Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: DQySWkwS32Q3Gz2GX50tS+phE5M3znjwLQ5ufc6afbA=
Subject key identifier: 6E:9E:B8:A9:29:8A:E7:50:78:85:FC:FF:4D:CD:8D:14:69:B6:E4:D6
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019F9324658D7778CBEEB09790A0984D786B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 195D
Signing time: Fri 24 Jul 2026 08:01:03 +0000
Manifest this update: Fri 24 Jul 2026 08:01:03 +0000
Manifest next update: Sat 25 Jul 2026 08:01:03 +0000
Files and hashes: 1: 6UmN9y_dGxk3f2bPNDV9-52tnk8.roa (hash: V5OnlzxBvWPOU5x3iXhGrQf3yLTzDNB/C3jplNE0X7E=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: Onav7h/UvkfhZUjDin2J5E3gwXecKeOr8AHdhnDIli8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:65:8d:77:78:cb:ee:b0:97:90:a0:98:4d:78:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jul 24 08:01:03 2026 GMT
Not After : Jul 25 08:01:03 2026 GMT
Subject: CN=6e9eb8a9298ae7507885fcff4dcd8d1469b6e4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:47:c8:32:12:81:2d:54:35:a8:d8:63:b2:2f:
78:85:92:b7:9c:13:fe:a6:2d:9b:01:ca:24:88:5b:
39:c8:b5:04:da:fb:1f:74:12:a5:ac:97:ed:39:54:
a1:51:dc:cc:52:15:e3:f5:45:2e:c8:3f:fa:f6:97:
08:3e:ef:04:e6:f9:80:6b:c7:d1:08:b8:b4:15:67:
df:56:1d:45:55:5f:1a:1d:a9:38:df:4c:09:3f:66:
ba:69:57:09:73:9e:a9:65:ab:3d:46:2e:e9:00:98:
ef:75:ad:34:c6:cb:e5:fb:f0:14:cd:89:f1:5d:0b:
ab:ba:68:9b:18:01:a0:2d:04:64:47:ed:e2:cd:6b:
d3:21:1a:8d:15:0b:78:1d:53:18:e4:92:32:03:04:
f1:21:6f:c5:ee:48:01:2f:ea:61:a6:35:a6:4f:ed:
ec:0f:8d:4c:5c:b7:f1:14:84:4b:07:db:3d:2b:b9:
6e:90:5e:70:4b:37:d0:a8:5b:87:2f:f1:fb:b9:9c:
8e:e4:f5:1b:34:b8:2e:07:69:b2:5b:4b:90:82:32:
b5:32:13:63:51:bb:9e:09:2b:6c:be:cf:8b:94:23:
8f:8f:98:6d:35:ab:a7:61:4d:6b:44:c5:7c:e5:e9:
bd:08:24:de:b8:6f:61:d3:91:ff:b1:e9:27:2f:dd:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:B8:A9:29:8A:E7:50:78:85:FC:FF:4D:CD:8D:14:69:B6:E4:D6
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:ae:eb:17:5b:e3:c1:b2:94:9c:68:39:af:50:4f:28:06:
19:40:e6:dd:32:d9:86:97:b9:55:8f:19:cd:3c:62:d6:88:bd:
31:b6:d6:0c:57:62:af:90:0a:57:d1:7a:64:17:fb:3f:79:58:
66:af:dc:fc:b9:01:59:91:e2:4e:11:68:d7:03:aa:f8:fc:3f:
ef:3f:9d:44:d9:12:78:d3:e3:75:5e:8c:28:27:f8:65:c3:fe:
27:d5:ba:3a:98:a2:04:38:52:34:a1:b5:b5:84:5f:ee:15:a1:
63:60:f0:77:32:e6:c4:36:e1:43:c1:87:57:27:49:90:12:8b:
f0:4d:ad:18:c6:30:17:bf:08:85:88:f5:15:a5:12:e3:4e:25:
ba:84:88:cb:f4:9e:86:09:68:75:df:0f:37:e6:e7:7d:77:1a:
ab:3e:01:c4:ff:d6:cf:26:9f:8f:66:37:76:54:ac:fd:83:94:
de:40:49:cf:b7:0a:58:72:b1:96:b1:ab:ef:a4:f5:1d:7a:0f:
58:bf:9f:48:c0:59:20:6a:18:39:7b:ab:11:8f:f8:ac:06:be:
5c:44:fb:15:2a:5e:82:a2:8b:c4:10:28:1e:97:5a:45:d9:da:
56:e4:4a:62:0b:8d:b7:06:50:7e:19:b8:c9:99:a8:c6:10:91:
90:5b:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:11 2026 by rpki-client