Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: qKuTWIZ/KGlhKdBZxZoay+haoBHqpgVXBGEW/Lud1Qo=
Subject key identifier: F3:6F:0E:57:D5:26:E9:64:67:D7:A4:FD:48:CD:5C:58:21:33:8A:08
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019D98F400EC55B13F35ADBDBB0C84D38A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:20 +0000
Manifest this update: Fri 17 Apr 2026 01:00:20 +0000
Manifest next update: Sat 18 Apr 2026 01:00:20 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: sv3+BO6jSk2SE0dGLF8uQ6P/AIHutF6qBtuL9nBZJ78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:00:ec:55:b1:3f:35:ad:bd:bb:0c:84:d3:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Apr 17 01:00:20 2026 GMT
Not After : Apr 18 01:00:20 2026 GMT
Subject: CN=f36f0e57d526e96467d7a4fd48cd5c5821338a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:74:63:14:19:fc:d9:9b:e3:e2:7c:3d:87:
26:e3:77:02:0c:a5:1a:22:4d:d5:13:a1:53:e7:58:
4b:37:94:90:1b:07:42:ae:a4:2b:23:fb:92:00:0f:
9a:d0:5a:1d:eb:15:19:85:15:9c:d1:20:3c:dd:29:
95:0a:5e:87:44:83:eb:24:00:fb:f3:b4:f6:31:41:
cc:d7:47:da:e0:6d:c1:31:5f:45:c9:0e:f1:ec:47:
49:06:45:01:3c:36:6b:97:3f:2b:21:56:78:77:41:
b3:9d:6c:01:30:ad:74:8c:b1:b6:44:54:d7:3d:ff:
e3:77:56:66:14:d6:3c:e8:de:09:7f:c1:e3:2b:9d:
77:4b:e6:0e:47:c7:6d:78:27:b2:84:db:78:8f:c7:
eb:07:fc:bd:e8:c4:79:b6:0e:45:99:09:06:e3:25:
41:c9:c4:4b:a6:78:48:1e:1f:d4:56:4f:3e:e8:ef:
44:b9:e4:74:77:94:be:49:7d:e6:62:d6:ff:15:86:
9c:30:84:2a:cd:33:b0:9b:90:1a:69:d2:bb:0c:ff:
d3:4e:46:90:ff:cc:e3:bd:e7:26:6a:a8:26:71:31:
64:40:76:c7:fa:56:27:2b:90:c6:d8:fe:b1:cb:e0:
a2:88:2e:70:64:7c:37:5f:17:63:b0:a7:d7:72:04:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:0E:57:D5:26:E9:64:67:D7:A4:FD:48:CD:5C:58:21:33:8A:08
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:11:53:d7:5c:e2:dd:81:d2:2e:45:56:70:e8:66:34:c4:
c8:20:04:5f:e8:1c:1b:73:dc:f4:2d:8c:1e:33:73:c7:c3:b9:
b7:39:61:71:34:65:14:0f:7b:fa:26:6a:df:b7:b9:85:55:25:
e1:d3:41:bf:86:a6:43:f3:70:9a:ca:b4:11:48:e7:b5:4f:dd:
37:34:67:fc:29:26:87:6b:a6:bb:23:21:9b:8f:e9:2e:e6:92:
02:f7:b8:54:ca:14:63:d7:d9:f8:7c:7e:41:10:64:54:be:5b:
3f:9a:79:7d:1d:a9:a7:0c:52:82:19:a4:20:60:c9:1f:f6:b8:
8e:fe:1a:45:fa:c1:47:84:fa:4b:e9:68:f0:d2:31:72:fc:59:
e6:02:66:63:96:5f:8c:b1:7a:69:41:da:29:72:d6:f1:4f:da:
38:13:db:77:f4:cd:00:ac:85:9e:92:56:20:91:0c:82:f7:da:
9d:7f:a6:d8:a8:b4:61:3d:ce:63:5d:8a:3f:b5:fa:fc:1d:3a:
7e:04:20:a3:66:d9:c4:2d:a5:bf:62:ef:90:c1:b2:7a:9f:c9:
eb:84:07:48:31:0b:31:42:c0:3e:76:1b:ef:18:64:0c:93:b3:
fa:2d:87:dc:d9:fa:8f:fc:75:48:1c:ed:e6:e6:8a:74:2b:f7:
58:fa:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:43:15 2026 by rpki-client