Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: oGtqck803yT2ta/KZH7DyuUYnz+whVf4KYz8aVHnn/A=
Subject key identifier: 0D:85:64:8A:E4:AE:6B:86:17:2A:23:77:BC:EF:10:B5:1B:A4:9D:68
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01A1667DCF268D85B6CD94E9A7D8C6113173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1A4F
Signing time: Fri 23 Oct 2026 02:01:23 +0000
Manifest this update: Fri 23 Oct 2026 02:01:23 +0000
Manifest next update: Sat 24 Oct 2026 02:01:23 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: N/L8bgwiJrRmpXXODsRW8Vtq0BKdbom0UaOSpCUXZXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:cf:26:8d:85:b6:cd:94:e9:a7:d8:c6:11:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Oct 23 02:01:23 2026 GMT
Not After : Oct 24 02:01:23 2026 GMT
Subject: CN=0d85648ae4ae6b86172a2377bcef10b51ba49d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:5a:38:13:89:e2:b2:e0:c2:05:9b:1e:a0:
fc:bf:82:3e:db:3b:6c:22:a6:ac:61:d3:31:19:d1:
6b:f7:9b:f3:d6:b6:30:27:56:7d:cd:ec:b1:66:68:
51:dd:93:88:fe:cd:15:79:e0:00:c4:64:97:b8:ae:
00:49:e3:83:7c:3a:25:b6:ab:44:13:bc:54:25:52:
e9:b4:3b:cd:9a:6f:d4:08:4d:e4:ec:e2:53:4b:65:
4d:cc:61:b0:aa:6b:ae:48:b2:01:7f:08:ff:17:42:
ad:b9:b8:4f:d1:f2:31:e5:bb:aa:6a:8d:47:1a:3f:
2e:98:db:10:6b:8a:b7:8c:f1:02:3c:d1:2f:84:39:
be:98:23:8f:d0:fc:08:0c:60:58:68:fb:2e:00:fb:
36:aa:47:65:24:f9:bf:df:0c:40:17:c2:05:17:b9:
c6:f3:90:c0:c7:d0:f5:04:1c:7e:55:97:1f:bc:93:
39:cc:a5:81:58:c2:bb:9c:79:07:e1:f7:d0:e5:1b:
2b:05:f7:17:36:ee:02:e6:8f:55:80:6d:f0:4f:a7:
67:42:42:00:84:a6:c7:2e:d0:6e:d8:a3:0f:36:cc:
b7:f6:85:d0:b1:d2:4a:ce:da:b0:52:0a:1d:86:a5:
0f:10:58:b0:74:3a:1e:48:91:f2:35:23:4b:9c:f0:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:64:8A:E4:AE:6B:86:17:2A:23:77:BC:EF:10:B5:1B:A4:9D:68
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:5e:89:9b:05:42:3c:d9:a5:de:8f:b5:a0:ca:40:fb:9c:
24:29:b8:a1:5a:1e:1e:a6:2b:00:9a:74:f2:85:5d:d8:4f:14:
64:49:f2:b8:e6:56:34:b0:e9:fa:f7:e5:c6:3a:c8:80:3a:e4:
ce:d3:f0:ba:7d:af:4b:fb:2a:d9:a8:db:fe:2d:3e:9a:86:96:
d4:cb:61:6d:fe:a7:f9:aa:4b:0e:47:e5:c3:d5:4a:e5:e1:42:
35:4a:79:7b:16:d6:83:34:f7:ad:2b:88:f0:84:6b:dc:29:75:
55:b5:8a:19:82:d5:e4:4e:fc:e9:53:03:fa:b7:97:73:b1:b1:
17:e0:ec:16:65:aa:c4:44:e8:94:6c:a3:09:d3:ac:77:4b:4b:
fa:bf:e0:ac:67:ee:fe:56:b5:0a:ef:d1:71:ef:3b:f4:5f:94:
cc:b3:2a:f6:19:dd:7b:38:71:38:c7:d2:0e:47:f5:ac:e2:ef:
a8:ca:be:32:d5:30:93:5c:50:c4:c9:01:70:37:39:49:90:31:
6b:39:95:bd:90:30:0d:85:63:49:fa:8d:f1:34:6b:d7:72:71:
c6:a6:10:3d:c8:64:c9:5f:19:20:d6:45:e5:02:1d:60:64:79:
fd:e7:5e:c0:10:d8:7b:0a:fd:b8:e5:55:45:73:08:31:4d:fa:
57:33:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:24:08 2026 by rpki-client