Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: SVR1xH4fa5VeqDpTYh8Vagp0ocCCbOU+HzJLPBjyH9s=
Subject key identifier: F7:48:F0:37:72:E0:D4:C0:EB:59:8C:30:ED:84:99:AE:EC:E5:58:6A
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 019D371B995706EBEFEBF944511AEC03144A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: 6dUxfRDVvKcwt8R9v2uXqRClu/mIHDhwyJP0dRsn21A=)
2: zcfQNOkF6ccvQT69R3lyZziojFM.roa (hash: xfasg7J8yeXrcszdQ4g6FVyme7srtyL3Bsu7SmCisSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:99:57:06:eb:ef:eb:f9:44:51:1a:ec:03:14:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=f748f03772e0d4c0eb598c30ed8499aeece5586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:8b:da:e7:06:42:f2:b5:6b:8f:97:33:41:
89:8c:65:da:cd:92:c6:6d:ff:6c:dc:b9:02:da:b5:
ea:90:ff:a2:7d:c8:84:7e:50:ba:34:1d:42:ca:3b:
de:e3:f2:17:c3:ef:b0:04:ce:62:f9:70:79:e8:90:
3e:1d:90:18:70:4d:2d:f8:a5:a8:4d:fa:6b:f6:c0:
80:3b:44:5f:cf:70:ce:b2:9b:e5:94:cb:6e:5e:c0:
f7:bc:7f:08:c1:08:1e:b2:d0:ec:02:03:ce:9b:b1:
ae:a3:7a:27:c4:44:28:41:70:5b:77:67:8e:5b:fc:
01:90:cf:20:8c:7e:41:62:8f:5e:48:d9:c6:b4:7f:
e6:c5:c4:68:d4:a9:3e:9b:e9:82:58:44:a2:21:77:
71:f4:13:fd:18:4b:97:41:ff:9f:bb:e7:69:f3:e5:
c1:9a:30:64:ed:7f:71:c5:ed:0e:de:0e:54:64:16:
a1:0c:2d:45:21:ef:43:c7:2b:18:cb:5f:2d:5e:e2:
56:e6:75:fe:82:eb:86:ce:07:90:f0:e4:32:76:1d:
2a:2b:f8:65:83:3e:a5:b6:c2:4a:61:4b:5b:70:13:
29:a2:5b:a1:2b:61:ba:1a:38:7b:fd:34:a4:f8:9e:
37:f0:53:80:93:f4:18:60:c8:3b:aa:91:bc:e8:a5:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:F0:37:72:E0:D4:C0:EB:59:8C:30:ED:84:99:AE:EC:E5:58:6A
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8e:04:55:ed:6d:6c:63:5a:82:c2:04:7d:cd:58:b8:d7:5d:
c7:5c:46:e9:cd:fb:3b:6b:7f:dd:e4:bf:6f:1e:a0:3b:1b:26:
e4:21:58:70:be:b7:56:54:1c:c6:37:e4:db:a0:e7:8b:f0:dc:
6f:15:ed:a8:01:a5:d8:e5:c0:cb:44:90:3d:81:8d:3e:62:d4:
3b:50:55:4b:86:07:28:80:ff:31:32:68:6a:46:39:85:95:02:
dc:9e:14:e8:90:bf:b5:3c:40:23:90:b2:be:d0:84:31:c1:1e:
b8:d8:4d:8e:5d:3d:e5:f3:e0:01:c9:74:7f:93:1f:32:c7:2b:
9c:2a:d2:9e:71:fc:0a:4a:61:06:26:4d:ec:14:d0:d4:fa:31:
54:cf:5d:c4:db:66:85:c1:c0:a0:15:96:a6:18:82:a3:ea:df:
7b:47:ea:af:fe:a3:2a:dc:d9:f1:9a:80:cf:be:07:a8:ca:70:
6a:57:6c:b3:f2:cd:95:93:6e:da:ea:88:52:47:a7:8b:09:41:
3e:68:f6:52:2a:20:34:87:d2:9c:3a:6e:ca:92:4b:d4:29:76:
9d:d2:a0:d9:69:92:ee:23:2f:fe:e5:31:62:b0:11:92:29:a4:
ff:1f:ed:ad:ea:ea:ad:fc:38:23:4f:c5:87:33:03:98:e5:9e:
ee:40:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:58 2026 by rpki-client