Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: ix5/b9V/HawaVL8zDkHMD+CglheGtu8RdTFqYsziTus=
Subject key identifier: EA:A2:AB:5C:D4:09:9D:9B:1A:85:76:AA:E5:11:A7:05:F6:C0:69:A3
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 01A0C47C30F4B66DC9C67C85FE6EF1FACBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 195A
Signing time: Mon 21 Sep 2026 15:01:08 +0000
Manifest this update: Mon 21 Sep 2026 15:01:08 +0000
Manifest next update: Tue 22 Sep 2026 15:01:08 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: JzDmukanhxAxaj8runNiL1BV8hxYbAxX3nHsU29JqC4=)
2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:30:f4:b6:6d:c9:c6:7c:85:fe:6e:f1:fa:cb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Sep 21 15:01:08 2026 GMT
Not After : Sep 22 15:01:08 2026 GMT
Subject: CN=eaa2ab5cd4099d9b1a8576aae511a705f6c069a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:11:14:f0:21:18:51:b7:50:74:50:e5:ca:
dc:d3:c7:07:92:9d:0b:27:d7:49:38:1f:82:27:c7:
f1:04:2f:56:49:5b:85:52:54:ac:53:70:45:36:43:
15:42:ef:60:65:2d:a2:5d:61:50:9e:f8:7b:9a:7e:
5e:eb:9c:be:b8:b5:2e:91:5e:47:0b:a0:b6:d4:57:
98:e7:81:14:dc:f0:ba:6c:7f:d5:b3:ca:0a:70:5d:
0a:b1:81:d2:0c:fb:96:67:0e:6a:a2:24:31:e2:58:
91:dd:e7:1c:a3:51:1d:8b:79:81:11:40:63:a6:c1:
d5:0d:4a:54:12:8d:85:8f:5a:52:72:00:cc:f9:b7:
cb:18:34:ad:bd:0c:83:77:e6:18:54:d1:6e:52:7d:
91:de:0b:11:e0:28:b0:8f:87:6f:73:57:6b:78:ae:
e4:23:a7:da:a8:c6:89:9e:f8:ba:1b:d4:46:5a:04:
7a:71:a3:ba:a2:db:6f:a4:0c:94:f5:e7:b3:eb:63:
9c:5b:62:d6:50:1b:f2:a2:98:16:73:a2:ae:29:4f:
f2:ce:19:a2:48:04:c5:d5:b8:c4:92:e1:fb:f7:b3:
9f:ab:e9:46:9e:52:9f:fc:22:13:b6:c0:3a:43:3f:
92:af:c7:3a:51:b2:76:19:78:7e:a4:8e:79:62:93:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:AB:5C:D4:09:9D:9B:1A:85:76:AA:E5:11:A7:05:F6:C0:69:A3
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7f:e7:fd:d5:2e:06:77:31:41:99:f1:91:39:83:82:7f:56:
10:30:af:92:cd:c2:a9:af:94:8b:e5:af:e6:47:92:e6:29:4c:
26:b7:e2:d6:e1:2b:b5:d8:b8:29:01:17:75:53:90:1d:2b:aa:
80:9f:d4:d6:a7:a4:91:84:e2:47:62:69:82:30:05:3a:36:47:
cf:3a:6f:3f:83:da:8e:dd:19:a3:6b:21:81:b3:9f:5e:b7:0c:
fa:a3:9d:6b:5f:b5:08:25:96:1f:db:8d:22:b2:f1:16:0d:4c:
2e:14:fa:0c:6f:38:46:24:1f:5a:e2:9d:c7:77:84:a9:19:7f:
20:18:70:e0:1a:a0:d7:7c:3d:ca:d0:03:e7:56:ed:1f:42:24:
94:26:34:cd:b5:d2:dd:2d:b6:ea:ab:d0:70:72:a5:54:a6:f5:
5e:c6:5b:ea:b0:79:17:65:6e:b2:2c:83:04:e1:5d:68:7c:19:
2f:72:97:07:aa:e6:1b:34:b8:ac:26:d4:34:91:e6:47:0c:ea:
0d:9d:ab:94:e6:79:a3:d1:b6:1c:4c:69:d0:c4:a4:cf:eb:07:
ab:73:2a:97:05:fb:5c:84:b7:80:16:37:42:3a:6f:8a:1f:72:
4e:5d:12:26:c0:d6:98:5e:6f:59:a0:42:0d:f7:ce:0d:c1:fd:
04:25:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:32:38 2026 by rpki-client