Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: Q1J8yD2fn4GtIFBS2KFDiBc9srGg6RM+DWsLxnc0kg0=
Subject key identifier: EE:1A:F6:DF:01:DD:8B:74:39:05:A2:D9:CA:9E:F5:50:43:16:E9:F0
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01A0CBFE22216DA4B2011A83C8C709CEF16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 02:00:24 +0000
Manifest this update: Wed 23 Sep 2026 02:00:24 +0000
Manifest next update: Thu 24 Sep 2026 02:00:24 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: IX6pq+yA78dh9ZKeTxjyTh+tyA5E3VQPEpVKTS2C3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:22:21:6d:a4:b2:01:1a:83:c8:c7:09:ce:f1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Sep 23 02:00:24 2026 GMT
Not After : Sep 24 02:00:24 2026 GMT
Subject: CN=ee1af6df01dd8b743905a2d9ca9ef5504316e9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:31:b6:87:d5:04:40:49:70:c7:59:8a:80:
ee:31:0f:e5:d9:38:8b:b1:d5:67:a2:db:3f:ac:ab:
4f:30:b0:5e:63:27:46:ca:75:d6:b1:8c:83:65:3b:
72:42:ac:03:0b:89:1e:76:e5:96:37:ea:e7:0e:df:
e9:ba:2f:e1:23:51:16:22:1e:eb:2f:09:64:cf:03:
76:54:13:c2:a5:b5:3d:3a:64:2d:cd:8f:7d:70:7c:
21:6f:32:a4:33:4d:64:62:0c:53:87:b7:53:a2:54:
19:d2:9a:04:35:b0:e5:79:ad:02:37:68:d7:fe:4c:
2f:17:68:23:66:c1:15:cf:80:c8:c5:70:fb:df:5b:
0a:b9:b7:77:9f:40:72:80:41:75:32:73:4d:6f:a6:
22:eb:cf:6b:2d:a0:63:eb:f1:5f:e0:7f:b8:b1:7d:
c8:4b:5f:0c:8d:30:6b:c3:cf:57:02:af:2d:ad:92:
aa:85:66:03:8c:4d:97:c4:5c:59:85:92:83:39:e2:
00:bb:24:3c:91:0d:95:1f:20:e5:59:4c:b3:a4:26:
41:49:d8:ef:40:1f:c2:a5:57:31:5e:25:b3:ac:be:
85:88:8e:28:e5:93:1d:d8:36:66:19:18:49:b8:20:
54:41:ad:8e:90:a7:eb:1b:92:7b:5f:fa:a7:6c:bd:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:F6:DF:01:DD:8B:74:39:05:A2:D9:CA:9E:F5:50:43:16:E9:F0
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4a:22:83:5a:50:cd:0e:10:fc:7c:73:86:77:f1:60:90:eb:
e0:70:bc:94:c6:d2:e7:c1:f3:8c:b7:80:1e:34:1e:91:8a:77:
9c:13:6a:e2:a7:c9:cb:4c:83:f5:af:4d:6d:3a:71:12:54:66:
d1:c5:b8:66:09:d1:94:14:c2:49:b9:09:7f:60:54:60:8e:ff:
8f:5f:59:88:9f:b1:ea:1f:f5:64:1c:44:59:e0:da:34:e8:fd:
c7:9e:95:67:f4:21:1a:9e:87:32:8a:2f:4b:9f:63:e5:33:14:
db:e1:bc:fa:1c:67:c9:c6:77:49:67:c6:6d:b6:37:e4:1d:8f:
ff:c0:88:6c:36:c9:f4:b2:b9:a4:65:6a:c6:08:4c:05:c2:51:
fe:05:04:68:28:ab:99:68:01:e0:40:46:51:df:ea:ab:2e:1d:
f2:5b:b7:e6:e4:4a:f8:90:12:59:bf:11:8f:ef:b5:cb:d7:c9:
95:3f:3f:17:74:4d:6a:b3:eb:8d:0e:b4:71:bc:38:0f:6c:9c:
64:85:9a:db:d7:a0:c7:09:da:df:0b:b3:a2:3a:0b:95:e2:86:
d3:5f:fd:e6:b9:81:0d:d9:08:a6:9e:6f:1d:d0:44:76:fe:c1:
64:81:8c:ac:b6:3f:7a:98:18:12:e7:29:25:0b:7e:50:7c:fa:
8b:48:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:13 2026 by rpki-client