Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: c4UPvNYh2vh1CbPDtQxBfOFM1I3X6J5WTXTrbgJIKjg=
Subject key identifier: 84:E4:61:98:6C:0A:01:1C:A8:00:B9:3F:B1:67:FD:17:46:21:6A:0A
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019E9BF2B50AE056A4C9859645A928CA1D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 18DD
Signing time: Sat 06 Jun 2026 08:00:34 +0000
Manifest this update: Sat 06 Jun 2026 08:00:34 +0000
Manifest next update: Sun 07 Jun 2026 08:00:34 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: YMcBHBsLj1os0rAbHDN5nbGJMu21iZgInlrkeecX/TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:b5:0a:e0:56:a4:c9:85:96:45:a9:28:ca:1d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jun 6 08:00:34 2026 GMT
Not After : Jun 7 08:00:34 2026 GMT
Subject: CN=84e461986c0a011ca800b93fb167fd1746216a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:a3:33:08:3c:2b:44:f5:9c:59:7f:1d:71:
af:cf:f2:6e:b0:61:35:e1:87:0f:f5:85:c2:fc:da:
dd:2f:bb:9f:e5:3d:1e:79:80:68:04:66:7a:4a:a0:
16:01:26:2d:81:85:0b:9f:0e:63:14:79:59:b2:db:
ba:2c:5d:ea:0c:d6:16:e2:cb:1d:bc:e9:e0:dc:ce:
9e:d2:0e:90:bf:2d:b9:f4:ff:a7:72:ce:c0:01:35:
b2:74:d8:fc:02:d0:07:0b:c2:62:57:de:bf:13:6c:
3d:ea:5b:cf:9e:e9:8a:8f:80:6e:07:d6:91:4c:c3:
58:55:3a:d9:23:3e:f5:42:17:45:c1:fd:24:29:04:
ae:8f:cf:c4:70:ec:67:57:b1:ec:8b:7c:ab:8d:32:
81:8d:85:87:0e:d6:98:12:3a:a0:41:e4:83:48:0d:
a3:f1:c7:aa:f9:5b:ee:c0:a8:02:24:b1:a6:40:68:
d5:4c:2d:ad:2f:10:54:a2:e8:3a:06:3f:57:66:c8:
61:7e:62:11:68:6f:0f:b4:87:a1:78:eb:fc:f5:36:
bc:44:ad:bd:09:2f:2e:73:48:d9:81:a9:50:d7:4e:
2e:79:ef:36:3a:30:bf:52:c4:33:dc:14:7b:2f:b9:
99:0d:df:59:57:be:6b:e0:07:25:5e:f7:eb:0f:9f:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:61:98:6C:0A:01:1C:A8:00:B9:3F:B1:67:FD:17:46:21:6A:0A
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a5:61:08:71:31:fd:3b:65:e5:8a:a1:a9:18:ee:72:16:b2:
12:43:34:77:4a:c4:e3:3b:ca:de:bc:05:35:ad:b7:cf:fa:54:
90:c5:ef:ac:c6:69:c9:fd:37:59:4d:f6:ad:e7:00:02:0c:91:
d7:5c:07:27:02:d9:ef:92:2c:da:90:05:c7:67:67:af:ad:e3:
e8:49:6e:4f:91:21:85:8c:95:e2:98:f3:45:5c:79:62:d7:de:
a0:c2:31:73:bc:4a:f8:ae:38:f4:82:09:45:e4:ea:b9:4b:8c:
e8:1a:86:f9:89:83:7f:c9:45:e6:4b:3d:39:a3:5d:7f:e2:fa:
5f:2a:7b:60:94:f1:d3:1a:fc:60:cb:a2:a5:6a:9f:76:2c:15:
77:29:a0:6c:d3:bc:48:95:c1:c7:77:db:bd:e5:aa:19:e0:f1:
ec:34:87:98:62:39:9c:3e:6e:9d:26:82:cf:e2:ad:b8:00:02:
01:9d:6d:06:98:49:57:b6:d6:20:26:44:9e:0a:c0:c5:a2:3a:
77:1d:35:b8:dc:27:09:67:11:30:c1:6a:ca:1c:93:0e:ee:fd:
c6:fb:04:0e:70:52:2f:e0:cb:11:34:ca:0b:44:3c:a3:fe:46:
eb:bb:d1:b8:e1:55:78:aa:fb:aa:fc:0b:af:c4:23:ba:4e:0b:
63:5c:87:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:10 2026 by rpki-client