Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: I3oq7P6P/ed5/l1O+oW0f3jMAZ273KHOT3SM2T8NOsc=
Subject key identifier: C9:B0:69:5C:C4:30:66:EC:20:BD:B7:75:5C:1E:76:93:A5:4B:AD:92
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019F1754B2DCB0B57ED0F49CBB46891DAA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 07:00:54 +0000
Manifest this update: Tue 30 Jun 2026 07:00:54 +0000
Manifest next update: Wed 01 Jul 2026 07:00:54 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: wHQcxL2n2URvvmBFhsMlGYXVIUbiuQjB3n5wVpePQTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:b2:dc:b0:b5:7e:d0:f4:9c:bb:46:89:1d:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Jun 30 07:00:54 2026 GMT
Not After : Jul 1 07:00:54 2026 GMT
Subject: CN=c9b0695cc43066ec20bdb7755c1e7693a54bad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:81:6a:54:64:d8:fb:65:21:c5:41:4e:3d:
f2:a3:52:ec:31:6d:99:e9:70:ea:3a:8b:a7:fb:8c:
99:12:cd:dd:99:7c:e4:79:65:26:51:f9:89:21:d8:
92:f0:f2:4d:9d:aa:7d:8f:c8:d8:06:9a:19:2a:1b:
a1:c0:d2:c2:0b:e8:4e:47:f9:9a:0a:9b:cc:f0:b0:
ec:ba:f6:cd:fb:2c:3a:06:ac:c7:1a:cc:78:b5:cf:
9d:fa:c1:df:8c:90:82:1f:08:00:f5:08:75:f4:bc:
73:22:70:c6:1e:0c:65:12:e3:e6:ba:ad:54:c3:97:
50:ae:bf:36:dd:10:c3:e8:dd:a3:5b:f0:61:89:38:
a6:1e:91:16:d1:13:e1:52:a5:a0:24:ea:f0:64:cf:
b7:1e:24:39:fb:ce:d4:fe:f4:b2:aa:83:23:bb:b0:
8c:c1:9a:cb:c5:36:98:10:bf:ff:cc:23:73:c8:d6:
76:f2:d9:a2:d2:92:19:54:25:bd:fd:82:ba:61:84:
88:4a:94:f5:54:9a:13:38:e3:4d:d0:af:32:f5:6c:
58:b9:f0:77:53:df:f6:8c:31:8d:6e:74:f8:93:72:
d1:77:93:c0:c8:67:06:31:e0:f3:dd:dc:1a:a8:63:
1e:0b:12:85:a4:46:60:51:1a:e2:d7:81:f5:9e:a0:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:69:5C:C4:30:66:EC:20:BD:B7:75:5C:1E:76:93:A5:4B:AD:92
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:12:57:db:14:3c:21:95:1b:1d:0c:ba:67:bf:f4:39:26:5b:
66:85:3c:91:6b:36:4e:5c:c9:e9:a8:1a:b1:ab:1d:38:11:d2:
47:7e:bc:e9:c0:ff:90:6a:1b:fb:61:3e:d3:db:22:c5:ab:cf:
29:6a:23:f7:36:4a:aa:c6:f1:37:ab:2b:91:d1:f9:c4:e9:66:
24:a3:4a:b6:c0:e7:34:1e:6b:73:ba:a7:3d:53:6e:7e:5f:fb:
f8:ed:08:d2:1f:e0:92:25:55:3c:8b:bb:10:45:da:9a:56:e0:
83:37:74:ca:f0:9b:7d:13:35:10:e5:32:eb:3b:dd:29:82:53:
e6:00:7e:39:e9:9f:a7:a2:fa:2a:b8:44:4c:9d:4b:5b:53:86:
33:d2:91:a8:00:79:60:01:6b:4c:fe:76:2a:2f:72:36:99:a0:
c4:68:47:bf:4f:d6:86:d9:83:a5:c7:b3:fe:d3:6d:8a:94:cb:
b7:2b:ae:50:91:24:71:83:25:4a:17:84:f6:53:5c:71:27:06:
ed:7a:ec:93:6b:ec:04:7d:32:81:a4:10:ab:a7:2a:23:b7:49:
6e:2c:3a:02:eb:40:e2:cd:e5:ba:3c:30:8d:2f:a9:e9:b2:ed:
6c:77:d5:c6:1e:a4:78:ed:61:63:f6:2e:01:a9:94:3f:67:e3:
31:28:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:48 2026 by rpki-client