Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: oZA68X+Qhj8QsV1I3mdlk0JqewcwqIf0W6pqAXb8uZU=
Subject key identifier: B9:7E:53:DD:02:8E:4E:3C:F1:09:3E:B4:44:AB:27:48:C2:53:9E:9F
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 019CABD915BC3AF3491CA5934E7157D4D9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 173B
Signing time: Mon 02 Mar 2026 00:00:56 +0000
Manifest this update: Mon 02 Mar 2026 00:00:56 +0000
Manifest next update: Tue 03 Mar 2026 00:00:56 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: RSCWOw7GhIrcLQn41lPiylUdM3pQcOd1jc5cRR2lx+E=)
2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:15:bc:3a:f3:49:1c:a5:93:4e:71:57:d4:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Mar 2 00:00:56 2026 GMT
Not After : Mar 3 00:00:56 2026 GMT
Subject: CN=b97e53dd028e4e3cf1093eb444ab2748c2539e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:c5:96:ae:ba:bf:bf:3d:8b:24:6a:01:81:
93:9f:d9:0f:e6:be:42:c4:4a:aa:98:57:d1:c1:6f:
60:ea:8d:bd:4a:44:92:e2:c7:9b:f8:e8:df:c0:d7:
b5:0f:8c:da:65:74:8d:4a:eb:81:6a:76:1d:28:5a:
f7:f9:01:96:c2:23:97:b9:81:49:74:bf:41:06:37:
58:8d:dc:63:3c:7d:59:a0:60:ec:b5:44:b2:a6:91:
c5:3e:16:17:4a:6f:16:ef:a4:18:1a:aa:7a:a2:e2:
e4:65:db:f1:9f:c5:00:e9:18:0c:55:ed:30:c2:5a:
bf:3a:dc:70:47:ed:cf:32:cf:7b:eb:0c:54:c4:91:
a9:f7:d4:34:22:81:f6:f6:2c:49:42:94:ec:21:cd:
1a:0c:fb:6f:e1:68:10:e5:98:8c:fe:e8:4e:fa:a0:
f9:29:54:4f:66:18:4f:d4:81:e5:8c:43:17:f6:aa:
aa:88:96:0b:af:7e:c4:e6:b6:c2:51:6f:f4:e7:f1:
5e:aa:bc:63:2b:31:35:bc:35:e0:a2:03:b6:d6:0d:
54:73:41:66:4c:2c:7a:ac:5e:94:94:5f:62:e6:7b:
76:9d:0a:fa:73:01:95:12:27:6a:03:84:e6:0a:e0:
b1:61:0e:96:c0:bf:69:61:00:17:b7:46:c8:6c:f0:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:53:DD:02:8E:4E:3C:F1:09:3E:B4:44:AB:27:48:C2:53:9E:9F
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:fb:b0:3b:e7:65:3f:1c:fb:c4:74:fb:e5:71:99:7f:74:
b1:ba:61:d6:e1:87:6a:6e:23:d2:b2:4b:e9:21:f8:43:a2:44:
70:68:16:69:4c:eb:d8:6d:82:66:d3:5a:3b:45:34:b6:3c:b7:
0a:67:bb:b1:1b:2c:93:eb:d6:c6:c9:2c:b1:38:6f:f4:44:fc:
21:25:39:2d:9a:ae:8e:bd:9b:cd:cc:65:f2:33:1d:cd:58:f0:
eb:0f:16:cc:7a:8f:24:16:31:4c:22:c9:7e:98:ae:ea:a7:b0:
a6:10:64:46:89:cc:64:08:6b:34:ac:be:d8:f7:af:f1:af:0b:
fc:c4:f5:cb:7f:ea:09:ff:dd:b0:5e:79:f5:6e:70:23:9b:fd:
6e:21:21:23:80:19:32:0b:57:31:8b:a2:0f:c9:81:57:62:29:
7e:0b:b3:16:df:aa:2b:0f:e9:2b:40:42:19:26:89:e3:1a:72:
d8:33:72:6c:92:3c:cb:5c:ba:40:06:94:11:19:4d:96:ca:a6:
6e:cd:29:ac:55:b8:d2:ae:2f:ce:70:c4:cf:b2:7b:19:15:9d:
db:94:1f:86:0b:7d:41:2c:53:ef:b2:a8:fb:f2:40:2c:10:8a:
48:20:2b:00:6d:c0:ce:df:d2:35:d8:a5:d8:59:ee:b3:3b:df:
2e:fd:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:39 2026 by rpki-client