
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: bXSQvIcnBtV4UVo08HvidjbYUa1QdU4QpdJ0S2XaP/s=
Subject key identifier: 3F:E9:34:D0:86:29:31:C4:8F:A0:3D:77:69:AB:0B:84:6F:64:F5:1F
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 01A00100DB989EFB6AE57D36189C0CCD1CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:00:28 +0000
Manifest this update: Fri 14 Aug 2026 16:00:28 +0000
Manifest next update: Sat 15 Aug 2026 16:00:28 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: R6O0kqiSKF9R8QZ8HuG8WzJfX/xH/cxsaXHG5EGUWdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:db:98:9e:fb:6a:e5:7d:36:18:9c:0c:cd:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Aug 14 16:00:28 2026 GMT
Not After : Aug 15 16:00:28 2026 GMT
Subject: CN=3fe934d0862931c48fa03d7769ab0b846f64f51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:b3:8b:99:77:a2:c5:1a:db:e6:30:79:69:
02:b7:b5:93:b2:65:45:59:7d:e5:a9:51:ce:e6:c1:
0c:9a:94:b2:7f:1a:e6:bf:4e:91:9e:3c:ed:be:86:
32:3d:74:95:93:5c:69:f2:17:84:56:fc:99:75:e6:
42:c1:47:e4:a1:2c:ed:83:c4:5e:b4:a9:d0:d1:35:
4f:25:fa:8a:b4:29:dc:58:73:0c:6a:6b:b3:54:1d:
57:d5:4c:f1:8e:e5:a2:0b:18:13:51:bc:58:5a:29:
5e:c5:e1:c9:b0:93:f4:b1:9f:88:60:06:31:ac:a5:
7f:39:ab:42:de:73:39:61:44:75:44:28:b0:13:e3:
0b:28:6b:70:e2:ad:ee:31:78:50:13:32:2b:6f:e7:
a1:be:88:bc:51:d3:ca:ea:1e:cb:a2:a0:30:2c:29:
2f:e0:fb:4e:21:31:a6:c1:97:c4:ca:10:5c:73:0f:
47:c2:35:16:1b:24:5e:e9:6d:98:bb:4f:43:89:89:
49:c0:f6:c6:03:86:a9:e6:d3:dd:14:55:4d:17:e8:
b2:1b:c9:82:93:0b:38:c8:21:d6:0b:0c:30:b5:56:
f9:86:09:89:e6:55:86:da:30:c0:45:c8:ec:df:cc:
62:ed:d8:21:11:fd:6c:02:bb:54:2b:33:3f:4b:86:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:34:D0:86:29:31:C4:8F:A0:3D:77:69:AB:0B:84:6F:64:F5:1F
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:69:91:d7:5a:02:60:c7:f6:bf:17:76:9b:57:51:63:4c:1f:
db:9e:89:bb:b2:88:a8:74:b4:88:fb:89:4f:a7:6d:10:f6:e3:
ec:a3:82:5b:ee:aa:32:77:e7:c5:38:82:14:38:95:24:a9:e5:
7e:fb:59:56:4e:f9:c7:31:f0:7b:96:56:9b:73:0f:7f:f6:21:
81:0e:ea:ce:57:25:c0:fc:51:ee:3e:18:bf:07:9c:e3:88:eb:
97:b6:18:4c:54:1a:8e:66:c5:bb:7b:51:68:a3:b3:c8:6a:7f:
39:ff:f9:9c:69:cb:80:83:ae:39:56:76:27:11:46:f7:d3:bf:
bb:70:13:0a:4f:c9:3e:36:80:33:46:ec:be:b8:02:2c:95:3d:
a2:e4:f8:66:65:e6:b4:c1:df:67:88:68:3f:f9:82:34:df:23:
c0:75:a0:b8:0a:cd:d8:de:a0:c9:e3:eb:54:f4:b9:b0:b3:78:
e4:5a:f7:52:02:97:21:d5:e0:4d:e3:cc:c3:8a:c3:b3:b1:b6:
55:75:73:74:00:8c:ce:4b:bd:8d:62:cc:12:0d:bf:80:d1:90:
f4:0f:93:1c:88:c7:43:e2:fc:e0:db:7f:c9:0f:64:9a:ff:2c:
32:c9:99:90:b1:c7:d9:26:4b:6e:3d:02:e2:4d:5d:ab:88:4c:
5c:a7:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:03 2026 by rpki-client