Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: /xyB6vhZaw8LTdJteWvkU8HZ/QK7LL1ooxPQEcnHuNo=
Subject key identifier: 37:3C:88:42:03:34:9C:36:FF:0F:A9:EB:44:24:32:5D:DE:42:0A:F2
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019CABA1B3604A5F7079D9F99C461E75A441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 17DC
Signing time: Sun 01 Mar 2026 23:00:26 +0000
Manifest this update: Sun 01 Mar 2026 23:00:26 +0000
Manifest next update: Mon 02 Mar 2026 23:00:26 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: g+s9LrKtmySxO/BEwWdBfjqFpi6vK+Vc2Y1mYMG2s+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b3:60:4a:5f:70:79:d9:f9:9c:46:1e:75:a4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Mar 1 23:00:26 2026 GMT
Not After : Mar 2 23:00:26 2026 GMT
Subject: CN=373c884203349c36ff0fa9eb4424325dde420af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:7b:9e:1e:b1:c5:24:50:be:09:f6:93:b6:
a5:3e:2a:7b:52:0a:b2:1a:72:f6:cb:8b:19:fd:2b:
61:d5:ee:ca:c9:78:c6:68:14:2c:dc:be:ac:43:e6:
a5:e8:14:ff:60:95:b6:9a:70:be:b4:ee:c4:e2:58:
de:d1:d1:66:ba:a6:89:29:0a:8b:47:65:fb:40:58:
fb:88:db:01:d1:c8:19:c4:16:7c:dd:ca:80:72:f6:
44:ce:8f:b2:dd:ef:10:cb:77:50:b9:27:b4:70:1c:
4b:88:20:56:0b:91:e9:bd:7a:05:b6:17:6a:a1:fc:
8d:83:5e:e2:7c:74:c7:41:9c:05:05:2c:7a:ea:a5:
8c:37:e3:1d:54:1f:f8:0a:cf:60:70:b0:b6:f0:f7:
2a:ef:cb:af:6c:b8:e9:2e:3d:3b:7b:c1:16:28:c2:
f1:b0:20:25:aa:22:d6:5f:13:d0:ce:e8:70:6d:0b:
73:c7:d1:d5:15:ac:b9:b1:9c:5e:c5:7c:b4:99:38:
b9:69:8c:4c:be:eb:70:3d:68:a4:08:60:f6:be:e3:
3a:b7:17:d4:92:a5:15:75:cd:75:39:be:21:b5:73:
f2:df:8d:cf:14:c5:a9:e3:2e:05:ed:40:6a:fd:d8:
ad:4d:fc:d9:6b:25:8f:b2:ec:b3:f6:fd:7f:58:a6:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:88:42:03:34:9C:36:FF:0F:A9:EB:44:24:32:5D:DE:42:0A:F2
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:c3:6f:eb:98:da:1c:f8:11:23:c2:c8:69:4b:30:91:21:
9f:92:a3:60:9b:6d:fa:d8:20:f5:3e:fb:c1:af:0c:2e:52:2f:
40:49:c1:13:82:2a:e6:92:0b:2c:6f:cb:9b:d6:af:f9:4d:d0:
fe:b0:f9:ea:72:64:ba:82:8c:39:17:33:9d:02:e0:02:b9:28:
85:90:35:d6:ef:a9:d6:d1:54:a5:9c:a1:1e:20:f3:09:ae:d1:
dc:be:9c:7f:6c:c9:d1:2e:cc:9c:be:c9:bc:6d:5c:ad:a2:bf:
49:bc:46:91:1f:0c:02:41:2c:c8:9b:01:11:5b:17:c6:81:0b:
cf:17:cd:d6:2c:14:f8:4d:ea:4f:dd:28:96:91:d1:d6:d9:99:
2c:db:4f:a2:b4:c8:25:10:33:51:68:a4:c5:74:9b:a3:49:29:
31:c7:e5:84:84:df:e2:e2:0f:fa:f4:7e:8e:b9:65:66:ad:a5:
1a:86:e4:16:05:b4:a2:f8:31:46:b7:de:9a:a0:6a:8d:ba:42:
fa:53:97:47:52:28:46:d3:cb:c8:87:a6:fb:41:b2:50:b8:31:
30:80:9f:e4:84:2c:cb:4f:50:b5:75:66:97:39:5e:c7:18:cf:
4b:4a:29:70:1b:f0:a1:91:b7:f7:06:4b:54:06:a6:cf:d0:a3:
ea:bd:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:33 2026 by rpki-client