Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: RQ2Fd6pVorpz5Dx0MinbcyyiWDtD7YAhqcJsarWv3eg=
Subject key identifier: 2B:BD:AC:74:E4:95:C8:1B:83:24:CC:80:9C:2F:14:EF:E1:C6:91:01
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019D9962A89C87580089684DF062B245DA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0D42
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: f8UEYS8ToQVTiZovtczxOmlJzeGVNCMTIENhHl2C4Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a8:9c:87:58:00:89:68:4d:f0:62:b2:45:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=2bbdac74e495c81b8324cc809c2f14efe1c69101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:b3:55:fe:fd:ed:5a:c1:80:d3:36:c9:09:
48:2f:0b:93:5a:b1:71:bb:89:d2:22:e8:6a:f8:55:
3d:1e:f1:df:71:de:15:5a:ef:22:fe:4b:ae:45:48:
3c:b5:82:46:1d:9e:0d:59:41:0b:9f:71:15:42:b9:
ca:eb:b4:68:4c:de:38:66:b3:8e:56:06:05:99:38:
6b:a3:59:d6:bb:93:21:db:ca:95:43:f0:23:a8:69:
8a:fd:50:b9:57:db:0e:01:e8:44:73:61:45:ee:be:
46:c8:de:fb:94:61:64:43:2d:3f:19:b1:0a:d9:f1:
44:b6:f5:94:4f:1c:7e:ab:36:23:80:8a:df:68:51:
7b:7c:96:5f:96:1d:bf:86:91:ab:ca:9d:c6:23:b6:
42:df:62:b7:da:a5:41:2b:39:4d:3d:ea:bc:b5:44:
57:c3:5e:8d:ee:b5:a6:20:7c:cc:e8:90:88:73:9b:
ed:11:1f:57:f4:e2:96:df:06:34:e4:cc:d2:b8:d1:
40:80:22:72:ae:a7:a7:6d:90:49:2d:a4:4f:31:a1:
de:12:b3:15:4c:91:4b:f6:87:c0:ba:ea:8a:72:4e:
dd:b6:22:42:33:22:fd:55:4c:34:eb:64:4f:c3:76:
e2:a0:f4:95:28:50:a8:bc:25:f3:56:6c:fd:de:a2:
6f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BD:AC:74:E4:95:C8:1B:83:24:CC:80:9C:2F:14:EF:E1:C6:91:01
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c3:b6:73:2f:1b:42:cc:d8:aa:7a:cd:5b:e4:75:2a:a6:51:
f7:ff:37:a5:74:bc:bc:31:d6:9e:af:92:a9:bf:ac:ee:7f:07:
ac:83:c6:05:73:68:bd:74:46:05:d8:96:ce:d2:c0:8c:8b:09:
05:c1:d0:b9:29:36:11:e2:a9:e9:75:b4:17:b1:a4:51:f5:9f:
04:86:f8:46:b1:ab:43:25:df:db:77:d4:13:ab:f0:5d:b6:44:
81:58:30:22:cc:a5:6b:07:5a:56:ab:16:2e:4a:76:ef:db:a8:
ba:bf:09:1d:c4:65:c9:7e:ff:d6:cb:fc:ea:72:62:1f:a1:d6:
5e:9e:5e:eb:b4:11:53:be:bc:c6:d9:8e:bb:0c:8b:2d:1c:05:
2a:a9:ff:58:51:ed:a4:73:4b:3d:9b:e7:7d:d4:31:2c:c0:e3:
b9:8e:35:a6:dc:13:c3:7a:26:5f:37:15:31:db:66:ae:35:30:
54:25:6d:94:94:29:5e:9c:ea:4e:b0:7b:ec:71:dc:ae:be:dd:
99:8b:04:56:ae:1b:42:e3:70:df:39:40:4b:68:fb:56:8f:69:
8e:19:42:d7:b7:8d:37:8f:ed:6d:60:81:08:10:47:ac:2b:c9:
d5:05:07:31:3e:e0:8e:38:db:9d:91:7b:43:6f:b2:b3:5e:e7:
ae:60:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:20 2026 by rpki-client