Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: C6KixNKiGG7tZP572a+v+VS0ZKN1YwiWvy8NooaZXxY=
Subject key identifier: 21:95:E5:7A:47:72:13:68:9C:4F:3E:AE:5E:01:45:A0:A3:62:79:6D
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 019DA4F909745F4B930DBF0B67763CF270E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 17BC
Signing time: Sun 19 Apr 2026 09:01:17 +0000
Manifest this update: Sun 19 Apr 2026 09:01:17 +0000
Manifest next update: Mon 20 Apr 2026 09:01:17 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: 8a+8Ql8xNkyRA3A/HyQ3rsV/Aifq8AL4OeTzUJ1MtRY=)
2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:09:74:5f:4b:93:0d:bf:0b:67:76:3c:f2:70:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Apr 19 09:01:17 2026 GMT
Not After : Apr 20 09:01:17 2026 GMT
Subject: CN=2195e57a477213689c4f3eae5e0145a0a362796d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:61:1d:86:f1:ac:76:01:90:58:1e:46:ac:
3c:49:42:e4:d7:77:93:94:89:38:73:59:ac:89:b9:
95:2a:4d:65:6f:49:a7:d6:ba:95:d6:95:e0:cc:01:
39:e6:9a:1d:ca:84:f8:bb:14:03:72:eb:95:09:f5:
e1:19:0a:c4:24:c9:34:30:cc:d4:60:ae:80:d3:87:
2d:8f:5c:10:ef:68:de:5f:68:55:28:f6:9a:90:3e:
5b:43:2c:42:87:74:74:54:a1:af:08:7f:46:e5:fe:
82:62:8c:5d:54:62:84:c2:ce:ae:c2:b4:60:fb:3f:
4b:19:50:81:d6:b5:21:84:ef:71:8b:26:7e:26:85:
0d:be:f0:18:1b:4b:67:bb:0e:40:06:ff:fb:7c:c2:
ba:e6:a7:87:ba:7a:44:d9:0d:4a:88:75:c2:6e:4d:
00:21:62:59:a7:64:2f:53:90:ad:8f:4d:90:4b:c4:
db:f5:5c:d7:f0:70:31:e8:5f:dc:db:30:31:ab:20:
4f:b3:79:cc:4f:09:2e:82:1b:fc:af:e4:8a:a1:a3:
47:a6:aa:8b:39:18:a8:4c:76:39:53:f8:0a:67:12:
79:cc:c2:5a:45:68:26:aa:50:a4:7f:dd:7d:84:9f:
00:99:55:40:de:f2:f4:78:5c:e5:bc:d9:97:b1:72:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:E5:7A:47:72:13:68:9C:4F:3E:AE:5E:01:45:A0:A3:62:79:6D
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:63:31:db:19:8d:86:80:7f:d2:8b:a3:c6:2c:a1:84:02:00:
96:c6:d7:21:f5:01:67:89:0a:2b:77:0a:13:f0:84:6d:96:d7:
9d:21:5a:87:bd:77:b1:6d:56:db:bc:52:9f:1a:00:69:20:e4:
08:7f:ef:38:73:59:5f:98:96:ad:cb:95:73:2e:28:4b:a5:62:
3b:73:7a:32:fc:3c:92:40:df:33:38:a3:84:08:d3:d0:d8:68:
cc:10:64:0b:51:b5:8b:26:40:1f:43:73:86:6f:46:cf:25:ec:
88:e4:b6:dd:64:e3:32:a0:80:51:f3:40:c3:2e:3e:ff:f4:44:
94:a5:a2:93:37:e4:03:f7:20:61:4d:ce:b4:eb:bf:9d:bc:69:
54:9c:0f:bc:8b:12:59:e8:6d:5c:33:b8:f3:fd:7f:75:1b:18:
ee:a3:b1:7b:b8:61:5e:5b:3c:7c:22:e6:ac:a0:9c:32:f5:c0:
a2:b8:d0:05:d6:61:74:a8:29:e7:b8:43:9f:a5:4a:7d:84:4e:
2e:96:c9:fb:ef:fd:6a:ad:c1:d3:17:a5:7a:88:9b:d7:4e:72:
67:09:6b:1e:97:d9:50:60:4f:14:7c:c5:0d:64:8b:b7:d7:a2:
34:a1:4c:bf:36:d4:f7:40:dc:0e:17:26:c3:64:23:66:4c:88:
db:2b:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:57 2026 by rpki-client