Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: hcfdCBJCu8TJ9wTA/gFwd5uXFikrGvgW4qTqmdiuqpE=
Subject key identifier: E5:46:4F:1A:AF:97:57:80:F3:6A:3D:26:F7:20:EE:92:E6:02:DF:F4
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019CABD8E3B9F0075AD789CE9F9A71DC5AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0CC7
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: St920vKeHM4o0wYjBsGv5EWBxMR2r5eN/8uJfea0jw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e3:b9:f0:07:5a:d7:89:ce:9f:9a:71:dc:5a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=e5464f1aaf975780f36a3d26f720ee92e602dff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:de:b4:fa:1d:62:5b:d0:21:bc:4e:b4:11:
79:27:70:82:c5:53:17:e6:7d:05:91:07:fd:b7:1a:
fb:6c:b0:a4:01:4e:3e:af:9d:8d:c9:a8:d5:2b:03:
2d:6b:da:73:88:ee:33:1d:ff:21:7b:1c:0a:5f:a2:
0b:83:9b:ce:22:5b:62:d9:6a:71:f7:01:98:c7:08:
17:fb:bd:bd:17:65:7f:ac:68:9f:d1:9f:8a:47:25:
82:8c:9b:87:eb:4e:fb:f8:9d:e2:b3:59:dc:08:29:
dd:5e:00:5e:58:d1:a7:c8:a1:57:12:06:91:89:2f:
06:e7:27:8a:67:2b:27:6c:64:aa:bf:5c:01:29:c5:
dd:5f:97:dd:e6:9e:a9:4c:e7:d7:44:20:d0:9a:40:
32:0c:1e:77:62:35:55:a7:21:6b:fb:34:01:86:16:
6f:b0:f4:b8:b5:6d:9a:81:9a:e2:d9:a7:2e:cb:d1:
0e:73:8e:bd:68:65:87:fd:b3:54:09:49:6f:eb:8f:
6c:02:53:31:dd:80:5c:02:3e:7f:93:96:97:a8:29:
8f:a3:74:72:86:48:09:00:2a:75:20:b6:1f:84:aa:
0c:a3:38:08:4c:91:da:0f:8d:38:25:3c:87:2b:43:
46:a2:19:88:c3:cc:f6:32:0f:17:9c:b9:1a:a0:00:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:4F:1A:AF:97:57:80:F3:6A:3D:26:F7:20:EE:92:E6:02:DF:F4
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:1f:8d:91:83:6d:12:f4:d8:99:9d:f2:f9:46:cb:d9:43:
1c:8f:bb:2f:ca:1d:0c:d7:88:e5:34:7b:1f:fd:b7:f3:7c:f3:
6c:13:27:28:b2:d1:b5:f4:58:d5:9f:3f:2d:9d:9c:57:d6:4c:
ed:30:d2:ac:ae:78:fb:09:a4:3f:a2:52:06:dc:a7:ec:cb:83:
bc:90:2c:66:48:c4:b4:66:15:31:fd:79:4d:1f:88:fb:f8:48:
77:db:0f:3f:1c:54:ea:4c:3a:8a:98:e5:18:f3:e2:01:df:ae:
35:ff:a1:c9:12:e0:08:d4:73:17:25:ba:12:34:17:76:a8:4f:
b0:22:1c:e0:d9:2c:ac:d9:58:c7:91:6c:5f:9a:67:2f:a5:58:
71:ee:70:2a:11:fc:82:20:cf:f5:22:b5:88:d6:fa:e3:02:e3:
29:de:37:85:2c:ed:64:1c:64:b4:32:29:cc:b0:e6:38:40:3a:
2c:85:25:91:fc:11:1c:25:66:89:d1:96:74:09:f9:ab:4b:32:
3a:63:96:2d:b2:f6:df:dc:e0:5d:09:1d:2c:d8:01:4a:05:fc:
a0:ed:2e:c5:32:3b:03:e6:36:49:89:e2:5c:29:69:2a:2c:59:
fc:fe:21:a3:65:ed:b0:5a:1a:a2:ed:14:33:7c:7a:b6:46:08:
38:53:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:19 2026 by rpki-client