Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: gjbaHopwMET7x+AvnJKRHCbRX4MPaS3vnsV5nGc1Yns=
Subject key identifier: 1B:DA:90:F8:DB:0F:1F:5C:B2:7B:A8:43:80:49:03:D2:28:AD:60:42
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019EC2C992B2B8A4E4B8BD8E5F251E51DA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0DDC
Signing time: Sat 13 Jun 2026 21:00:50 +0000
Manifest this update: Sat 13 Jun 2026 21:00:50 +0000
Manifest next update: Sun 14 Jun 2026 21:00:50 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: 9n5P7FinVP5/+8kn5sA9mtjfGAM3CQNIldWMHofELeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:92:b2:b8:a4:e4:b8:bd:8e:5f:25:1e:51:da:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jun 13 21:00:50 2026 GMT
Not After : Jun 14 21:00:50 2026 GMT
Subject: CN=1bda90f8db0f1f5cb27ba843804903d228ad6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:2d:e1:83:25:7d:24:c7:c0:5f:11:85:24:
ec:a2:42:59:52:a9:08:37:89:09:63:99:52:3d:03:
09:ff:d2:b1:f3:fa:8b:81:a8:c9:2c:49:7a:2c:e7:
d0:6e:69:56:f0:e9:66:5d:04:92:e1:62:5c:ce:db:
45:7c:a0:fe:0d:4e:64:75:0a:3b:63:d5:a5:ac:c3:
b7:17:ed:e4:36:bd:11:cf:e9:8e:1a:d2:da:80:79:
d8:ad:da:57:b9:bf:13:76:8a:00:2b:fe:e0:20:69:
7a:0b:7f:2f:cf:d8:2c:bd:a8:a6:ad:20:1e:09:0f:
9a:ef:bd:8f:ce:b4:14:e9:3e:28:5a:08:53:20:46:
d5:1f:bc:47:ff:b5:13:35:dc:cf:f7:04:af:aa:32:
a7:a2:f3:fb:88:cd:02:84:c2:56:38:e4:2c:40:cc:
e6:c6:0d:58:3b:55:7f:92:d5:9e:3b:bb:b5:9f:6f:
6f:e1:94:b4:04:d9:39:4a:a5:dd:88:04:ba:4b:b9:
df:2d:18:36:77:9c:d3:17:ef:fc:cf:55:58:e9:f4:
3b:09:b1:7d:ae:c4:01:4f:64:f4:07:db:8a:d7:05:
bb:c2:1a:3c:56:ca:ab:5d:99:69:c1:70:8a:e2:e5:
2a:92:94:59:77:7b:f3:cb:1e:5a:a7:61:d0:69:23:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:90:F8:DB:0F:1F:5C:B2:7B:A8:43:80:49:03:D2:28:AD:60:42
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:41:6a:66:c5:2b:dc:32:b3:23:8e:68:4e:43:bb:8c:5c:d4:
ca:d5:71:d9:78:fd:5f:bc:e9:12:76:1a:b8:19:dc:bf:e0:11:
2c:cb:8c:94:d1:95:c4:dc:11:73:d9:53:3f:70:d0:b6:a3:8d:
c4:fd:53:db:36:50:e4:05:4b:a5:77:71:ef:92:e8:0a:e2:70:
8f:46:82:03:9a:3e:05:2b:b6:a7:01:9d:38:d1:2e:4c:b9:3d:
2f:8d:3f:9f:b0:24:f2:ad:17:21:03:91:4f:14:4e:d1:06:aa:
50:e0:3a:30:7b:3c:9e:7f:33:41:fe:e6:b9:7a:af:68:03:38:
e9:39:ee:e2:99:b3:cf:d1:09:5f:a4:d8:73:cc:9e:54:58:52:
7c:d0:b5:d6:e0:e8:11:4e:99:bc:ea:0b:81:11:5a:98:19:28:
9f:c8:09:39:92:06:6f:89:f7:8d:0b:30:66:e1:2e:58:30:55:
75:9a:d7:d3:ba:3a:fb:fb:c2:bc:cb:ec:21:06:32:63:89:cf:
8d:0f:a4:e1:c5:6c:5d:e5:b6:07:2a:dc:22:e8:d2:9d:82:80:
a1:e8:6b:5f:28:fe:c3:e1:17:74:f1:05:03:55:ce:7a:6b:32:
c4:e7:c6:86:91:a1:34:01:16:6b:cd:a9:28:1d:09:ee:77:96:
3c:37:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:13 2026 by rpki-client