Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: GOilp8D8xvUppFjE9wR14enDzodLo8moXyHU7swCYa4=
Subject key identifier: 48:7A:7B:1F:07:DB:74:6E:F3:D1:1B:4C:DA:CE:AC:AF:A7:F3:72:E9
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019E1E6C251B045C9F81A3424FDC795042C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 189C
Signing time: Tue 12 May 2026 23:01:04 +0000
Manifest this update: Tue 12 May 2026 23:01:04 +0000
Manifest next update: Wed 13 May 2026 23:01:04 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: 8SboE/Frq9bsDlpRkW+8OCi5dA3zIoltd0tbUM5nlYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:25:1b:04:5c:9f:81:a3:42:4f:dc:79:50:42:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: May 12 23:01:04 2026 GMT
Not After : May 13 23:01:04 2026 GMT
Subject: CN=487a7b1f07db746ef3d11b4cdaceacafa7f372e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:16:46:1c:96:72:75:55:f3:bf:44:47:5b:
24:df:09:ba:22:02:85:5d:17:8d:c4:2b:97:da:ec:
ef:c9:aa:49:37:c0:7a:41:fe:b7:83:0d:5a:fc:d8:
a8:dc:4d:78:db:ee:f7:c8:00:f3:a3:a2:1e:ef:6a:
48:9f:92:18:65:4a:59:53:fe:60:b0:b1:bf:2f:c4:
42:f3:1b:29:fc:af:58:97:82:22:40:94:b3:5d:33:
5b:4a:fa:66:a7:99:20:ef:8c:82:57:b9:b5:39:4c:
02:22:8d:4e:37:94:d6:32:f2:94:54:e8:e7:35:fa:
2d:2d:ed:00:9e:9a:42:dc:b2:b8:e5:24:4a:64:e7:
9c:d2:cb:43:c9:7b:7f:73:91:1b:9b:82:9d:15:f4:
72:71:db:14:3f:ab:62:e8:9b:09:e8:f9:0b:46:95:
5b:2e:75:a7:0c:96:87:bd:5b:f4:7b:da:1a:6d:aa:
b2:fc:7b:d6:e4:f5:bd:53:b9:59:30:20:03:68:ba:
75:be:bd:a4:e3:ef:7e:d5:78:6c:bd:5d:54:cb:dc:
2f:fd:de:2e:c9:25:e0:15:03:39:b5:a9:c1:9f:61:
84:31:ec:50:1e:44:16:d0:77:52:6d:cc:67:dd:2c:
cc:19:5c:4a:37:90:6b:d8:9f:4a:6f:79:a6:47:44:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:7B:1F:07:DB:74:6E:F3:D1:1B:4C:DA:CE:AC:AF:A7:F3:72:E9
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f9:ff:60:e1:7c:9f:9d:9f:a6:2a:f7:81:7b:dc:5c:b7:cd:
45:bf:1a:82:c0:68:26:cc:68:b0:d6:fb:8a:32:95:a1:dd:cf:
1a:e4:23:8c:83:43:85:c9:2d:ec:a9:dd:aa:50:59:5a:ad:0d:
14:91:4e:09:63:dd:52:67:ca:1c:53:19:18:92:37:ea:eb:71:
ea:9d:33:eb:32:7e:9c:22:bc:ff:ab:1d:bb:e4:b4:c1:ee:14:
eb:67:08:bb:23:be:73:bf:aa:0f:5d:15:de:0c:23:dc:c3:29:
5f:b3:51:02:dd:23:fa:f7:77:62:05:a2:98:ef:10:22:60:81:
79:2e:39:7d:59:4c:e1:20:f3:5b:7c:fe:22:65:cc:5d:4d:dd:
51:46:e6:29:e7:8e:39:3a:60:1a:45:fe:c6:c8:fb:5d:d2:ce:
7b:5b:f7:86:cf:bf:19:2a:a2:c2:cb:a9:a4:00:07:a0:d5:fd:
37:5d:06:81:3c:cd:b4:e2:fe:18:66:0f:93:24:11:f6:f1:50:
42:72:c1:59:76:76:84:7e:6b:3a:ff:ae:9a:c9:da:d4:d8:5f:
8f:2f:80:0f:ef:ad:6d:ee:51:d0:2a:d0:e1:b3:d7:27:32:91:
23:07:10:4c:69:fb:39:a5:6d:94:cc:65:fc:f1:8c:98:33:da:
86:ed:39:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebCUbBFyfgaNCT9x5UELGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjYwNTEyMjMwMTA0WhcNMjYwNTEzMjMwMTA0WjAzMTEwLwYDVQQD
Eyg0ODdhN2IxZjA3ZGI3NDZlZjNkMTFiNGNkYWNlYWNhZmE3ZjM3MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlEWRhyWcnVV879ER1sk3wm6IgKF
XReNxCuX2uzvyapJN8B6Qf63gw1a/Nio3E142+73yADzo6Ie72pIn5IYZUpZU/5g
sLG/L8RC8xsp/K9Yl4IiQJSzXTNbSvpmp5kg74yCV7m1OUwCIo1ON5TWMvKUVOjn
NfotLe0AnppC3LK45SRKZOec0stDyXt/c5Ebm4KdFfRycdsUP6ti6JsJ6PkLRpVb
LnWnDJaHvVv0e9oabaqy/HvW5PW9U7lZMCADaLp1vr2k4+9+1XhsvV1Uy9wv/d4u
ySXgFQM5tanBn2GEMexQHkQW0HdSbcxn3SzMGVxKN5Br2J9Kb3mmR0SSQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh6ex8H23Ru89EbTNrOrK+n83LpMB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvn/YOF8
n52fpir3gXvcXLfNRb8agsBoJsxosNb7ijKVod3PGuQjjINDhckt7KndqlBZWq0N
FJFOCWPdUmfKHFMZGJI36utx6p0z6zJ+nCK8/6sdu+S0we4U62cIuyO+c7+qD10V
3gwj3MMpX7NRAt0j+vd3YgWimO8QImCBeS45fVlM4SDzW3z+ImXMXU3dUUbmKeeO
OTpgGkX+xsj7XdLOe1v3hs+/GSqiwsuppAAHoNX9N10GgTzNtOL+GGYPkyQR9vFQ
QnLBWXZ2hH5rOv+umsna1Nhfjy+AD++tbe5R0CrQ4bPXJzKRIwcQTGn7OaVtlMxl
/PGMmDPahu05OQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:56 2026 by rpki-client