:F6:9A:9F:48:EF:E0:3C:99:8D:84:51:4F:2F:EF:DE:4D:86
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019CADC75A2F7BE21F7AAB28CF411A04AAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 0173
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: V4suQthOMP5ClV/f2IiHLbpV7wHCiZcshDQTqydHeEA=)
2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:5a:2f:7b:e2:1f:7a:ab:28:cf:41:1a:04:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=7e5720f69a9f48efe03c998d84514f2fefde4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:69:78:ef:0a:dc:d8:7e:7e:56:3d:1b:2e:
f5:47:4a:3e:bd:52:72:c7:d8:b9:ec:7f:5b:97:5d:
22:29:4d:65:f8:f6:cb:5e:8b:54:86:71:8a:16:58:
9d:31:fe:8b:51:57:d8:7c:de:11:43:18:15:36:aa:
5b:0d:60:04:14:a4:a6:09:ef:d6:9d:74:d4:1d:3c:
be:35:b9:7a:ab:79:90:02:b9:c7:b9:6f:10:84:9b:
74:8b:da:cf:73:3c:9a:aa:8c:5d:ce:d1:4b:09:72:
e7:90:c3:71:a3:e1:14:08:5e:b8:b6:1b:c3:f9:6f:
27:89:f0:ba:1c:81:89:9e:9d:70:77:37:9c:17:97:
7d:6c:bc:6e:e6:a3:c2:e2:32:7d:90:ba:ed:b0:27:
ea:62:b2:2e:6d:25:c2:78:fd:09:15:54:b3:4b:4d:
57:50:21:99:2f:d9:5c:46:83:de:ea:7d:89:81:14:
ad:c0:63:d3:00:59:55:04:4a:df:5c:e1:20:c7:90:
59:2b:3e:d8:10:fd:b5:4d:c2:06:79:9f:b7:c3:00:
36:cd:ca:39:ba:ea:c9:13:55:c3:ce:ea:53:1a:9e:
c3:38:97:03:24:37:bd:f4:90:3f:2f:b2:ab:81:78:
bd:26:44:3e:e2:b7:5f:ca:17:e6:7d:16:b6:7d:27:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:20:F6:9A:9F:48:EF:E0:3C:99:8D:84:51:4F:2F:EF:DE:4D:86
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d2:8b:7f:b9:16:d0:dd:ae:4d:68:6f:76:2c:e1:92:31:12:
75:10:5e:67:11:30:20:16:03:0c:29:85:44:f3:93:74:32:ff:
b6:57:2c:ed:11:45:35:dd:38:a3:a4:c7:3a:26:3a:97:be:b6:
79:af:bd:39:5b:db:45:cd:5c:0a:69:7f:f9:a2:ee:ac:60:23:
5f:1b:05:9c:dd:b9:49:da:f2:f1:6b:de:c2:c7:34:40:27:d6:
35:26:cb:f8:6f:24:9d:7b:bf:f7:6c:60:87:f8:2b:b4:3a:e5:
c4:3f:b5:36:81:9c:26:41:7a:c2:4c:3e:25:8d:18:71:01:17:
68:74:3b:07:c0:38:f2:b5:dd:51:57:60:34:cc:35:0c:4c:ad:
51:53:1e:24:44:20:63:18:75:03:28:28:3e:51:a5:29:64:fb:
1a:22:d6:b7:ab:d2:eb:bd:e4:92:11:32:e7:01:4f:9c:1b:d6:
2b:b9:5a:8d:01:36:0a:48:81:7d:76:86:63:82:f0:77:d7:56:
e6:72:10:b4:1e:2b:fc:9d:b8:3d:7f:7b:00:e9:4b:31:a4:2f:
c6:2d:85:29:bb:b5:cd:a7:07:a6:31:35:ac:9f:a9:62:fd:0f:
3d:74:80:45:6f:c5:29:78:ba:25:c6:cb:9f:be:68:c2:74:ff:
52:9e:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:49:23 2026 by rpki-client