Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: 6fNlfz2GeQXoufRz7nM1SH4J15RH6WFSD3+VfzWpR90=
Subject key identifier: 1F:83:AD:08:69:DD:FD:E4:0E:D1:9B:CE:D5:10:C7:4A:CE:41:9C:67
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019D38D2A3FE77F87E319C5512395AE89792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 01BB
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: 0wOW7JE9mL25OeG1ebbjAK1YhMc2qAYdUHekJIVXKvM=)
2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a3:fe:77:f8:7e:31:9c:55:12:39:5a:e8:97:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=1f83ad0869ddfde40ed19bced510c74ace419c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:62:f4:8a:92:8a:0c:dc:d2:73:0c:f4:be:
40:f9:e6:fe:fc:42:f0:e9:2c:d2:e9:bf:07:11:18:
90:2d:83:b7:8c:e0:19:24:b0:9d:20:01:ba:b5:b0:
25:98:69:c4:4b:bc:28:c0:50:c3:b5:3b:7e:25:99:
3b:44:b5:8d:c6:2b:3a:ef:1d:36:0c:2f:6a:a7:96:
f4:d2:38:2d:06:82:51:73:25:5c:f3:3d:9d:47:9a:
21:e2:8c:b3:19:c5:75:92:e9:e0:18:d8:fb:b9:53:
44:7e:63:9f:b0:6f:b5:86:4d:4d:ef:d8:c6:6c:9c:
4a:e0:2a:14:bb:dd:21:fc:52:0b:20:c3:cf:2f:08:
af:c0:a2:fa:5b:d7:4f:f7:11:b9:b9:67:b9:19:ea:
89:e9:cd:ab:bd:0e:01:b2:da:cd:0c:3a:79:56:a5:
ed:e5:13:35:4a:4b:fe:7b:a6:7e:20:64:e5:ae:9c:
62:d8:00:45:c3:dc:b9:45:87:e8:77:4a:94:a4:09:
f7:d2:e4:88:76:ed:1d:7c:66:a9:89:30:f6:8a:98:
3a:e9:53:dd:9b:60:0d:30:dc:d0:c8:f1:77:c7:05:
8a:bd:94:3f:15:f1:b8:a5:b2:72:02:ae:6e:c4:06:
d9:bd:8c:3a:da:6e:58:03:7d:5b:a6:9f:ab:47:00:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:AD:08:69:DD:FD:E4:0E:D1:9B:CE:D5:10:C7:4A:CE:41:9C:67
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f9:fd:ef:32:db:3a:26:66:e2:8a:05:83:50:7b:e9:6f:78:
4f:b2:90:ad:0d:bf:75:a7:d5:9a:a7:4e:72:f8:4a:81:3a:51:
af:b3:31:58:9c:87:2b:9f:76:55:65:e1:8e:d1:92:e4:6f:94:
bd:b2:9a:14:74:ac:96:3b:0a:99:c1:cf:ed:5f:49:8e:71:0a:
74:46:e2:07:1a:89:1e:43:42:0d:65:aa:6a:7a:fe:bd:38:6d:
98:51:59:df:b9:4d:f0:59:3a:77:7a:84:ed:c6:d0:73:ac:7d:
52:3b:ce:bd:74:d5:57:a8:1a:c4:83:30:b5:f6:43:16:b4:99:
f4:73:dd:b5:f8:6e:28:9a:e7:84:33:fa:d8:03:66:d6:7f:57:
b9:8a:4b:ca:d0:9f:8b:6d:5f:ec:0f:1e:0b:d6:2e:32:27:dc:
6d:d0:26:4a:1b:59:a4:34:cc:11:7b:02:fd:05:ea:0e:65:6d:
06:52:f4:35:8a:40:b8:83:0d:ff:68:72:3a:5e:c1:08:94:66:
24:85:69:86:05:ab:1d:dc:e0:94:54:d9:dd:a5:5a:1c:59:d4:
30:40:e4:0d:20:72:5f:ec:51:e2:51:0e:d6:86:49:fb:d8:4e:
3b:bc:ec:fb:35:5b:c3:04:ab:15:f9:23:8f:33:f4:1c:4b:12:
f2:52:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:52 2026 by rpki-client