Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: OciNT1z6hKWi77NYfH7YDOEA6lApLuDKZvQsdhi4Ndw=
Subject key identifier: 72:91:FC:7A:55:B0:26:B7:BB:2D:70:98:F1:78:CE:A1:FD:FF:78:9C
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019D3865F154AB46D674110691EAE8B282ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: 2SSSw5kcGUZvu021pSlMDSHyf9C1BoLShwuicebPsCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f1:54:ab:46:d6:74:11:06:91:ea:e8:b2:82:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=7291fc7a55b026b7bb2d7098f178cea1fdff789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:40:bf:67:9e:52:f9:d4:58:5e:3c:19:93:
4c:47:b4:87:31:7c:f1:50:55:13:26:67:bd:2d:37:
9b:aa:5f:97:fa:3d:fe:a3:a1:9b:d6:b7:62:61:96:
f8:46:18:f4:9a:db:dc:8f:5e:de:ca:ab:9e:63:3f:
5f:b3:4f:8f:5e:32:56:af:4c:08:f5:5e:d9:dc:23:
22:83:46:19:9f:42:03:64:97:bc:ef:d8:f6:0c:f2:
76:3b:20:ac:e4:6d:d6:41:92:df:8f:56:8d:cb:07:
9b:9c:a6:07:8d:2c:20:8c:b7:7d:45:f2:25:7c:3b:
df:5e:52:fe:9a:45:14:73:fd:ae:a4:50:d4:9a:ac:
fe:89:dc:f0:3b:f6:4c:e1:84:71:cf:8a:f4:eb:f7:
0a:b2:40:c4:69:00:6a:67:de:51:48:7e:59:87:86:
a8:9f:a7:20:03:58:c8:19:be:e2:04:49:f9:a8:54:
b1:57:45:95:67:75:3a:e3:88:26:39:7b:ac:7e:79:
4d:f6:b9:48:b0:73:70:8d:56:6e:2d:7d:a6:7e:9a:
8d:6a:fd:7e:c3:d8:a0:bb:b3:0f:c4:97:2e:85:45:
ea:c7:11:60:08:02:3b:43:da:11:f6:92:da:08:36:
76:d1:05:25:3b:10:d3:5b:fd:66:d4:51:ce:31:4d:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:FC:7A:55:B0:26:B7:BB:2D:70:98:F1:78:CE:A1:FD:FF:78:9C
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:c5:8f:08:de:7b:64:2c:2b:de:29:c3:fb:33:8d:69:c5:
c0:e9:14:68:de:63:de:1b:f1:fe:b7:45:3a:69:4f:a2:66:58:
bc:a5:05:2d:e7:21:07:47:a2:ee:d4:a4:eb:e0:e4:44:e9:b3:
d7:a9:f8:a0:ca:ff:66:47:e4:94:69:1f:13:24:30:9d:46:d0:
3e:91:a6:73:d1:7a:de:5f:ce:13:be:52:87:19:fa:37:82:65:
c2:33:8a:d9:bc:0e:58:42:be:9a:1d:77:1d:77:58:0f:92:e9:
a2:13:98:3d:d0:c8:3c:2a:cc:5b:3d:dd:c3:79:e5:3f:36:26:
f4:88:4f:46:b0:bd:c1:06:50:0d:fb:b6:7d:ac:32:1b:31:b4:
62:da:72:23:1c:59:92:26:9e:3d:18:c7:1e:7c:a6:03:df:bd:
79:77:58:d6:bf:23:51:9f:51:d2:03:73:f1:a5:ef:e1:20:c5:
8c:b2:62:3c:bf:f0:d6:bc:8d:19:3e:0a:17:af:d4:d0:19:87:
df:15:40:22:4d:4d:6a:1b:b2:30:85:62:b5:89:d4:60:cf:3a:
07:cc:92:b4:ad:8c:4e:c9:a8:32:96:28:ca:e3:72:09:f8:1c:
40:78:25:3a:f1:aa:a4:34:30:1d:42:b5:48:53:57:8f:55:ab:
79:37:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:48 2026 by rpki-client