Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: lusMbJUSN933Vdz15a/8PT5kgz0Fru5xs+01nmIYUXU=
Subject key identifier: CB:75:20:A0:7E:32:B5:3A:85:06:33:AE:B9:99:93:24:79:54:78:A2
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019D29972279EEDDC29579EC63B1964FB9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: y+5O/2auZTfztjFsWDtpgUkIgyW2y2YUvgu+h+6j1Lc=)
2: zcfQNOkF6ccvQT69R3lyZziojFM.roa (hash: xfasg7J8yeXrcszdQ4g6FVyme7srtyL3Bsu7SmCisSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:22:79:ee:dd:c2:95:79:ec:63:b1:96:4f:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=cb7520a07e32b53a850633aeb9999324795478a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:87:a1:f8:05:29:99:fd:c3:12:c5:ae:e3:
3a:c6:7a:b3:e4:3e:4b:75:2f:e8:2e:f8:ea:0e:9f:
df:1e:0c:ee:31:8a:0e:85:6b:6d:f0:11:e7:2a:2a:
0d:c9:b6:57:f9:01:99:9d:a1:98:d4:09:7a:a3:f8:
c3:1a:08:35:70:86:03:89:2c:15:f0:b2:e9:a7:16:
b0:5f:89:d1:fa:b0:43:d5:45:99:80:7b:20:69:c7:
68:1f:ba:68:11:47:50:d3:61:15:45:ee:b8:3a:de:
cb:1a:7a:ff:d9:11:a9:63:4b:53:70:01:0e:89:95:
6b:ac:b9:e8:75:21:3b:41:6d:0d:3d:ee:c7:19:32:
94:66:aa:27:63:30:69:39:3a:68:4e:40:44:b9:f5:
86:1a:9c:74:51:5f:65:04:55:4d:86:3c:dd:93:67:
de:1f:5f:04:5f:2b:b3:b5:a6:bc:49:9e:7d:ef:21:
ab:2f:80:d2:c6:d9:f5:72:99:32:d3:23:3f:90:63:
17:05:00:74:de:6f:e2:86:7d:41:bd:e2:e9:7c:6b:
3d:e6:67:ec:be:9c:43:b6:d5:0e:8d:ab:99:96:d4:
b5:4b:a1:af:33:07:6a:1a:de:8f:a3:55:34:22:06:
d0:3a:de:a0:d1:9f:21:6a:76:8e:ad:12:ee:a6:ca:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:20:A0:7E:32:B5:3A:85:06:33:AE:B9:99:93:24:79:54:78:A2
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:33:1d:d6:97:74:4f:62:f5:9e:9a:b5:d1:db:4c:58:e5:51:
9d:cb:78:54:26:8c:9a:24:e5:05:56:fe:dc:5b:77:1d:b0:04:
90:0c:17:3f:e1:bb:e5:07:f2:2a:b4:76:55:4b:06:0c:80:0a:
db:08:f6:a5:f5:4a:c4:15:79:95:ab:ca:53:bd:ae:7e:12:b9:
bf:7f:b9:1e:82:d2:3b:96:8d:1c:44:37:d6:ca:82:50:cd:de:
e3:ec:f2:9b:66:46:ed:be:31:ad:bc:7b:a0:ef:d1:99:24:e8:
59:11:f5:e5:78:43:4c:d2:ae:0f:ad:0f:27:bb:b4:2d:40:02:
b4:7f:ac:0b:e4:f9:67:cb:51:8a:13:56:22:b4:24:79:0b:89:
86:b1:f6:9f:b2:43:02:15:5a:16:db:08:04:88:fa:37:46:89:
e4:bb:f9:84:ff:95:28:31:27:df:1e:9d:a7:b9:2d:c7:3e:38:
89:2b:09:01:ce:a0:be:96:32:82:a1:fc:0f:78:b2:3c:b0:09:
cc:48:a5:53:6e:c8:99:8d:eb:fc:58:24:77:8d:52:9b:4c:3b:
2a:a0:7f:17:35:9c:b7:57:a1:9b:63:d4:53:cb:8d:bb:8f:20:
07:db:8d:59:13:e0:ec:e5:9c:d6:84:c6:5f:fc:96:c2:a2:39:
71:02:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:48 2026 by rpki-client