Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 19ylICCbLQJALORmfE4Uk018H3bd+ksv0STCqh3m0Zo=
Subject key identifier: 76:70:A0:5C:4A:8A:2C:DC:F8:81:D2:03:6E:1F:8E:89:56:7C:DE:2D
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019D389C52DBCE0C2C79F9D86BE661989553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1825
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: OPGkHUvoH1t/syRaX6pq+nlS7gchoNmruapuNNVC7ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:52:db:ce:0c:2c:79:f9:d8:6b:e6:61:98:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=7670a05c4a8a2cdcf881d2036e1f8e89567cde2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:a7:2b:51:d2:ab:f5:7b:70:f8:5a:e8:ad:
50:b0:e1:ae:78:6a:3f:39:4e:81:61:a3:c7:61:eb:
5f:23:e8:a8:d8:d1:1c:f9:f8:34:ff:0e:46:20:91:
a4:0b:cf:64:29:8c:b6:75:35:11:20:d4:20:77:0b:
84:1d:7f:d3:93:36:23:d7:a6:42:61:ff:2c:a8:e1:
f7:06:f3:58:b2:9e:85:61:9d:f0:f5:89:2b:cc:41:
c6:8f:d6:02:58:7f:7e:88:a4:bd:59:1b:d3:8d:5b:
a8:53:bc:96:8c:df:45:18:7b:13:16:64:76:bb:e0:
00:52:c1:12:f9:8d:da:c2:0a:79:1a:cf:4d:05:21:
f3:cd:21:e4:e4:56:49:d4:c3:d7:41:3a:64:2d:7c:
26:ed:f8:74:a5:91:a3:f1:e4:f3:d5:69:fe:eb:9c:
f5:7d:1a:28:6c:51:c8:4d:b9:b6:0c:a2:39:20:3a:
06:f3:48:2e:46:40:5f:86:81:a1:8b:eb:84:b0:89:
76:8a:ea:b8:14:d8:82:97:60:dc:70:d9:42:8a:07:
af:3c:ac:3e:d2:63:03:94:3d:7c:9f:a4:d9:e7:79:
bc:76:4d:aa:a5:f9:b3:66:b4:47:99:9e:7e:e6:37:
e5:48:29:91:8b:f0:f9:0c:88:b7:e0:17:86:e5:30:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:A0:5C:4A:8A:2C:DC:F8:81:D2:03:6E:1F:8E:89:56:7C:DE:2D
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b7:d2:92:17:cd:1b:8e:69:2e:3f:19:97:39:86:9a:05:1a:
6d:2d:e4:30:d0:da:35:eb:14:8d:be:15:e8:c8:dd:ef:4a:7b:
8c:f8:e7:39:73:79:72:4e:52:86:61:83:ef:bc:08:02:cf:a9:
f2:b2:ca:94:86:80:f8:1c:68:ce:54:b3:12:6c:91:9a:fd:01:
7d:f2:99:b0:e9:88:c8:57:79:d5:35:05:e8:9d:5b:59:b8:7e:
42:ab:9b:7a:8e:38:74:f6:b4:59:5e:c8:bf:e4:12:be:07:e3:
b3:c2:57:8a:d1:68:ab:f4:4e:9c:e4:95:fa:47:fb:79:06:14:
d3:3d:6c:2d:45:53:ff:30:54:16:bd:27:a7:b2:3b:a6:ac:2d:
bf:9d:40:b4:38:fe:d5:98:8d:5d:7d:c3:b3:0b:3b:00:90:66:
39:e0:bd:73:7c:f9:25:94:e6:56:27:e8:b3:6b:e9:b2:a6:1d:
c5:42:a7:cd:13:d0:55:ca:36:5e:bb:2b:dc:e3:b1:94:1f:59:
7b:73:a8:de:54:cf:40:bc:7d:1a:c9:43:b7:15:75:c4:3c:73:
ad:90:a9:d7:c7:d3:6d:b3:cc:1f:c8:83:fc:fc:92:d7:57:dc:
cc:5d:32:34:01:7a:bb:a1:5e:e6:56:0c:68:b6:e1:01:47:0b:
a6:48:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:30 2026 by rpki-client