Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: zo8ItB5SwM4k57SD3ZGh4d2Khkl6MVLyThPXAy+jNDs=
Subject key identifier: 83:B4:AA:4B:7A:7E:70:EA:01:59:FA:D2:38:99:84:7F:F7:3A:32:F2
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 01A0C858D8CA2AE9F097C50C2002B6E76985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0EE8
Signing time: Tue 22 Sep 2026 09:01:00 +0000
Manifest this update: Tue 22 Sep 2026 09:01:00 +0000
Manifest next update: Wed 23 Sep 2026 09:01:00 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: LCadEmDdmPzrWsCtvG918mf4hMJeG2x/oKN3JXkvFzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:d8:ca:2a:e9:f0:97:c5:0c:20:02:b6:e7:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Sep 22 09:01:00 2026 GMT
Not After : Sep 23 09:01:00 2026 GMT
Subject: CN=83b4aa4b7a7e70ea0159fad23899847ff73a32f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:85:c7:20:04:29:3a:78:55:b5:c6:94:fc:
19:d7:79:0f:89:c5:0c:56:48:80:bc:b8:66:86:65:
fa:3a:5d:5c:5b:9e:4c:46:b1:69:02:64:66:79:91:
e2:12:d6:7f:5f:a6:05:88:35:d5:ac:51:03:65:bf:
3b:8f:4c:2e:4e:28:3f:c6:fb:ed:05:b3:c7:1f:39:
2c:b1:6e:05:94:3e:a1:5e:29:4e:c7:0f:3e:e4:28:
7f:66:b8:4a:86:fa:af:31:b9:fd:0a:e1:b6:bc:ff:
51:26:45:5f:ea:99:9f:29:cf:dc:b0:16:e6:3e:bb:
70:0b:d7:40:82:97:82:b3:3e:f3:fe:66:32:15:f3:
e7:9f:31:93:95:be:dc:41:15:65:3b:ea:0c:da:5f:
35:04:53:8d:5c:e6:8f:ee:7c:2d:79:48:e3:4f:42:
4f:f5:7b:c7:61:37:96:de:e8:75:69:fe:1c:a9:7c:
2d:c6:ce:0f:f5:c3:97:26:ff:4b:4b:95:b4:87:0d:
30:c4:cb:05:25:9b:6c:44:d3:42:30:64:94:f3:b1:
93:b7:0d:95:f1:d6:e1:ae:5e:87:f3:0a:8c:e0:d8:
0e:a0:1e:ce:a3:39:f8:72:c8:d4:ec:46:f3:16:8d:
86:b5:44:62:84:21:27:46:ae:0d:3e:80:a8:af:84:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:AA:4B:7A:7E:70:EA:01:59:FA:D2:38:99:84:7F:F7:3A:32:F2
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:ed:1b:f1:31:77:b0:01:32:a8:7f:d7:26:17:38:89:ab:
5e:ea:1a:13:5d:94:6a:85:2b:30:27:82:94:18:05:b1:7e:49:
30:72:d7:af:8a:40:a0:d4:ba:09:00:63:e5:0a:87:e1:9d:f2:
50:1a:3a:c6:d0:df:dc:a9:91:82:b3:81:68:f4:67:50:f5:10:
1d:96:36:53:7f:80:bf:fb:c5:b3:ab:e5:b4:37:58:c8:4d:20:
69:e1:9a:a9:78:19:0a:a2:33:fd:a5:86:0a:9d:cb:eb:9e:1d:
99:cd:8f:8a:02:4f:b9:38:19:21:45:83:bc:36:01:87:c4:ff:
07:91:1b:3b:45:3a:dd:7f:e9:56:5b:b5:62:e2:71:07:3e:d3:
87:25:ef:3e:28:54:1e:a0:18:42:4c:40:76:a9:77:ef:b9:0c:
90:2d:d6:0f:b3:27:94:d6:12:bb:ef:9b:0a:e5:4b:b6:44:2e:
d0:9c:0f:09:06:93:78:b5:08:17:8d:36:33:ae:86:b7:4e:f8:
fc:c3:08:74:3a:22:9a:47:51:17:8c:f6:46:db:c2:a3:0c:15:
f8:ef:e8:14:3e:b4:b4:d1:09:35:f6:9e:17:05:e3:75:0c:18:
93:18:2f:50:63:e0:f7:6c:0f:33:35:72:80:48:ce:f3:b2:41:
71:d9:d3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:44 2026 by rpki-client