Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: fry2+PROiHAHUGiZhG0AbDV8gFxjdQgiDsRPC6FUnB4=
Subject key identifier: F8:6E:9C:B1:F8:6F:D9:A9:E9:EB:DE:C0:72:AA:ED:7D:A6:79:17:35
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 01A13DB7BCEE8FCF546D3F6EA1EEE0013B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:00:13 +0000
Manifest this update: Thu 15 Oct 2026 04:00:13 +0000
Manifest next update: Fri 16 Oct 2026 04:00:13 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: U+gWpNHDH0gHlYJr/og5O0eWQ+bB8n4SPg89m+ja+zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:bc:ee:8f:cf:54:6d:3f:6e:a1:ee:e0:01:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Oct 15 04:00:13 2026 GMT
Not After : Oct 16 04:00:13 2026 GMT
Subject: CN=f86e9cb1f86fd9a9e9ebdec072aaed7da6791735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:5f:33:04:59:50:81:59:b5:d1:b8:5f:00:
8a:73:5e:39:55:ec:19:20:fc:33:9b:e5:af:9d:58:
9f:fa:57:c5:90:02:d1:50:07:82:ff:71:b8:ac:7e:
4a:63:17:8f:e2:fd:55:98:cb:c0:8b:ed:c4:5d:ad:
ab:e9:81:f7:61:88:03:0b:35:ec:2c:04:8c:7a:17:
2d:e2:c1:15:b3:ce:ee:05:a1:1c:7e:58:87:5f:ad:
17:2e:83:0c:8d:ea:2b:aa:00:44:20:83:3c:cc:ee:
fc:ed:e5:05:dd:66:4f:50:af:92:24:fc:24:b9:8c:
64:d4:8f:c6:16:45:47:3b:8d:ee:2c:c7:7a:db:ad:
82:b3:0a:1c:be:22:1f:69:3c:91:25:6e:5a:69:97:
db:9b:f4:ef:f8:b2:8a:b7:bf:6d:d5:64:60:1c:e0:
2c:eb:0a:c0:f6:e8:86:f5:92:04:80:53:d9:ac:94:
1f:c3:83:78:2b:b8:75:f2:52:88:09:65:ca:bb:a6:
9d:d9:f1:81:13:7d:69:3b:2d:2c:e1:4b:88:78:df:
38:5a:07:b4:89:94:f4:97:1c:dc:d3:34:af:cf:a9:
9b:bc:8e:9c:9a:c1:ed:f6:3e:69:25:24:c6:f7:b4:
37:fd:f5:a9:71:16:f9:2e:17:5d:ea:53:ba:e8:6c:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:9C:B1:F8:6F:D9:A9:E9:EB:DE:C0:72:AA:ED:7D:A6:79:17:35
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:02:e3:7b:d6:9c:a8:2c:8a:c7:ad:d0:d7:b2:40:56:8d:
23:92:f6:ea:cb:ef:99:d1:3a:57:84:f9:7c:69:81:15:03:17:
d4:f1:88:9c:da:21:ad:4e:1c:4c:97:b7:6d:75:25:0e:72:2d:
e2:fc:d4:4f:1e:7c:f6:96:69:81:9c:7f:9f:48:5e:bd:5c:19:
6e:8d:96:2f:40:71:e5:90:c1:b2:71:35:52:e8:ce:b8:2b:cc:
c6:7a:60:be:a0:c5:c6:b7:13:63:0a:b9:a9:c1:36:a9:ca:7c:
a5:05:c7:9a:33:8d:8e:a4:ff:5f:70:7f:ba:2b:86:98:df:91:
8a:4e:fc:e9:68:4c:68:86:b1:5f:bc:3b:a7:4f:1a:b0:ae:52:
93:37:9a:3c:b3:9a:14:ef:e5:88:d1:09:c2:ed:a3:a9:0a:bf:
a3:d5:56:f1:a6:fc:2e:c6:5b:b0:44:d5:b5:8a:56:51:89:46:
f1:c7:9b:29:1f:94:35:a1:7c:bf:0f:c8:e1:6b:ba:fe:b7:72:
20:94:c7:ce:ef:a6:72:1e:88:97:a8:68:ec:8c:a1:ce:a8:f8:
1d:a0:f6:ff:e9:c6:3a:6d:67:75:fc:08:48:f8:a2:9b:35:c9:
22:aa:bb:d8:1c:a2:cf:9e:e0:4b:83:1f:06:fb:f8:62:10:5f:
c1:f4:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:15:09 2026 by rpki-client