Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 1lfE4ja2bXtvNd1p+NIVxkUve95otcw6FUS+S6Tz9/E=
Subject key identifier: D4:21:42:EC:7A:9B:C0:6A:38:51:DD:26:DF:89:58:5F:0F:0F:0B:41
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01A0D98397F11334C630515E149B71C3B894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1A06
Signing time: Fri 25 Sep 2026 17:01:14 +0000
Manifest this update: Fri 25 Sep 2026 17:01:14 +0000
Manifest next update: Sat 26 Sep 2026 17:01:14 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: tHE0pmE3K/7pAOGpRSIV+hoaeU63olzf1UwSfCdkTlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:97:f1:13:34:c6:30:51:5e:14:9b:71:c3:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Sep 25 17:01:14 2026 GMT
Not After : Sep 26 17:01:14 2026 GMT
Subject: CN=d42142ec7a9bc06a3851dd26df89585f0f0f0b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:76:67:d7:c2:14:35:c7:b9:bc:2d:9c:73:
ca:b3:9a:58:9a:6c:ca:e6:88:39:4b:18:85:e0:f9:
d4:5c:30:8d:f7:a1:1f:d1:5b:61:a0:9d:b0:d4:d4:
fe:d5:e4:fb:dd:30:6f:64:44:f1:1c:71:05:3d:4b:
9f:68:b9:8b:ea:e8:56:30:95:28:2d:91:39:b4:d8:
91:6d:b6:53:09:7d:0f:97:66:f7:0c:6a:2e:a3:68:
7d:11:d9:02:88:23:65:de:fb:bc:ab:17:af:5b:47:
00:a2:9c:db:43:80:27:51:e1:80:ba:33:8f:04:9c:
fb:1c:6a:31:0f:b6:96:27:1e:5f:d3:c3:7d:5c:02:
36:7c:4b:83:ed:89:25:db:45:2f:f8:2d:a3:71:94:
47:ae:31:56:59:5e:e0:7a:62:84:96:67:25:ed:0e:
79:21:b0:e4:20:4f:10:07:75:0b:1a:74:19:a7:02:
f8:13:15:39:e1:28:6c:82:dd:41:7b:60:2a:d3:b2:
18:41:f8:57:2d:04:56:ed:c1:b7:a1:42:36:1d:68:
b6:24:90:db:6e:0a:36:ac:00:be:a6:55:82:3d:01:
a5:a0:a5:48:ae:6d:a4:f0:f9:67:12:5b:87:21:40:
7f:83:14:e9:60:8c:68:e9:08:55:67:a7:a5:30:ba:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:42:EC:7A:9B:C0:6A:38:51:DD:26:DF:89:58:5F:0F:0F:0B:41
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:b0:72:ee:94:29:d6:a1:3b:8f:a5:f4:37:a9:6c:b2:fa:
df:14:a6:36:d9:f1:97:23:b6:e7:1f:af:f3:0a:08:ca:28:43:
86:fb:70:a6:14:83:bc:81:2a:64:22:a6:24:a7:ed:cb:99:e7:
88:8d:60:93:b8:56:33:0c:6c:5b:68:6c:18:4b:f6:91:c5:aa:
20:c8:71:52:9d:3d:80:66:89:06:f4:d2:83:24:c1:51:c9:6c:
16:71:cf:ca:dc:c4:1d:a8:5d:b9:2d:77:30:cf:aa:ca:9a:5f:
5c:f2:e4:2a:6b:74:a2:9c:ef:76:77:94:6e:18:b7:59:8f:c7:
1d:d3:bb:12:fa:b0:1c:ca:8e:da:8e:e2:92:a8:8d:5d:dd:c1:
a0:c4:f2:f1:f4:17:f7:5a:36:ff:45:3a:bb:c0:2b:48:d1:21:
a7:1c:9e:03:31:df:bc:22:2b:e6:24:b4:1c:23:3c:6b:3e:77:
de:44:86:2b:6d:66:f6:fa:e9:be:6d:ab:05:ed:28:eb:33:59:
3a:f4:d5:cb:38:59:07:2a:d2:4d:23:bc:e0:dd:99:a3:73:3d:
ae:b6:f9:05:12:46:d8:b5:5e:f6:21:d0:38:71:e1:cc:01:82:
19:ac:1c:33:fd:ee:4b:f1:50:72:b0:fa:4e:c8:92:bf:c5:f4:
bc:97:ee:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg5fxEzTGMFFeFJtxw7iUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjYwOTI1MTcwMTE0WhcNMjYwOTI2MTcwMTE0WjAzMTEwLwYDVQQD
EyhkNDIxNDJlYzdhOWJjMDZhMzg1MWRkMjZkZjg5NTg1ZjBmMGYwYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0N2Z9fCFDXHubwtnHPKs5pYmmzK
5og5SxiF4PnUXDCN96Ef0VthoJ2w1NT+1eT73TBvZETxHHEFPUufaLmL6uhWMJUo
LZE5tNiRbbZTCX0Pl2b3DGouo2h9EdkCiCNl3vu8qxevW0cAopzbQ4AnUeGAujOP
BJz7HGoxD7aWJx5f08N9XAI2fEuD7Ykl20Uv+C2jcZRHrjFWWV7gemKElmcl7Q55
IbDkIE8QB3ULGnQZpwL4ExU54Shsgt1Be2Aq07IYQfhXLQRW7cG3oUI2HWi2JJDb
bgo2rAC+plWCPQGloKVIrm2k8PlnEluHIUB/gxTpYIxo6QhVZ6elMLqjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQhQux6m8BqOFHdJt+JWF8PDwtBMB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGewcu6U
KdahO4+l9DepbLL63xSmNtnxlyO25x+v8woIyihDhvtwphSDvIEqZCKmJKfty5nn
iI1gk7hWMwxsW2hsGEv2kcWqIMhxUp09gGaJBvTSgyTBUclsFnHPytzEHahduS13
MM+qyppfXPLkKmt0opzvdneUbhi3WY/HHdO7EvqwHMqO2o7ikqiNXd3BoMTy8fQX
91o2/0U6u8ArSNEhpxyeAzHfvCIr5iS0HCM8az533kSGK21m9vrpvm2rBe0o6zNZ
OvTVyzhZByrSTSO84N2Zo3M9rrb5BRJG2LVe9iHQOHHhzAGCGawcM/3uS/FQcrD6
TsiSv8X0vJfuXQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:49 2026 by rpki-client