Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 0btfgHoOFVgPZSBS4l+dAgXbufFOv8TxL3Edx8chYTc=
Subject key identifier: C6:15:66:0D:AE:30:71:AC:C2:A1:4F:68:04:C6:B5:BB:62:E0:5F:DF
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019EC2923B65A542C170634D208BDDBFFAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 18F1
Signing time: Sat 13 Jun 2026 20:00:23 +0000
Manifest this update: Sat 13 Jun 2026 20:00:23 +0000
Manifest next update: Sun 14 Jun 2026 20:00:23 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: dVpP9K7B5GySdUIzlkHfbdhnunrrXmI7G2L3kNgHKcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:3b:65:a5:42:c1:70:63:4d:20:8b:dd:bf:fa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jun 13 20:00:23 2026 GMT
Not After : Jun 14 20:00:23 2026 GMT
Subject: CN=c615660dae3071acc2a14f6804c6b5bb62e05fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:9f:35:c9:b3:d8:b1:0e:9b:3d:36:7d:45:
22:38:5a:d5:26:e9:ac:a4:93:98:4b:87:01:0f:d6:
d1:0d:74:2e:96:1e:ff:ae:72:f1:30:0f:c1:61:28:
89:ad:0b:07:2b:5a:01:d0:ec:16:63:52:74:29:f7:
51:91:7b:22:c0:3f:a6:6a:c2:31:01:ce:81:10:89:
fb:14:c9:c2:b8:c5:46:68:b4:f5:b2:7f:ce:3a:18:
d9:6e:2a:51:02:78:3c:01:ea:b8:ba:54:70:49:7b:
a0:fa:68:3d:64:3f:f1:a3:9f:de:81:6d:3c:29:85:
62:ee:86:b6:5f:b8:ff:06:fe:38:ec:b7:12:27:3b:
fb:19:de:6a:0b:02:bf:e1:c6:fc:23:6a:e5:2c:7e:
af:67:1f:40:bf:c0:e5:97:d3:79:2f:84:68:b7:ea:
52:d6:25:c1:f2:e8:60:84:b6:aa:bb:9f:6f:56:18:
2a:38:da:41:b5:93:2f:93:8b:93:be:ef:8a:1a:98:
82:5f:88:3b:48:8f:e3:ab:93:e7:81:6c:48:95:a6:
05:f4:70:78:50:d5:da:8b:15:0b:b7:b3:7e:25:81:
bb:0f:b4:59:d5:fa:d4:d8:29:d6:47:8b:54:c1:94:
f6:e9:db:32:05:85:ee:51:91:5c:ab:aa:0e:35:9d:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:15:66:0D:AE:30:71:AC:C2:A1:4F:68:04:C6:B5:BB:62:E0:5F:DF
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4e:ad:0a:b3:8b:e8:f6:32:98:1c:a1:8f:a2:01:cb:cc:81:
24:8b:16:78:3d:b0:42:84:6c:f3:5c:86:58:5e:62:59:7e:0d:
e0:60:15:e1:53:e1:52:09:f5:7c:84:ad:4c:59:d3:d1:21:b3:
00:92:c8:f0:e5:29:97:f8:47:f4:8b:46:c3:a2:5c:23:67:6b:
bc:46:d1:20:c6:c9:eb:3e:ee:d3:b5:3a:ec:2b:27:76:b4:5f:
06:48:12:9c:05:d6:5f:95:96:da:f8:58:3c:06:86:1a:6d:b6:
ed:3d:0f:36:70:19:7e:a4:7f:e7:10:54:89:4b:bd:2f:ab:de:
36:8d:a8:8d:1c:f0:ab:3c:55:84:27:66:93:27:fd:c5:89:79:
d2:08:4d:fd:3f:7c:0d:fa:3b:cc:b9:42:ce:df:85:b5:d0:fe:
05:c1:39:0c:8d:c8:15:96:ea:95:a6:4a:60:92:06:e5:58:b8:
fd:4d:72:2a:fd:5c:ee:35:34:66:0b:b4:42:85:b8:d1:51:79:
8e:43:02:8b:38:f4:fd:7c:91:c0:f7:c5:83:d0:8d:c7:ff:9c:
69:1c:d4:12:f2:83:d0:6c:df:34:6f:34:bc:e8:2c:2f:e5:e4:
43:17:9b:55:89:ae:63:75:0c:6a:fa:47:32:76:18:7d:42:3f:
45:74:06:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkjtlpULBcGNNIIvdv/qqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjYwNjEzMjAwMDIzWhcNMjYwNjE0MjAwMDIzWjAzMTEwLwYDVQQD
EyhjNjE1NjYwZGFlMzA3MWFjYzJhMTRmNjgwNGM2YjViYjYyZTA1ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NKfNcmz2LEOmz02fUUiOFrVJums
pJOYS4cBD9bRDXQulh7/rnLxMA/BYSiJrQsHK1oB0OwWY1J0KfdRkXsiwD+masIx
Ac6BEIn7FMnCuMVGaLT1sn/OOhjZbipRAng8Aeq4ulRwSXug+mg9ZD/xo5/egW08
KYVi7oa2X7j/Bv447LcSJzv7Gd5qCwK/4cb8I2rlLH6vZx9Av8Dll9N5L4Rot+pS
1iXB8uhghLaqu59vVhgqONpBtZMvk4uTvu+KGpiCX4g7SI/jq5PngWxIlaYF9HB4
UNXaixULt7N+JYG7D7RZ1frU2CnWR4tUwZT26dsyBYXuUZFcq6oONZ2rHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYVZg2uMHGswqFPaATGtbti4F/fMB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzU6tCrOL
6PYymByhj6IBy8yBJIsWeD2wQoRs81yGWF5iWX4N4GAV4VPhUgn1fIStTFnT0SGz
AJLI8OUpl/hH9ItGw6JcI2drvEbRIMbJ6z7u07U67CsndrRfBkgSnAXWX5WW2vhY
PAaGGm227T0PNnAZfqR/5xBUiUu9L6veNo2ojRzwqzxVhCdmkyf9xYl50ghN/T98
Dfo7zLlCzt+FtdD+BcE5DI3IFZbqlaZKYJIG5Vi4/U1yKv1c7jU0Zgu0QoW40VF5
jkMCizj0/XyRwPfFg9CNx/+caRzUEvKD0GzfNG80vOgsL+XkQxebVYmuY3UMavpH
MnYYfUI/RXQGYg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:22 2026 by rpki-client