Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: CZVokvwJQbal0hAkgG2AS33NqgpWCqy1tTSOiBRAuMo=
Subject key identifier: 40:F9:8C:6D:44:3E:75:8F:94:4F:71:14:97:FA:07:D0:A2:FE:39:EB
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 01A0D3F02D0AC906964002E2BF0BC2154161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 1962
Signing time: Thu 24 Sep 2026 15:02:07 +0000
Manifest this update: Thu 24 Sep 2026 15:02:07 +0000
Manifest next update: Fri 25 Sep 2026 15:02:07 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: cXWb1pDir3NavI4ejnIKcAchUurGi/jfFnetRN3jjFI=)
2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:2d:0a:c9:06:96:40:02:e2:bf:0b:c2:15:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Sep 24 15:02:07 2026 GMT
Not After : Sep 25 15:02:07 2026 GMT
Subject: CN=40f98c6d443e758f944f711497fa07d0a2fe39eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:1e:17:f7:d7:d2:d8:b5:75:28:00:45:59:
e7:8c:5d:d4:b2:1c:60:81:0e:52:4b:4c:b1:4b:22:
a2:fa:0a:86:a3:ab:8a:ca:ab:3c:ec:d4:fd:5e:3a:
3c:40:dc:75:2b:c7:50:0b:79:d7:77:e4:bf:00:96:
39:3b:da:d5:38:2d:58:75:50:95:ca:77:d9:c0:c3:
b6:fb:41:d0:f2:8f:f7:4f:73:e2:e3:e2:99:69:78:
8c:f7:27:20:93:78:97:b3:48:48:47:57:9b:5b:bd:
8c:52:8a:1c:0d:bf:0f:18:ee:b0:ae:78:7d:9b:4e:
fe:db:3c:02:81:a6:3e:a0:e1:9e:cf:7e:20:e4:8c:
a0:3f:a2:2c:c9:76:7b:df:ad:ee:1a:09:24:f6:70:
11:28:36:79:3f:d9:35:ec:f0:83:8c:a2:d8:78:0c:
bd:3f:e9:09:29:bb:77:7b:c7:c6:a2:70:e6:ef:79:
88:55:02:7e:62:65:ff:8e:7a:e5:73:8d:50:11:3a:
ff:94:28:ac:6c:f2:fc:39:e8:a0:8e:ab:9f:14:49:
f9:be:7a:32:9d:56:b6:1f:6c:88:ef:eb:d3:71:c3:
ff:a3:66:99:5a:eb:b5:ff:68:d5:a3:94:09:de:b6:
b2:98:9a:9e:01:6a:a4:56:0d:ad:be:d8:53:9d:6a:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:8C:6D:44:3E:75:8F:94:4F:71:14:97:FA:07:D0:A2:FE:39:EB
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:38:92:58:92:94:2a:d3:cf:92:9e:a3:97:51:c9:7b:84:a2:
b0:91:0a:2c:7a:7b:b3:32:61:12:5b:53:d7:6e:7f:b8:9a:54:
35:42:0a:34:3e:9d:22:4f:30:b0:11:1b:f5:59:9e:d9:1e:b3:
f4:f3:c5:c4:10:71:37:bb:92:a4:8e:5f:8e:59:1a:7c:1c:86:
1e:cf:75:c7:3f:e9:b4:66:22:77:20:c2:74:f4:2a:d5:89:ca:
e1:31:e3:db:35:8a:65:14:9b:1d:1e:99:91:b8:11:0c:a6:14:
73:05:1c:6e:29:8c:21:97:a2:79:56:20:fe:d0:72:cd:9d:3e:
2f:cd:89:44:d2:b7:f4:31:df:f3:62:5e:03:f7:0f:9f:6c:f7:
35:93:e3:d0:e2:af:b4:d0:a1:21:ee:8f:97:3e:50:72:5a:19:
e7:f4:33:cb:60:ff:f3:f9:aa:cc:35:e3:00:ea:b3:51:66:28:
a1:e9:54:f9:7e:87:e8:3c:30:4a:b2:f0:5f:96:cf:65:09:42:
df:3a:6f:78:f1:f9:5c:5e:f7:02:02:b2:63:d0:62:16:66:78:
37:8a:bc:8b:15:e8:0c:e1:60:74:23:54:f5:1f:82:b1:5d:aa:
6e:af:11:ef:8e:c6:14:70:cc:9b:1c:5e:22:68:85:e1:6f:79:
16:2d:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:07 2026 by rpki-client