Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: 7zOAQuJkN1nBYU4rh/D0V0w+v+yPaaqUC8/saQgRFCw=
Subject key identifier: 40:F9:82:2D:61:21:6D:3F:41:66:CE:A5:DD:45:E5:7E:A0:E7:E9:5F
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019DCF7574AC5279CEC92CE8E7708D485F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0D5E
Signing time: Mon 27 Apr 2026 15:01:14 +0000
Manifest this update: Mon 27 Apr 2026 15:01:14 +0000
Manifest next update: Tue 28 Apr 2026 15:01:14 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: QMBIYz4yaZ6/wCUtPUaghhirDyDrC5yImkkwUexjNkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:74:ac:52:79:ce:c9:2c:e8:e7:70:8d:48:5f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Apr 27 15:01:14 2026 GMT
Not After : Apr 28 15:01:14 2026 GMT
Subject: CN=40f9822d61216d3f4166cea5dd45e57ea0e7e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b0:c4:18:75:e9:50:89:9f:1f:44:6b:92:54:
12:ba:2e:0c:9b:62:5d:50:5a:e9:33:43:5c:31:71:
f3:d2:5e:64:34:46:1c:3d:45:b3:83:22:6f:81:0b:
ba:0f:a4:65:ad:80:3e:a1:bd:7e:60:fd:91:6e:ed:
5a:a5:70:ed:d3:08:f8:34:e2:b1:f5:92:3c:5b:e5:
ac:0a:48:62:0a:8e:08:e2:5e:57:6b:41:d1:52:93:
ea:d7:e9:ad:63:bd:22:4e:e3:90:ed:95:a2:d8:f0:
a7:72:42:40:44:24:b8:d9:1a:f8:26:6c:97:c2:4e:
22:d8:2d:d9:a2:5d:da:0c:3a:15:3a:98:0d:90:e2:
4b:2e:ca:60:e7:3b:10:69:70:c0:07:91:f9:9e:c4:
f0:95:45:1d:b8:76:c0:0a:72:79:6f:9b:c9:7b:b2:
ab:e7:1d:42:ae:15:8d:e7:24:80:91:ab:70:02:39:
c2:e1:69:f4:18:bc:60:ab:2c:65:a4:7e:63:90:49:
75:e1:7e:95:c7:47:f4:47:b2:5a:1e:f6:5f:6f:b5:
4c:81:fd:bd:43:c0:4e:4e:56:62:6f:1c:e7:b2:8e:
22:e4:e3:de:5e:62:e4:5c:b4:4a:17:4a:37:7a:68:
15:eb:dc:be:50:2c:5f:22:2f:b4:43:ad:20:e0:d2:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:82:2D:61:21:6D:3F:41:66:CE:A5:DD:45:E5:7E:A0:E7:E9:5F
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:b7:87:75:57:d0:21:0a:ff:e1:c1:e5:6d:b7:43:98:25:
0a:3f:12:99:ec:a6:2e:0d:a5:d2:c2:ed:21:cb:22:c4:6b:5d:
00:44:6e:36:f8:06:18:41:0b:62:16:86:7f:b0:ef:fc:d2:d8:
b1:ce:5d:08:3b:a2:9d:b9:47:9f:e7:b8:75:3e:d7:d8:1a:d3:
c5:1f:98:e0:0b:36:f9:b6:15:b5:5c:fb:5e:e7:4c:35:30:fc:
14:9a:52:f6:1c:af:12:21:09:3b:88:19:f6:b2:20:aa:42:6b:
26:e5:af:fc:36:80:fc:93:f8:24:e9:81:07:7d:fb:b2:c1:56:
6c:64:de:d1:58:3f:92:ac:88:51:f6:f0:b3:3e:96:1a:99:b9:
c6:18:e6:2f:c3:e6:03:30:79:eb:e4:da:d1:44:b0:20:ee:65:
0a:94:b1:2a:18:80:dc:ce:41:4f:30:34:70:4c:18:ed:35:a1:
55:e9:8c:1a:5d:14:e6:c1:70:c3:44:b6:4b:64:52:d3:5d:5f:
ac:39:26:e2:db:9e:f1:16:50:e5:27:59:6d:b4:54:4d:e3:11:
29:34:e1:ea:af:2e:85:ee:ea:99:c4:b8:0e:48:d1:33:a2:46:
b2:22:f6:dd:0d:d2:0f:08:ed:90:e6:66:68:41:2c:77:a0:94:
30:40:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:16:09 2026 by rpki-client