Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: gkz59Dbn0vyNBVQBvnxJOcnR2JMaTrDzrF1dv+Ib0ks=
Subject key identifier: 60:6A:CD:75:09:EF:1F:84:15:3B:BB:6C:20:50:37:0D:9D:C7:FF:2A
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019E1CEB50909568D7C8900A55E50A2D716D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 16:00:44 +0000
Manifest this update: Tue 12 May 2026 16:00:44 +0000
Manifest next update: Wed 13 May 2026 16:00:44 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: nBpBg05PU2LsPkMwPdUjj+q/q32jlZgLeyBd137Kk80=)
2: zcfQNOkF6ccvQT69R3lyZziojFM.roa (hash: xfasg7J8yeXrcszdQ4g6FVyme7srtyL3Bsu7SmCisSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:50:90:95:68:d7:c8:90:0a:55:e5:0a:2d:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: May 12 16:00:44 2026 GMT
Not After : May 13 16:00:44 2026 GMT
Subject: CN=606acd7509ef1f84153bbb6c2050370d9dc7ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:71:6c:af:74:b4:72:2e:5e:ac:bb:bc:5a:
2d:b9:36:32:e4:b7:97:bb:0a:a4:9a:7c:f9:db:97:
db:d8:16:54:d3:7f:b6:02:bc:28:b8:88:df:24:5a:
6c:dc:e5:b3:40:41:57:f3:14:c7:e0:8b:f0:9c:70:
8d:b1:1f:79:07:9c:54:ee:d2:9d:f0:2f:6a:3b:4d:
82:64:80:0d:59:b6:7f:1d:af:67:08:c9:32:3c:b5:
fa:2c:6a:1b:49:4d:36:2c:65:0a:a0:08:67:09:fd:
57:d5:9d:2b:94:e5:1c:74:5e:d9:03:ab:43:4d:e7:
a0:c0:65:fc:d0:2b:d3:02:64:31:b7:25:71:30:b8:
39:a4:04:03:e5:47:34:10:6d:c3:ca:4f:6c:22:6f:
0c:e5:90:46:8b:35:5f:56:df:64:aa:89:1a:70:2c:
92:16:b0:de:c3:1e:bd:9b:9f:6d:39:e4:b3:ef:19:
cc:d3:4d:82:c4:b2:8f:a4:8e:2f:3a:a2:f3:d5:60:
82:c4:76:99:54:fe:d6:13:99:c9:59:d7:51:f1:b3:
e7:f2:07:4e:32:75:f6:1d:b6:76:a9:be:ea:da:93:
11:00:d8:f7:16:b2:18:dc:0e:28:71:25:d9:32:f5:
26:15:27:01:93:77:b8:27:4e:67:77:0d:35:a6:0c:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:CD:75:09:EF:1F:84:15:3B:BB:6C:20:50:37:0D:9D:C7:FF:2A
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:4d:50:18:77:4a:da:1e:62:ea:b7:44:3d:3b:dd:31:c1:
b9:58:53:e5:7d:ae:2e:e1:60:13:c9:67:13:00:67:84:90:6e:
83:c5:ec:46:19:2e:6f:e0:46:e9:2d:d4:09:e8:f5:aa:32:76:
26:f2:4b:ce:d1:c6:66:a7:5a:d9:bd:f0:e5:8a:44:1c:f5:9e:
60:d2:c8:5a:b3:e7:28:79:4d:f5:c2:76:47:d6:cf:81:55:9f:
0b:86:3d:5d:5f:34:9e:43:77:81:59:72:07:51:a5:5c:88:e6:
62:5e:16:3d:5b:7f:1e:d1:12:49:dd:00:c4:bc:03:f7:83:04:
52:0d:dd:a0:e7:07:b5:a1:b8:f5:b9:67:bc:57:f5:a0:69:4d:
61:19:90:87:38:2d:a3:54:57:96:0b:64:11:ff:1a:ba:ee:86:
bd:6e:bb:85:a2:11:52:68:3f:d4:70:e8:e8:23:84:eb:e5:9b:
ef:41:63:39:2b:1e:aa:de:1b:a9:e9:01:8e:01:d7:d5:a5:25:
4f:34:c3:e0:45:d1:f7:d7:9c:d8:aa:c0:43:c3:f4:ff:4f:04:
72:2c:cd:df:c7:f8:e2:d3:9e:28:bf:ab:66:d5:d9:d0:e0:38:
73:46:ff:2e:8c:3e:96:bd:09:47:19:24:ae:7a:99:e9:4d:23:
f8:6a:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:44:15 2026 by rpki-client