Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: oPZgGBD7JsPkz+8qy2loKl/TXmovaKtvgXjOIS+vUP0=
Subject key identifier: E4:48:39:E9:96:2F:74:79:41:A6:00:A3:B8:41:F6:CC:B5:17:3D:F0
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019E1C4730D850A4A01C76783EEE97F79A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 13:01:27 +0000
Manifest this update: Tue 12 May 2026 13:01:27 +0000
Manifest next update: Wed 13 May 2026 13:01:27 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: K9QO6yXFwHwa6tYVl+nI/pJ9qebBXE9e6Y95MbuD8Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:30:d8:50:a4:a0:1c:76:78:3e:ee:97:f7:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: May 12 13:01:27 2026 GMT
Not After : May 13 13:01:27 2026 GMT
Subject: CN=e44839e9962f747941a600a3b841f6ccb5173df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:6c:1c:55:5e:4c:cf:09:bf:a2:57:f6:f6:
98:a5:1b:5b:4c:b3:d7:21:82:cc:55:4f:1e:24:1f:
5e:c1:9e:b2:23:2e:51:1e:36:17:f9:8a:2f:06:a5:
c7:40:8f:a9:ba:9e:fb:f5:73:d9:94:55:06:57:44:
04:1a:5a:df:51:44:20:bf:06:26:e8:d9:7a:8d:b6:
0b:1e:e5:9e:b9:b4:16:aa:16:15:c2:74:e0:80:2f:
ee:7f:24:e9:48:18:16:ac:b3:d3:6a:f5:34:00:83:
1a:89:67:87:2f:81:5c:19:ff:11:7c:04:d5:0f:d5:
b5:d4:f0:4e:73:f5:5b:9c:4c:78:21:3f:97:f2:d7:
5c:97:37:63:34:0f:f2:17:ae:e4:b4:f1:e9:2b:4e:
85:22:d8:9a:05:1e:97:09:19:64:d9:9f:dd:71:94:
de:49:03:52:7d:be:3a:9c:aa:d6:4d:e7:aa:eb:ec:
7d:9c:71:df:0c:22:1b:31:15:c3:4e:6e:44:9d:8c:
9f:b3:d4:90:6a:a7:46:19:55:1d:98:32:f7:42:9f:
f6:bc:cf:16:26:76:ad:c8:e5:3c:19:4f:d3:f5:bb:
2b:a4:a7:f9:86:b5:77:8c:14:0b:bf:6d:33:63:c9:
de:bf:14:61:22:4b:14:7e:f9:91:4a:c9:8a:f2:8d:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:39:E9:96:2F:74:79:41:A6:00:A3:B8:41:F6:CC:B5:17:3D:F0
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:25:7b:8b:25:8d:07:82:87:23:6b:44:7a:92:75:08:07:f3:
4b:99:37:9a:2a:4f:ea:6e:b4:e7:fb:b3:ed:9e:f3:49:47:a5:
e0:f1:a3:1b:80:c9:20:77:c6:4b:c2:12:88:17:26:a7:11:d5:
65:fd:92:37:f0:3a:e7:c5:bb:51:11:43:c3:8e:1a:a6:c2:7f:
6b:0b:04:8f:c8:22:5e:05:12:4e:32:f4:4e:7d:94:63:e0:35:
54:39:5c:4a:47:5c:c7:07:25:5f:8d:78:b6:b6:cb:02:3c:f7:
d6:8c:29:45:ab:a3:2b:5f:30:da:d1:6c:a6:36:4a:95:06:7f:
d5:04:f2:10:24:51:d3:63:51:7a:e8:19:2a:45:d4:d7:06:5f:
76:b1:c6:da:9a:dc:4d:32:57:14:b6:32:e0:6a:ec:a1:2c:82:
bc:e7:ed:fe:30:03:7c:57:4c:02:3d:7c:cc:ba:f3:62:95:2c:
94:81:d1:47:f9:a9:f9:46:a1:96:7d:6c:e3:32:2e:90:f9:4f:
01:cf:8c:d8:8f:d8:cc:01:4f:a5:cb:7c:7b:e5:b1:04:1a:19:
60:cf:71:25:f7:6c:06:8b:cc:c7:42:9d:6a:54:80:06:30:d7:
f7:b0:89:24:ba:f1:ff:ef:66:d4:9a:88:49:ad:a4:a7:10:98:
03:8f:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:35 2026 by rpki-client