Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: LRL3Gz4zZSnAMOS922c+IH3lviiLVzBUvpuQCCRMYnU=
Subject key identifier: D4:87:78:2D:7F:CB:79:78:F9:CA:D1:C8:90:34:01:43:0E:F6:05:30
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 01A0CC6C06FF00EDF93CD866607D00A7BF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 04:00:26 +0000
Manifest this update: Wed 23 Sep 2026 04:00:26 +0000
Manifest next update: Thu 24 Sep 2026 04:00:26 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: MpCgWj3i01IFAVgVClL6PmsTWEczU+jvIr1wYkJ+nBM=)
2: zcfQNOkF6ccvQT69R3lyZziojFM.roa (hash: xfasg7J8yeXrcszdQ4g6FVyme7srtyL3Bsu7SmCisSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:06:ff:00:ed:f9:3c:d8:66:60:7d:00:a7:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Sep 23 04:00:26 2026 GMT
Not After : Sep 24 04:00:26 2026 GMT
Subject: CN=d487782d7fcb7978f9cad1c8903401430ef60530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:6a:a4:a8:3a:83:1d:66:fd:75:49:68:cd:
f7:18:0e:68:b2:10:6f:ee:1d:a1:b9:06:d5:4d:e7:
af:e3:8b:3c:3c:f0:94:ee:86:9d:92:37:6d:71:d9:
d6:34:e3:75:3c:67:c2:a8:0b:3e:92:f2:70:3c:90:
1d:1d:5f:14:33:e9:55:a2:ce:8c:fb:27:10:e1:bd:
49:c1:16:1e:b6:2b:88:e2:b0:70:78:48:64:39:df:
fc:b5:b3:ca:56:51:61:a2:f2:cf:27:89:e5:fe:ae:
21:c9:58:18:0c:29:92:de:9d:63:44:da:96:5f:7d:
48:b2:74:65:67:32:d7:00:19:49:e4:53:2b:0a:2d:
67:c2:dc:1a:13:77:da:b9:fb:7d:f7:4b:91:7c:97:
f5:1f:62:f3:33:7e:e1:b1:c4:e2:67:c6:06:02:d9:
2f:61:c2:e3:10:79:0c:4f:36:3f:db:ab:d3:be:3e:
44:45:df:96:e0:d4:15:d2:a5:30:41:3b:2c:1f:f5:
e6:d3:69:1b:ce:23:f9:f1:5e:47:95:9e:ee:07:e4:
18:51:55:6b:f6:09:35:80:a7:4a:0a:8f:b3:d3:4b:
c8:59:4f:ee:a9:f0:ed:a1:55:a1:ec:78:c0:c0:a6:
d7:26:6a:7d:52:de:ec:e7:ee:b3:1e:6a:21:a5:af:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:78:2D:7F:CB:79:78:F9:CA:D1:C8:90:34:01:43:0E:F6:05:30
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:63:9d:bf:d2:95:0f:83:4a:15:97:b1:76:26:55:65:57:67:
b9:07:7d:6b:1f:43:26:b8:60:f5:12:1b:86:b7:fc:6e:66:07:
ab:fa:dd:ae:47:5f:a0:a6:c7:e1:0d:5f:0b:c7:d8:45:87:3d:
b6:af:ce:7a:d3:8f:92:ef:a5:0b:d5:95:bc:89:bb:4a:f7:1d:
50:48:9a:7d:1e:d9:af:45:c1:b7:9c:e5:2b:ea:4f:4c:32:97:
6d:28:ae:49:4a:bf:e7:23:9b:56:6f:97:08:46:b9:63:ac:be:
94:78:49:a7:f7:f7:b5:fb:dd:19:bf:77:e5:4e:33:8f:15:db:
ab:dc:86:53:9a:78:8c:5d:99:9b:dc:c1:a4:e7:bc:3f:2b:b2:
a5:0d:d5:3f:70:43:f8:64:15:fc:0c:11:79:7e:5f:1a:8b:33:
c1:e1:85:62:ce:c3:e6:99:da:1f:7c:a9:d8:30:15:4d:e2:13:
21:e9:e5:c1:3c:21:98:42:7c:23:a2:63:b9:72:0c:b3:a5:fc:
39:0d:2a:9f:91:a0:09:e5:67:ba:9f:20:0c:f4:47:2b:6c:c7:
42:9b:38:b1:f6:29:bd:81:10:ef:78:fa:7e:4d:e5:61:59:88:
7f:a9:5d:1c:ed:19:79:2f:61:3e:8f:8a:83:2e:b1:bd:7b:ef:
f1:b7:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:48:53 2026 by rpki-client