Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: CNk4qZq/ho5B5o5+9uma7vJyk/9BDIVblCaVDcMuuhI=
Subject key identifier: 1F:39:34:29:CC:4F:39:AD:62:B2:F7:D6:ED:3E:DD:CF:60:B2:66:CF
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019EBE7EB8FEAB79B7FE4E298CDA6A01B4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 01:00:36 +0000
Manifest this update: Sat 13 Jun 2026 01:00:36 +0000
Manifest next update: Sun 14 Jun 2026 01:00:36 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: Dy0LZNkPmNBtdcuAWw8IMOQL1GGjtDGeS2/kigXRF28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:b8:fe:ab:79:b7:fe:4e:29:8c:da:6a:01:b4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Jun 13 01:00:36 2026 GMT
Not After : Jun 14 01:00:36 2026 GMT
Subject: CN=1f393429cc4f39ad62b2f7d6ed3eddcf60b266cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:30:d6:ab:fd:8e:70:34:0f:2a:c1:93:0c:
96:03:8e:a4:9b:37:64:03:e5:f6:1c:e3:94:25:1c:
b5:87:7c:e8:a6:d8:4f:4a:54:aa:69:58:fb:46:c1:
84:ed:40:ed:64:f6:bd:85:37:eb:c9:e1:80:78:f4:
70:8a:9f:7f:e4:19:49:71:36:81:73:76:18:68:3d:
74:3d:84:4b:9c:32:6b:c9:62:47:52:f0:ba:02:14:
b6:f2:d7:33:b4:a1:ce:19:ef:00:5e:e2:00:94:04:
8c:b6:b7:4d:f3:c1:2d:ef:fd:2b:be:27:aa:1f:eb:
aa:33:37:ec:2d:57:50:b4:f7:9a:61:70:9d:ec:ca:
48:67:6c:77:93:05:ef:9c:f0:7d:e7:06:bb:1a:05:
24:2c:43:b7:19:89:6d:df:ce:3d:30:16:74:4a:92:
cb:1d:5f:e3:21:c7:34:5d:4c:22:4b:80:03:5e:5f:
fb:80:eb:8e:52:07:b1:bb:9b:af:34:cc:e5:6b:b1:
f9:d5:3b:af:ef:52:a4:51:8e:7b:78:b3:c1:9e:38:
4a:26:8e:51:c7:6d:bd:04:63:12:c6:47:7c:9d:0a:
1e:86:a6:3f:5c:9a:5e:7b:45:b5:18:93:c7:6c:da:
d0:a0:6a:72:93:43:33:87:3e:86:d2:bf:8f:c1:48:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:34:29:CC:4F:39:AD:62:B2:F7:D6:ED:3E:DD:CF:60:B2:66:CF
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b4:1a:5d:2e:e5:f7:15:95:95:e2:b1:9b:5a:d1:7d:98:d9:
88:37:bf:df:71:e3:60:38:9c:f9:c8:4a:01:e3:44:d3:88:5c:
24:bb:d4:97:1e:64:5a:7c:0d:47:14:b8:a9:9c:df:c8:97:aa:
3a:ef:fa:18:43:1f:14:03:b7:5e:03:34:36:3d:50:5c:21:cf:
db:75:d9:d8:cd:78:4d:67:42:f2:b3:e7:8e:b0:ce:ac:2c:0f:
40:80:bd:fa:70:48:8d:d6:7a:05:3a:02:eb:e5:d2:3d:4c:26:
37:aa:41:30:d8:57:8d:f0:5e:d5:83:2f:86:81:e4:a6:b6:e3:
f1:52:62:19:98:3d:06:c1:ed:ec:86:50:cc:e0:65:ba:a8:c7:
c5:6c:10:7c:1a:f6:bb:07:49:cc:3a:90:4f:bc:58:cc:92:a1:
af:ae:87:03:3b:57:21:39:7f:bb:ce:2a:61:6a:2f:66:ce:d1:
08:63:03:f8:76:8c:22:2b:ab:35:82:f9:fb:55:d3:02:f2:6f:
ad:7a:bc:19:1f:e1:3a:b5:51:0c:81:82:f0:8a:84:27:8b:cf:
d7:0e:66:c5:15:a7:cc:e8:7c:26:b5:47:74:92:55:2d:9b:6c:
10:40:e1:06:7f:1d:c9:b3:33:ef:0c:06:04:3b:ef:04:d7:4c:
5d:34:0e:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+frj+q3m3/k4pjNpqAbT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2Y3MzM3NmViNjNmMWRjZmIyNzA0MDJiZmRjZjMwMzFm
NWQ4MjUwHhcNMjYwNjEzMDEwMDM2WhcNMjYwNjE0MDEwMDM2WjAzMTEwLwYDVQQD
EygxZjM5MzQyOWNjNGYzOWFkNjJiMmY3ZDZlZDNlZGRjZjYwYjI2NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR8w1qv9jnA0DyrBkwyWA46kmzdk
A+X2HOOUJRy1h3zopthPSlSqaVj7RsGE7UDtZPa9hTfryeGAePRwip9/5BlJcTaB
c3YYaD10PYRLnDJryWJHUvC6AhS28tcztKHOGe8AXuIAlASMtrdN88Et7/0rvieq
H+uqMzfsLVdQtPeaYXCd7MpIZ2x3kwXvnPB95wa7GgUkLEO3GYlt3849MBZ0SpLL
HV/jIcc0XUwiS4ADXl/7gOuOUgexu5uvNMzla7H51Tuv71KkUY57eLPBnjhKJo5R
x229BGMSxkd8nQoehqY/XJpee0W1GJPHbNrQoGpyk0Mzhz6G0r+PwUgs8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFB85NCnMTzmtYrL31u0+3c9gsmbPMB8GA1UdIwQY
MBaAFPvPczdutj8dz7JwQCv9zzAx9dglMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04OXpOMjYyUHgzUHNuQkFLXzNQTURIMTJDVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIzLWY1Y2MtNDg2OC04YjIx
LTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJBS18zUE1ESDEyQ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y0LzYyNjJiMy1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5
ZTMvMS8xLTg5ek4yNjJQeDNQc25CQUtfM1BNREgxMkNVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrQa
XS7l9xWVleKxm1rRfZjZiDe/33HjYDic+chKAeNE04hcJLvUlx5kWnwNRxS4qZzf
yJeqOu/6GEMfFAO3XgM0Nj1QXCHP23XZ2M14TWdC8rPnjrDOrCwPQIC9+nBIjdZ6
BToC6+XSPUwmN6pBMNhXjfBe1YMvhoHkprbj8VJiGZg9BsHt7IZQzOBluqjHxWwQ
fBr2uwdJzDqQT7xYzJKhr66HAztXITl/u84qYWovZs7RCGMD+HaMIiurNYL5+1XT
AvJvrXq8GR/hOrVRDIGC8IqEJ4vP1w5mxRWnzOh8JrVHdJJVLZtsEEDhBn8dybMz
7wwGBDvvBNdMXTQOxA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:14 2026 by rpki-client