Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: +SIeQ4KACNr/+yLjM8nbIxH3vBCxs2g3f1+7d0nKGG0=
Subject key identifier: 6B:B4:4C:61:91:3D:F7:AD:C7:84:38:95:4A:85:7B:34:BF:3E:C4:36
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019F8FB4CCFDFF7F309765286B3F6C7B35E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 16:00:18 +0000
Manifest this update: Thu 23 Jul 2026 16:00:18 +0000
Manifest next update: Fri 24 Jul 2026 16:00:18 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: e+IFpBvhAKriOoaLLjWjJQNx/knATQ/7J3goMNgRUmI=)
2: zcfQNOkF6ccvQT69R3lyZziojFM.roa (hash: xfasg7J8yeXrcszdQ4g6FVyme7srtyL3Bsu7SmCisSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:cc:fd:ff:7f:30:97:65:28:6b:3f:6c:7b:35:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Jul 23 16:00:18 2026 GMT
Not After : Jul 24 16:00:18 2026 GMT
Subject: CN=6bb44c61913df7adc78438954a857b34bf3ec436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:af:b6:cd:fa:3b:ab:ca:84:44:86:e2:4d:
56:2d:71:64:d9:da:95:ee:55:2e:fa:aa:10:47:84:
31:83:62:7e:8f:db:32:23:e6:df:72:96:bf:21:c2:
ad:4a:83:82:15:78:59:14:55:9c:55:fc:94:77:2d:
24:8c:74:43:3e:7a:c4:74:b2:47:59:94:7a:e6:31:
10:97:e5:62:f5:42:e9:4a:19:d1:3c:54:cd:2e:1b:
36:60:b3:0e:b1:ce:03:36:cf:a1:5c:93:11:dc:d9:
55:c5:02:3a:9e:78:6f:ac:71:0a:cf:5e:b8:a5:f8:
c7:62:6a:0f:3c:e4:66:ba:d1:a9:36:7d:56:73:f1:
40:ff:a8:70:15:fa:bc:d0:7b:66:f9:43:94:43:14:
75:61:b4:6d:93:f2:30:9c:cf:7d:53:c2:79:00:93:
31:16:b1:fe:b8:7b:bd:c6:e3:94:92:1d:1a:da:c9:
b9:7b:29:87:53:8d:cf:74:e1:25:50:41:1e:2b:9d:
d1:ed:a2:c8:d7:d2:49:72:d8:88:c8:28:2e:74:b9:
55:32:cd:20:4e:3b:81:b5:0e:90:97:6d:e3:ab:68:
c0:72:48:41:5b:54:e5:3c:21:eb:ad:c3:b6:40:06:
0c:b1:e7:a5:15:88:c2:47:de:99:6b:1b:18:7a:f8:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B4:4C:61:91:3D:F7:AD:C7:84:38:95:4A:85:7B:34:BF:3E:C4:36
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:06:48:97:d5:96:6a:5c:02:4f:31:71:c9:b5:d4:1f:d3:
5c:92:05:76:04:cf:8f:61:ba:b6:ef:ee:4d:7a:40:52:90:a3:
bf:64:bf:c2:05:62:fe:4c:04:2b:5c:d4:41:51:90:be:b4:44:
da:e7:24:30:f5:a4:82:ee:51:f5:71:7b:cb:27:98:f3:1c:93:
e8:10:f9:61:a8:e6:e6:0b:6f:84:19:d5:6f:fb:e2:86:33:60:
54:72:4e:7e:b3:2f:b0:de:77:69:fd:a0:3a:05:b7:1a:67:c0:
2c:12:4e:ac:31:c2:9c:77:22:4a:7b:2f:20:07:09:46:97:59:
7a:ba:09:a1:bb:9b:9b:d5:18:d1:5d:be:da:b4:ba:95:55:a6:
ac:19:ce:93:24:a2:09:2a:14:9e:1a:f7:2d:2d:86:45:1c:4c:
e2:32:af:1c:cd:65:e9:e6:e8:d5:1a:fe:31:60:9b:43:b4:4c:
d1:22:bf:d7:b8:0f:f4:1d:ea:6e:58:dd:8b:b9:fc:d2:ae:bb:
e1:0a:1a:d1:a1:f1:75:c2:89:bf:e5:d2:5e:2a:c2:52:09:48:
6e:85:df:cb:c2:58:d7:f0:2a:34:43:7d:e9:85:1a:48:e9:a3:
eb:a0:69:b6:9d:16:ed:21:8b:72:3b:c4:a9:79:fc:5a:62:10:
86:09:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:38 2026 by rpki-client