Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: tf4YJ3fKxRjevemO+9SypQcDpdjS1r0hZv0+w3DgBWg=
Subject key identifier: 95:8B:97:DD:87:6D:FC:C9:A0:74:0D:B1:D6:2F:F8:16:1C:4B:0A:5F
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019D992B05E11769EF04C1C26CAB1529156D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 02:00:26 +0000
Manifest this update: Fri 17 Apr 2026 02:00:26 +0000
Manifest next update: Sat 18 Apr 2026 02:00:26 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: ++Je8rgDlY+UzwlA+f5r9O4QXdazv9DzyXIwvv3FKNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:05:e1:17:69:ef:04:c1:c2:6c:ab:15:29:15:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Apr 17 02:00:26 2026 GMT
Not After : Apr 18 02:00:26 2026 GMT
Subject: CN=958b97dd876dfcc9a0740db1d62ff8161c4b0a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:c7:da:27:93:c9:80:37:39:12:8a:11:c9:
fd:59:55:a8:3e:5b:b1:b4:eb:47:3c:2a:7d:63:d6:
d8:50:22:0d:7b:97:b5:42:7d:75:2d:11:dd:b2:71:
23:0e:92:88:d7:73:a4:0b:ff:c6:db:69:c7:da:e4:
63:c0:31:38:52:0a:70:eb:05:c0:de:8e:12:37:e1:
d9:c6:f1:18:9d:35:23:3e:b8:22:76:d7:fa:af:48:
36:4d:88:d3:1f:32:8f:4c:a4:6e:be:48:11:e2:bc:
fd:f5:c4:b9:00:d1:56:ef:9b:8a:18:84:f4:fa:0b:
8b:1a:74:9a:90:d7:c8:fc:a6:a2:41:5d:df:56:db:
08:f7:85:5c:48:16:82:db:66:a3:b9:c4:4f:0e:74:
97:96:21:53:65:7d:33:3e:9a:b0:98:03:94:c0:7a:
36:17:d1:ff:ee:3e:0c:af:ba:9e:8f:21:17:99:ab:
a0:9a:ab:31:2a:95:3c:ba:68:6d:b9:34:62:95:13:
bf:f3:24:e7:ab:a1:5a:2c:97:e0:d9:28:bb:39:2f:
21:03:70:b4:a7:28:24:23:10:e9:40:64:01:8b:e7:
95:c7:b0:e8:cd:4b:c3:de:d0:15:a4:40:28:8f:e5:
9f:e5:fe:5f:8c:3a:35:b6:6f:e8:df:33:aa:85:92:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:97:DD:87:6D:FC:C9:A0:74:0D:B1:D6:2F:F8:16:1C:4B:0A:5F
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f6:02:30:13:c0:78:c4:9c:d5:0b:36:3f:5d:b0:78:20:ba:
95:d0:17:ab:20:a2:db:03:f2:36:8d:b1:56:64:4e:54:8a:88:
62:4c:85:17:89:3a:54:5b:03:a2:3b:2b:53:a7:96:e9:05:4e:
fe:3b:cb:21:33:6e:fe:32:74:d5:8e:00:45:7a:51:9a:a7:66:
52:70:52:ff:ad:9a:82:49:a5:a6:a0:c9:4c:b0:2f:89:40:64:
7a:29:e8:fb:c4:3f:17:07:fc:a2:da:4b:54:af:12:ca:ce:5e:
19:74:98:82:4d:aa:99:96:88:3d:54:e4:9e:45:d6:47:03:ce:
7d:ca:ca:30:0d:02:1c:60:ea:29:46:19:aa:2e:56:f3:50:9c:
77:be:30:41:46:0c:d7:c3:88:be:d0:f2:67:d1:80:3e:e2:39:
80:fd:57:b1:ba:06:61:f9:d0:d4:0f:56:45:35:2f:2a:cb:cc:
0a:0f:c0:9e:46:d3:11:c3:23:0e:f0:9c:ac:fa:df:ce:34:12:
b0:cf:7b:99:70:68:fd:d0:1f:c0:a0:69:ff:33:f1:61:7a:d5:
17:4c:eb:fb:f8:53:42:29:a3:3c:c6:27:eb:e0:5f:08:a3:37:
4a:7b:15:71:a8:f1:b2:b2:64:81:9f:6c:ce:f4:cb:54:00:6a:
39:4b:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:38 2026 by rpki-client