Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: LGviUH4S3Dt3Gdc5Oz76cYgmvd1HuWsgEBaKUe1QaPg=
Subject key identifier: DC:67:64:4F:F3:8C:B7:6A:9F:9A:45:38:2B:3C:6B:DF:55:AD:2F:3A
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019D2AE04287440990438EB94AF20EC8B96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 16:00:33 +0000
Manifest this update: Thu 26 Mar 2026 16:00:33 +0000
Manifest next update: Fri 27 Mar 2026 16:00:33 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: Kvee+Tmc/1d5SuY2/BidameKhAnyKRC6yJQt8W9AURc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:42:87:44:09:90:43:8e:b9:4a:f2:0e:c8:b9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Mar 26 16:00:33 2026 GMT
Not After : Mar 27 16:00:33 2026 GMT
Subject: CN=dc67644ff38cb76a9f9a45382b3c6bdf55ad2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:52:55:0e:c0:5e:0d:61:f6:7e:ec:ee:49:
c7:54:af:79:de:84:32:1d:91:d0:24:4f:c6:c1:7c:
42:44:89:65:d3:7a:4f:e1:ef:3c:df:aa:3a:e7:7a:
d6:15:84:11:55:48:31:67:2a:d5:bb:10:05:3e:2a:
d6:cc:6a:74:d9:eb:84:23:46:38:b3:e9:92:aa:74:
56:9a:f1:76:77:42:2e:df:42:18:79:2f:2e:f1:89:
c7:e3:c4:3b:18:52:8b:6f:30:4f:03:fe:c7:17:74:
92:de:6a:2b:b1:eb:fe:86:a1:e0:9c:11:69:5d:27:
67:ea:f7:7d:5c:b4:62:69:8b:a5:65:44:a1:28:f2:
4f:75:93:77:16:96:c9:fc:aa:db:be:e4:c6:91:47:
9f:27:85:05:a4:0c:17:6f:bb:ed:b6:83:be:21:71:
98:c2:f9:84:58:aa:94:d8:bc:3b:e6:42:a5:7c:91:
8b:9e:f2:8a:34:89:c0:c1:46:c6:02:cc:e7:bd:34:
86:bd:b1:c0:c7:9c:de:48:2e:62:28:bd:2f:30:13:
fc:9f:51:ff:49:d6:fd:b8:05:9e:b7:84:95:3e:cd:
9f:f2:12:8c:7d:45:5b:7e:83:7c:e6:7b:18:26:7f:
f4:f9:93:d1:ac:0f:dc:55:6b:f5:ac:54:d7:f4:9f:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:64:4F:F3:8C:B7:6A:9F:9A:45:38:2B:3C:6B:DF:55:AD:2F:3A
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7b:42:d4:43:28:7f:96:ce:4f:ec:ff:63:e2:d1:e3:30:37:
ae:6a:de:8e:28:43:ad:f6:24:75:49:e4:21:cf:19:ec:8a:9c:
32:01:43:9e:01:8e:3c:a5:ed:68:53:70:ec:e0:8a:63:75:0a:
26:e4:48:4f:c2:a5:bb:60:e4:e4:c5:ce:e6:30:a8:d8:7c:cf:
84:07:86:91:c4:8d:f7:63:2d:d7:25:b5:8a:8e:b4:6d:d4:27:
ad:f7:6d:fa:22:87:75:d2:dc:fd:9f:6b:fa:fd:d6:e4:cd:03:
fb:9c:08:0a:a2:33:60:b2:3e:ac:f1:c2:b9:7a:f1:7c:78:d1:
b3:5f:78:85:35:14:dc:39:6e:8a:00:c5:85:7a:5a:f5:db:b4:
8d:d0:58:11:25:d9:6c:67:95:79:74:68:0b:2f:b6:25:d4:fe:
9b:fe:46:06:44:97:92:8e:f8:f0:d0:7b:a1:82:9b:3c:87:ff:
70:5d:56:30:a3:3c:28:47:92:0a:d9:16:ff:65:fe:73:81:98:
06:17:ff:0d:02:09:ae:22:3f:9f:2b:fe:36:37:40:ee:34:34:
49:d7:5a:c6:47:fe:d5:66:da:2e:90:9d:ed:4b:c0:07:af:21:
c5:04:a9:63:6b:4f:82:17:35:40:50:eb:f2:09:59:19:0e:f5:
15:9e:fb:6d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0q4EKHRAmQQ465SvIOyLltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2Y3MzM3NmViNjNmMWRjZmIyNzA0MDJiZmRjZjMwMzFm
NWQ4MjUwHhcNMjYwMzI2MTYwMDMzWhcNMjYwMzI3MTYwMDMzWjAzMTEwLwYDVQQD
EyhkYzY3NjQ0ZmYzOGNiNzZhOWY5YTQ1MzgyYjNjNmJkZjU1YWQyZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt09SVQ7AXg1h9n7s7knHVK953oQy
HZHQJE/GwXxCRIll03pP4e8836o653rWFYQRVUgxZyrVuxAFPirWzGp02euEI0Y4
s+mSqnRWmvF2d0Iu30IYeS8u8YnH48Q7GFKLbzBPA/7HF3SS3morsev+hqHgnBFp
XSdn6vd9XLRiaYulZUShKPJPdZN3FpbJ/KrbvuTGkUefJ4UFpAwXb7vttoO+IXGY
wvmEWKqU2Lw75kKlfJGLnvKKNInAwUbGAsznvTSGvbHAx5zeSC5iKL0vMBP8n1H/
Sdb9uAWet4SVPs2f8hKMfUVbfoN85nsYJn/0+ZPRrA/cVWv1rFTX9J/tOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNxnZE/zjLdqn5pFOCs8a99VrS86MB8GA1UdIwQY
MBaAFPvPczdutj8dz7JwQCv9zzAx9dglMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04OXpOMjYyUHgzUHNuQkFLXzNQTURIMTJDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIzLWY1Y2MtNDg2OC04YjIx
LTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJBS18zUE1ESDEyQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0LzYyNjJiMy1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5
ZTMvMS8xLTg5ek4yNjJQeDNQc25CQUtfM1BNREgxMkNVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHtC
1EMof5bOT+z/Y+LR4zA3rmrejihDrfYkdUnkIc8Z7IqcMgFDngGOPKXtaFNw7OCK
Y3UKJuRIT8Klu2Dk5MXO5jCo2HzPhAeGkcSN92Mt1yW1io60bdQnrfdt+iKHddLc
/Z9r+v3W5M0D+5wICqIzYLI+rPHCuXrxfHjRs194hTUU3DluigDFhXpa9du0jdBY
ESXZbGeVeXRoCy+2JdT+m/5GBkSXko748NB7oYKbPIf/cF1WMKM8KEeSCtkW/2X+
c4GYBhf/DQIJriI/nyv+NjdA7jQ0Sddaxkf+1WbaLpCd7UvAB68hxQSpY2tPghc1
QFDr8glZGQ71FZ77bQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:43 2026 by rpki-client