Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 2KYCivIZBM9rqmKjVyqXAO654xhWnJ+Z7IEwhuAkPp4=
Subject key identifier: EA:E8:A2:26:EC:A9:5D:DD:F1:31:85:6B:DE:8E:FA:A9:C3:97:0B:85
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019D273AEAE7E0DE23C5E07E717F22E3E038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 181C
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: k5bg7Ni6ZiJYL0iCOTgEVQ20Ix3BKEmk2VczxgzUwlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ea:e7:e0:de:23:c5:e0:7e:71:7f:22:e3:e0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=eae8a226eca95dddf131856bde8efaa9c3970b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:2d:0b:45:8d:24:c7:5f:ea:70:df:6e:64:
d8:98:ac:8c:98:c6:35:26:c2:bb:1c:17:c2:e4:0e:
4a:18:f8:a0:fa:90:e8:d8:7c:0d:22:23:75:ff:5e:
cd:8a:23:63:76:a9:23:17:35:20:db:28:a1:1b:85:
b1:4e:9e:ff:1a:5b:d6:bf:47:e9:9d:9d:d7:1e:fe:
25:2a:e9:23:60:1b:92:b9:26:76:96:c2:8c:72:eb:
a9:30:69:5c:0d:6b:59:62:60:0c:6f:9e:9a:5e:c1:
09:05:3b:d2:c2:6b:9d:76:0d:56:c8:7d:e8:2f:d8:
ca:69:cc:3f:e3:54:0b:5f:6d:46:9b:e5:84:04:84:
c9:5c:1d:e3:f0:e5:65:98:b9:e7:ae:63:30:8e:e7:
c9:0f:1d:29:6e:a3:17:c3:9d:c2:79:b6:ac:3a:45:
e7:82:8c:8f:f4:eb:49:3a:f7:56:96:31:a6:79:db:
fc:3d:7a:4b:d4:cb:36:12:db:e6:94:c7:2d:ce:23:
f3:a4:00:87:1e:90:35:e0:c1:a3:0f:90:d7:0b:f3:
41:a5:67:41:7c:a1:a0:46:57:2f:76:35:1b:c3:fd:
d8:00:c1:00:c4:be:0d:ab:6a:a9:1a:fc:e5:92:0b:
31:7c:87:06:4f:c9:cf:35:05:46:7b:22:0a:71:cf:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:A2:26:EC:A9:5D:DD:F1:31:85:6B:DE:8E:FA:A9:C3:97:0B:85
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:28:81:f4:58:57:00:ef:ae:f6:ec:99:69:4a:d8:12:b0:b4:
e7:22:e7:64:41:83:ee:cd:f9:82:dd:00:d3:2c:4c:14:a3:0b:
8f:65:dd:7a:6b:e4:5e:27:dc:a4:ab:d4:83:6f:e3:ff:20:30:
00:1b:86:c5:2d:d4:9b:fa:b8:a4:68:82:ca:35:98:64:00:65:
50:24:97:e1:cc:88:04:66:e3:48:f3:0e:4c:f4:6a:53:c8:e8:
af:d0:c3:77:77:38:4d:d4:97:75:07:5e:60:0a:94:de:a6:d4:
7f:98:60:dc:e3:bb:c5:04:c6:af:63:e1:01:fd:99:ed:2f:fd:
d1:62:48:29:ec:fc:4f:89:f0:71:27:00:da:fd:37:bd:ce:3a:
8c:b0:e6:bf:0d:a7:bb:4e:b6:9b:d2:b2:3f:ac:12:99:a9:f5:
6e:1a:4f:91:21:28:83:f3:ee:55:d8:6f:e8:6a:5f:4e:3d:cb:
f9:b8:99:1d:09:06:53:b8:d7:47:54:60:30:a7:1b:88:28:fd:
2a:c3:97:0b:e1:d2:11:19:24:51:73:2c:0e:e8:22:c5:7b:9c:
61:21:3c:2a:32:78:03:48:91:64:c2:11:93:b3:16:24:64:bd:
c7:b8:1a:6c:8d:23:4b:5e:92:db:30:ee:60:de:1d:97:04:1b:
4c:62:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:26 2026 by rpki-client