Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: 8wZy9yA7XWOOFCp5IVuPZ7b4BHSckldKJugv+uh1KzM=
Subject key identifier: 38:15:59:87:9F:59:DD:EC:E5:2A:64:08:39:51:E4:52:EA:8E:96:79
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 01A08A8D1C05194A202CC6CF8AC5C4A3F44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0EC8
Signing time: Thu 10 Sep 2026 09:01:38 +0000
Manifest this update: Thu 10 Sep 2026 09:01:38 +0000
Manifest next update: Fri 11 Sep 2026 09:01:38 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: AB2HJsl2ryPeXt5l79QgOqsT6hhUHGxVpAhTsKcfbTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:1c:05:19:4a:20:2c:c6:cf:8a:c5:c4:a3:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Sep 10 09:01:38 2026 GMT
Not After : Sep 11 09:01:38 2026 GMT
Subject: CN=381559879f59ddece52a64083951e452ea8e9679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:72:61:01:d1:9c:1e:2e:22:4c:49:ab:b8:
36:c6:d3:23:7a:9c:cc:ed:ec:c4:e6:44:ca:21:17:
e1:ee:c5:bb:a5:c5:30:9f:c8:3a:83:b0:eb:af:59:
1f:87:77:61:08:dc:b7:cb:41:6b:40:47:b9:41:8e:
1a:7d:cd:6a:69:ea:3b:9a:e4:40:4e:1c:79:e0:2d:
a7:f7:92:3f:8d:83:f4:6a:ac:e9:ab:e7:22:51:6b:
10:ba:07:25:ca:1a:a0:94:c8:1c:bc:c9:cb:de:ca:
52:d0:0b:d3:cc:24:fd:4a:85:e9:f3:1c:26:b3:33:
b1:b0:b1:41:3c:92:08:ff:df:a8:7e:fd:41:61:c4:
88:42:4d:c9:9a:53:17:70:ac:11:16:9f:3f:79:5c:
1a:13:3b:cd:29:19:f7:72:00:6c:d3:4c:8e:16:2e:
9c:bf:da:10:14:77:27:9b:0b:d7:94:6e:fc:5d:c5:
8d:f9:a1:ec:2f:8e:2f:31:e0:29:e3:fc:0e:5c:a5:
2b:a5:f6:bb:c9:f2:59:c6:3e:d5:48:a7:6c:d5:33:
5b:82:05:13:a6:87:1b:a6:2e:76:02:ec:55:79:76:
10:09:6d:13:4f:d5:cf:5b:6b:5e:de:30:40:af:13:
ff:b3:57:69:a1:97:3e:d2:bf:9e:53:6b:ce:ff:0d:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:59:87:9F:59:DD:EC:E5:2A:64:08:39:51:E4:52:EA:8E:96:79
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:18:37:5e:c4:a0:4d:d4:7e:9e:38:e9:21:07:5f:80:ea:2f:
6d:70:ea:9c:d7:aa:6a:e5:ec:da:8f:2a:46:41:16:33:6f:8c:
55:63:36:1a:99:a6:0f:6e:11:16:d6:3b:bd:e2:bc:cf:03:65:
0c:27:31:66:09:21:e1:1e:89:1d:44:e3:3f:7f:e9:c5:6e:ea:
15:3a:ac:ed:93:a7:60:88:f8:41:fd:7b:f6:9f:1b:ad:d9:17:
90:3e:01:81:bb:8e:36:6a:e0:3a:f3:9b:ea:4e:ad:e3:0e:71:
26:c2:08:de:25:43:48:99:43:89:b0:55:7f:6e:7b:9f:21:f6:
09:55:13:d7:0b:7b:38:0d:d2:50:8e:ed:ef:4c:f6:0c:5e:ad:
90:c6:90:8a:ad:47:e2:a5:33:78:89:b2:02:49:d0:e7:c8:c5:
b2:fe:a6:c6:11:b6:f8:f1:63:f9:6c:e3:99:8e:29:b2:fd:1c:
7a:b4:72:4c:fb:c0:92:45:a5:95:44:d4:c0:d2:95:7f:93:5b:
50:a7:d7:f3:64:28:9a:b8:6e:94:b1:bd:e2:0c:24:77:b5:a5:
1d:0e:97:d8:d1:79:79:f1:32:cf:89:55:67:f7:0c:bc:6a:43:
66:38:23:7a:44:f0:23:e2:82:c4:f0:be:83:d3:e9:dd:08:9b:
ab:c6:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:05 2026 by rpki-client