Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.mft
File: 88Nelj4COjyvPTBECSaP_EU3QSI.mft (raw, json)
Hash identifier: IcNcyMpcI0MS64J1syrmmNvxF0my04GOITIIghqsuUY=
Subject key identifier: 7E:76:7E:48:A9:B5:55:F6:6E:E0:D3:52:CB:81:A7:7C:B8:40:29:35
Authority key identifier: F3:C3:5E:96:3E:02:3A:3C:AF:3D:30:44:09:26:8F:FC:45:37:41:22
Certificate issuer: /CN=f3c35e963e023a3caf3d304409268ffc45374122
Certificate serial: 01A0D6B935C0C43C7D62496E12FAAC03B690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.mft
Manifest number: 39
Signing time: Fri 25 Sep 2026 04:00:56 +0000
Manifest this update: Fri 25 Sep 2026 04:00:56 +0000
Manifest next update: Sat 26 Sep 2026 04:00:56 +0000
Files and hashes: 1: 88Nelj4COjyvPTBECSaP_EU3QSI.crl (hash: R+CRIw2rjWRXbiAsaP2q2jRt5VG/5/wn4R0T5V6PV0I=)
2: WP_I_o8UN9L5WtrE075PZzbfpNA.roa (hash: gt2fSq/UR0eIZCLPRB5afoyt6erdypZ54yr3oGgLYMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:35:c0:c4:3c:7d:62:49:6e:12:fa:ac:03:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c35e963e023a3caf3d304409268ffc45374122
Validity
Not Before: Sep 25 04:00:56 2026 GMT
Not After : Sep 26 04:00:56 2026 GMT
Subject: CN=7e767e48a9b555f66ee0d352cb81a77cb8402935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:3a:f0:41:07:af:ef:10:92:4c:56:83:fb:
c0:37:87:0a:83:f0:8a:ce:74:83:8b:41:64:d0:9b:
66:d7:a0:f3:14:ff:e8:c7:c5:0b:53:bd:d1:cb:53:
28:93:61:17:8a:25:f1:6d:78:4e:24:84:af:c0:de:
54:90:f4:03:c0:2f:55:66:aa:a8:ef:f0:81:24:97:
29:ac:93:80:4e:23:c4:e9:98:c4:df:b6:f7:57:97:
9a:f3:02:74:2e:32:71:a9:43:be:0f:54:ea:64:48:
c9:57:a2:0d:28:a3:3c:9d:5c:7e:21:9c:29:89:1f:
4a:63:05:4c:07:55:c0:36:d8:86:d5:a4:2a:30:bb:
ab:8d:93:24:00:ee:7c:22:c9:48:c2:a7:59:57:60:
21:75:22:35:fb:bc:fb:0c:c3:b7:7e:40:0e:f7:d1:
00:ab:b7:41:c8:fc:4d:ef:c4:dd:97:49:99:e2:13:
32:4d:3d:4e:2b:1f:09:58:38:0d:93:d9:d9:b4:0a:
b2:cd:a3:19:01:fb:92:d4:83:b7:24:04:d0:e2:0f:
c4:bf:0c:5d:1a:6d:3b:d2:28:14:93:3a:cc:9c:99:
1b:06:e5:80:07:e4:b2:00:30:41:b6:e4:f7:0b:c4:
98:a7:ff:89:dd:6a:fc:dc:aa:27:b4:29:c4:67:f9:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:7E:48:A9:B5:55:F6:6E:E0:D3:52:CB:81:A7:7C:B8:40:29:35
X509v3 Authority Key Identifier:
keyid:F3:C3:5E:96:3E:02:3A:3C:AF:3D:30:44:09:26:8F:FC:45:37:41:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:cc:3e:01:45:b7:72:43:db:5b:f2:b9:67:63:4d:cd:02:
37:79:7e:9c:72:37:8c:34:b2:69:3b:61:8c:84:c4:51:4d:41:
bd:70:74:97:72:11:dc:5e:6f:96:5f:54:06:b6:cc:f4:93:23:
48:e5:ca:93:40:0d:58:be:3f:27:2b:10:54:00:3d:80:3c:8b:
90:7b:b4:43:06:60:57:07:81:a6:19:88:35:1a:74:ce:e5:68:
79:80:fc:cb:d3:45:05:25:d4:ff:92:16:65:be:9a:b6:36:ba:
88:4f:c2:61:05:64:40:42:bb:65:96:5e:83:5c:c8:53:d0:97:
45:a8:0e:12:89:95:87:c5:18:f2:d8:27:c3:47:0a:af:ec:f8:
bf:98:6e:db:10:eb:db:ea:41:83:65:49:27:4f:82:05:4a:8a:
6a:2f:31:f1:67:32:cd:0e:a1:39:fd:b0:5a:a3:fd:ee:39:6c:
9f:cc:bb:8e:9c:0f:21:c8:5d:84:f2:20:e7:02:11:0c:d9:eb:
e2:77:31:ff:93:f1:5a:ee:0f:a4:48:9a:3f:c9:9a:1d:d6:e3:
03:8e:e5:a8:f3:e9:9d:42:f8:cf:5f:69:9f:cb:45:32:37:86:
74:91:ae:ea:30:a8:85:a9:78:76:8e:42:99:f0:82:96:c8:8a:
70:b2:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:43:05 2026 by rpki-client