Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: j0ShTyMGp0AQeXzVyKf1kzcdPXrTXgJ1cOznNU8XAbY=
Subject key identifier: CA:85:12:24:96:2A:D9:B4:11:A5:D5:3F:0E:5B:36:AF:E9:90:BA:CA
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019FA2CEF9E34A861243775AEFA9E591BA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0E50
Signing time: Mon 27 Jul 2026 09:01:41 +0000
Manifest this update: Mon 27 Jul 2026 09:01:41 +0000
Manifest next update: Tue 28 Jul 2026 09:01:41 +0000
Files and hashes: 1: GlmbggyWsqDmQgjMpt8vT6hyIY0.roa (hash: WG1xWz0sMWZNoi0xq7SQfwjVul3NBPCjw1VmqLI/Yb8=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: lr62D3YMVtmF+hai5SrlCoI8FUNo6YfBon0/pBsjLTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:f9:e3:4a:86:12:43:77:5a:ef:a9:e5:91:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jul 27 09:01:41 2026 GMT
Not After : Jul 28 09:01:41 2026 GMT
Subject: CN=ca851224962ad9b411a5d53f0e5b36afe990baca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:86:53:49:47:81:3b:90:fd:75:db:5f:21:
94:66:ca:61:ab:f0:21:7d:00:2b:77:e8:80:d7:c0:
8e:82:22:84:d2:1d:a6:43:59:e5:14:1f:7b:d6:48:
6c:ae:49:33:9c:41:4d:69:0a:11:15:fc:58:ee:ae:
34:81:a4:8f:9a:d6:76:3a:2a:3a:a6:ea:be:95:3c:
5f:b2:43:88:9f:e0:8b:ee:96:51:22:91:c0:46:30:
89:c4:6b:57:02:9e:3d:c4:77:85:2f:d6:61:7a:a3:
74:75:d3:b7:4f:a1:27:bc:c5:c9:42:8c:75:6a:51:
28:8c:84:a3:86:f3:4a:0f:1a:c6:aa:d2:1d:af:34:
01:9a:85:1a:a6:dd:9f:d2:3d:0d:fa:af:03:bf:33:
61:e5:e7:d0:a4:1d:88:72:a3:0c:2e:80:58:cd:ad:
e4:c3:f6:14:89:23:5b:db:a4:9f:06:cf:a7:2d:36:
5e:27:71:ae:09:98:88:da:e7:32:b8:04:7b:d6:ae:
c7:21:44:1d:20:83:a4:44:ce:10:16:8c:6c:ec:b1:
a9:85:1c:73:0b:12:ed:74:6a:0a:77:34:d7:f0:3f:
4f:bb:14:ea:d1:38:ab:0b:ec:2d:51:e0:4b:98:4b:
91:b1:da:cb:96:02:34:5d:92:fd:f7:c2:4a:7d:76:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:85:12:24:96:2A:D9:B4:11:A5:D5:3F:0E:5B:36:AF:E9:90:BA:CA
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:ec:3e:1a:7d:2b:1a:70:e8:92:f1:e4:bd:c3:0a:37:6e:
19:5d:b6:94:88:84:ea:2a:07:86:72:74:a5:14:38:3e:aa:25:
e8:78:f2:d3:b6:47:b4:82:69:b8:17:12:5b:eb:e0:32:32:70:
76:f0:4f:e7:87:da:74:7c:12:cc:bf:c5:8a:0e:cf:42:84:fe:
1f:c4:ec:cd:76:20:67:e5:73:83:9f:4e:0d:a1:ef:05:87:29:
cf:99:6b:3a:a9:10:db:d3:38:50:f1:71:80:e8:da:ff:f4:6f:
bd:3a:1c:e1:c2:02:c4:a4:e2:94:54:87:b4:68:ae:e7:7a:ae:
81:84:a2:d4:2f:f1:ec:4b:8a:66:86:60:31:ed:48:1a:c5:3a:
25:36:a1:f6:95:d2:ae:6d:9b:c3:5f:c7:9d:94:74:3d:da:67:
72:c9:e5:c5:67:18:44:f6:73:dc:64:47:f8:f8:d8:b9:76:42:
b6:a7:05:a8:3a:0c:a3:8f:d4:4a:73:52:ff:9a:82:8d:b8:9c:
dd:0b:6d:fa:a3:86:4c:df:07:5f:c4:0f:bb:7f:f3:24:7d:da:
37:24:2a:74:3c:b1:57:12:14:6f:c2:46:ce:24:59:a1:93:9a:
a2:67:44:09:e0:d0:7e:b1:a2:5b:f5:2d:b0:6b:ac:1d:d7:f2:
de:ce:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:38 2026 by rpki-client