Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: vrtBo81q2CDxNdz4RXx/ZNob2EJRjYP/GnK6C9KnGqE=
Subject key identifier: 52:0E:78:B6:6B:A9:71:6D:3C:A2:38:BA:C3:FA:5B:CB:CE:6D:C1:CE
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019CAD5A39038FEF6A499B979BF883F0A131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:37 +0000
Manifest this update: Mon 02 Mar 2026 07:01:37 +0000
Manifest next update: Tue 03 Mar 2026 07:01:37 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: w16FIewY9CfBdiRQNneJb4W9Pj1nJuCzkeIPFat9Elw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:39:03:8f:ef:6a:49:9b:97:9b:f8:83:f0:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Mar 2 07:01:37 2026 GMT
Not After : Mar 3 07:01:37 2026 GMT
Subject: CN=520e78b66ba9716d3ca238bac3fa5bcbce6dc1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:90:c8:66:8b:c9:f0:a6:70:2e:73:53:c0:
fd:ea:a3:e9:d0:d2:01:f6:5b:9c:39:0f:d2:64:93:
65:83:9c:61:82:d6:a1:78:97:1a:e6:0e:77:b6:15:
c7:9e:82:b8:c8:a9:b4:e4:97:9c:3a:d9:81:19:d7:
41:33:22:11:fc:1f:f4:ce:08:b7:be:a1:19:4b:99:
43:c1:cc:25:c3:1d:f2:01:d4:5b:07:1d:c5:5f:b3:
f8:f2:c4:d6:db:e7:99:a8:2c:3c:3a:73:75:22:79:
8d:68:d6:e3:bb:d0:ed:a9:15:04:29:75:22:6c:a0:
cf:45:9e:30:ff:2a:66:68:85:35:89:da:bf:83:f1:
9a:00:32:df:8a:8b:1d:3f:b0:df:3b:ae:e7:6d:cd:
e6:2e:e5:e8:66:12:d4:be:91:ad:0f:dc:a6:9a:45:
d3:29:de:17:b6:75:49:a9:ea:c3:60:f3:08:40:9b:
55:24:00:ec:74:5c:d2:21:d6:9a:79:da:ac:40:f4:
9a:20:b4:05:7e:08:ea:c6:e6:d1:6f:68:c4:1c:b1:
7c:39:10:2e:b4:ef:00:88:2f:00:c3:6b:e8:7c:58:
e8:6b:af:3f:e9:f1:d0:9c:6f:36:82:92:70:ef:e9:
8f:fc:05:ce:fd:04:06:aa:76:1a:01:20:66:a2:44:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:78:B6:6B:A9:71:6D:3C:A2:38:BA:C3:FA:5B:CB:CE:6D:C1:CE
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:de:f5:5f:6e:b5:70:56:77:5d:1b:b0:e5:88:aa:fd:4d:9e:
fe:c3:3d:24:c3:fe:90:27:1b:ba:62:ce:07:c4:f5:ec:a2:e4:
26:e7:03:ba:88:21:52:b8:f0:9d:6f:3f:29:7b:1f:92:20:26:
bb:14:6b:13:d2:8a:cf:b7:f8:8b:38:25:62:c1:3a:90:88:00:
b2:e7:9b:e5:70:d1:16:e1:e7:50:e0:1d:d9:97:11:b3:d7:56:
b8:8b:07:f6:18:da:ae:9c:39:80:2c:c4:dc:0c:b5:34:aa:59:
29:bd:ac:eb:70:76:de:39:ce:40:13:2f:00:34:3b:9a:c9:36:
69:73:4b:01:eb:26:2e:81:0c:94:8a:89:9f:64:f8:af:c9:6b:
3b:b9:ef:34:70:57:02:72:ba:ba:3b:f4:c9:66:58:0f:47:30:
04:e8:97:dd:06:f7:73:29:0d:dd:e1:b8:be:60:17:3f:c5:e0:
af:c6:11:bf:24:84:26:ab:f3:d2:99:18:2f:b1:63:74:53:91:
89:28:40:bf:4c:84:0e:10:f1:cb:89:c9:85:65:df:ae:e7:c0:
88:a1:f1:43:51:7e:bd:8b:77:f7:96:3c:64:66:21:f7:cd:74:
18:d7:05:66:7c:40:1a:12:e9:0a:07:f8:f5:9b:2b:b7:31:5f:
eb:75:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:20 2026 by rpki-client