Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: VGVxumh6mxFUPTxU7Jseyt6zlOnkHzF4AOIopSG9cgs=
Subject key identifier: 02:E8:70:4C:1C:FF:0E:C6:EA:98:AE:B8:C9:96:F5:3A:A6:07:1A:98
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019F8B6A8AF0D92319511A1BDB59361C3A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1959
Signing time: Wed 22 Jul 2026 20:00:43 +0000
Manifest this update: Wed 22 Jul 2026 20:00:43 +0000
Manifest next update: Thu 23 Jul 2026 20:00:43 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: bo/pEYMI48jiV0wZO3vJGcP8qcFE04scEUGPhf08xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:6a:8a:f0:d9:23:19:51:1a:1b:db:59:36:1c:3a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jul 22 20:00:43 2026 GMT
Not After : Jul 23 20:00:43 2026 GMT
Subject: CN=02e8704c1cff0ec6ea98aeb8c996f53aa6071a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:0b:56:6a:10:4e:0b:50:a8:1f:2b:b8:33:
30:ae:b3:85:eb:66:c5:c8:4f:9b:5c:d2:27:e1:51:
ea:52:d5:81:c9:59:2f:00:92:dd:47:fa:cb:69:5c:
68:ab:88:51:ce:c6:1d:d7:c8:cd:d1:6a:24:40:58:
a5:0d:3b:94:cf:27:48:e7:4e:ee:cc:4f:a4:6a:fc:
b9:eb:08:76:d7:8f:2a:90:08:e8:e2:f6:6e:91:2a:
e6:90:c1:02:a3:73:4f:16:e9:00:ad:d8:9a:b5:23:
b5:ba:13:5f:10:d3:cd:71:e9:bd:13:7d:8c:45:fd:
2c:1d:bc:a0:86:d6:08:d9:d6:26:b9:e7:f3:cc:ed:
5c:6c:5a:d8:20:18:19:6a:0a:b0:19:ac:a6:e8:33:
ea:b9:21:73:cf:be:64:a4:7b:1f:f9:37:2d:a6:25:
82:1e:1c:58:8e:5c:97:fa:6c:ac:dd:5d:e7:2e:71:
19:bc:c5:70:dd:2c:e6:de:ab:98:84:51:7e:25:e2:
08:62:b9:15:29:4c:54:59:72:b6:7b:f9:b0:9e:a3:
ec:8b:91:57:55:15:f5:df:15:fb:cf:d9:08:c8:75:
c5:5c:74:6e:2b:61:11:5c:24:97:c6:27:be:3e:85:
df:ca:08:3c:64:ee:63:8f:79:a6:5f:b6:50:fd:a8:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E8:70:4C:1C:FF:0E:C6:EA:98:AE:B8:C9:96:F5:3A:A6:07:1A:98
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:87:d4:d9:8b:7b:70:c6:56:93:f1:d2:82:33:12:a1:33:
b1:1a:2b:f0:54:80:44:3a:8e:02:48:49:0a:b2:89:b9:dd:8d:
4e:ca:cc:f3:94:d2:e0:10:ac:3a:ac:c6:ff:bd:93:83:56:9c:
e9:7e:b3:bb:91:12:95:4c:e3:4d:a9:5f:6c:97:84:b8:ec:21:
a0:64:2a:6d:06:9a:36:dd:85:a2:c7:a5:bb:e0:c1:3f:d8:5e:
80:7e:ee:50:92:67:62:7d:06:1a:07:a0:47:87:ab:be:f0:98:
62:44:06:5a:be:bf:22:82:76:d1:40:02:e8:00:65:0b:4c:36:
5b:ad:ee:df:7e:9b:60:22:a1:ff:bd:cc:6d:1f:16:c8:ce:60:
f9:b7:93:b0:ba:be:0a:0e:d6:b2:c5:25:02:b5:25:78:b6:2a:
1c:42:7d:24:b1:89:df:f2:e2:c2:97:ca:0b:3e:ef:07:3e:89:
92:66:eb:b9:ca:61:cf:a3:bf:9a:15:6a:02:98:9c:26:62:54:
f6:49:a6:91:5d:49:33:a5:96:20:f8:dd:82:b0:3e:fa:62:7b:
c3:88:0f:35:5c:17:09:4f:6e:1e:74:d9:1c:9d:60:ca:79:30:
ae:19:d3:ef:39:b4:20:ca:a5:b3:fd:d0:35:8b:7a:54:c5:ad:
37:90:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:40:30 2026 by rpki-client