Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: YCb06eS6j1p3u67M43KIpWWDpSELVbsl3t339hEuH1M=
Subject key identifier: 25:5B:B2:67:6A:81:E2:C0:4D:EC:B4:39:68:6C:B2:29:FD:F8:A6:F9
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019F11F84395BF00293083B075FFBFA89214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 02B0
Signing time: Mon 29 Jun 2026 06:01:50 +0000
Manifest this update: Mon 29 Jun 2026 06:01:50 +0000
Manifest next update: Tue 30 Jun 2026 06:01:50 +0000
Files and hashes: 1: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: jJ0fWDZlAPC+Hic9lVS8SRq8wRxKyqUKOGUSyw4UFgY=)
2: WQ_j-qqDR5HktP06sg7xONRh0BE.roa (hash: IEt/v53hTQ/BgADum+kvHIi5QkAMcCA3KyS/Nvrh4FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:43:95:bf:00:29:30:83:b0:75:ff:bf:a8:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Jun 29 06:01:50 2026 GMT
Not After : Jun 30 06:01:50 2026 GMT
Subject: CN=255bb2676a81e2c04decb439686cb229fdf8a6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:f1:f7:a6:3c:fe:f3:f9:11:54:cb:c2:5c:
c2:50:f3:c2:cd:c4:1d:bd:6a:26:ab:18:93:ea:88:
6d:d7:d0:11:f0:96:4e:eb:ba:5e:2d:c4:06:09:82:
34:c4:e3:7e:10:85:72:37:44:45:be:de:45:bc:07:
3f:fd:93:1b:68:ec:70:d2:93:90:ac:e2:56:8a:c8:
3c:5a:56:af:ba:78:e6:90:d9:57:8f:d1:d0:e0:f1:
ea:74:c7:e7:63:fa:f9:d9:07:72:ab:29:74:14:eb:
e6:3f:c6:08:a7:16:40:65:f4:fe:7b:28:74:73:53:
a4:a4:96:e1:d9:30:2f:f2:e8:da:2b:c5:94:9b:1a:
62:ed:6d:3b:a3:40:e7:3c:2c:5e:e7:42:e8:d5:fb:
d5:bc:57:db:ee:fc:77:c3:84:e2:ed:fd:30:69:b2:
29:0c:e8:5e:9e:ee:6d:17:99:17:41:4f:58:21:5a:
17:e0:5d:e8:f7:59:19:90:13:21:66:4f:23:93:0a:
16:c2:23:71:45:ed:62:54:55:07:07:e5:49:99:60:
f0:e3:5b:90:4a:ab:7d:99:c1:a7:f0:7e:31:c7:7d:
5b:29:54:2c:47:b2:7d:dc:4e:32:2d:5d:54:ed:00:
6c:27:2c:f1:f3:b3:2d:86:d4:29:4f:63:64:d6:db:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5B:B2:67:6A:81:E2:C0:4D:EC:B4:39:68:6C:B2:29:FD:F8:A6:F9
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:32:2f:62:61:c9:3d:7b:03:1c:9e:76:65:71:a5:e3:21:c0:
f3:de:f2:5e:00:aa:32:4a:ce:8f:70:02:df:93:35:37:77:0b:
f7:31:46:c8:e2:f4:85:50:09:83:01:24:74:26:f9:cf:4b:5b:
af:21:42:8e:3a:e4:f3:78:37:24:7e:95:3a:4d:10:ee:c4:68:
93:49:65:ca:20:28:6b:89:11:bb:84:b2:48:32:1a:b6:c8:56:
06:e0:dc:76:f6:6a:71:13:1d:66:e4:8d:cb:62:14:a9:f7:1d:
05:67:4d:d6:c0:d3:30:7d:43:53:8b:b3:f6:27:f2:05:d8:40:
95:9e:ce:54:5e:79:28:cf:8c:6d:53:60:0d:b3:fc:bd:c3:64:
ef:06:f4:d4:d7:04:1d:b2:11:74:d7:07:b3:6b:c0:71:3f:5f:
e4:4a:d0:22:7d:49:2a:71:a3:44:13:20:de:87:9a:cc:a8:ca:
34:f3:b2:8e:9e:fc:3a:32:87:f5:5b:36:f6:39:d4:ab:90:f9:
4d:e3:d0:6a:b6:b6:13:49:48:c9:5d:28:ea:6a:b6:8c:6d:63:
14:3d:58:8c:b9:02:c4:e7:5b:cb:e2:53:27:d3:3f:d0:87:3a:
62:ac:aa:40:27:a2:39:da:c9:3b:1f:ec:c2:00:6c:15:d0:fb:
34:51:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:08:04 2026 by rpki-client