
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: Oy64ZhzzcE7aPAuWTHCYq6NqBTlxzl4FX7DoCh4WNqc=
Subject key identifier: 55:95:3C:7C:7E:EC:F8:17:AF:DD:56:02:56:C7:D0:62:46:90:21:DB
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 019D38D3021B8E2834FF59B82EA218F337B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 1784
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: LFjw+hxwi3kFYlLskiHBTHmaMHrv6otGnownITqHuGc=)
2: tpS4SRewgQveWEqN8jQYHocUHz4.roa (hash: Qa6Rge99iiaCXX5JRqulbHyK6kc2b9lfPPgKkNoLLbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:1b:8e:28:34:ff:59:b8:2e:a2:18:f3:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=55953c7c7eecf817afdd560256c7d062469021db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:c8:32:b4:c4:4c:ec:25:1f:0d:8c:15:31:
24:84:c0:c7:81:c3:87:cd:18:07:8b:55:cb:69:aa:
bf:90:60:30:ae:3f:ca:ad:52:bb:16:5b:49:b3:55:
ba:ae:5f:f9:d4:a0:85:bd:e3:cf:42:01:39:0d:72:
d9:0f:b7:e3:dd:ea:d0:ca:89:ba:1f:4f:15:db:49:
2e:71:e0:e4:85:37:f2:23:86:67:ad:ae:e7:57:42:
71:99:8f:0f:66:01:e5:d7:c5:26:ad:92:c8:9b:74:
06:24:8e:81:0d:40:23:1a:5f:d3:c0:d2:bb:fc:85:
49:29:96:c0:a0:23:57:d8:ea:46:a3:d1:85:eb:c2:
01:9a:20:b0:78:78:0a:33:ef:2f:2c:52:e5:d7:78:
20:81:4c:0f:79:d5:02:05:fa:81:83:bd:fe:5f:d6:
53:9f:8d:06:43:ad:b0:ab:45:d2:f5:d7:6e:24:00:
c2:82:ff:f6:8f:76:f2:51:86:8c:70:6d:44:4f:10:
5e:ae:ad:0c:d2:9a:d5:36:1d:4c:18:d9:3f:f3:50:
aa:d1:cf:be:e2:84:b0:81:82:d8:e7:f6:cb:f0:96:
2a:0e:21:b4:c2:4c:63:92:f3:32:4d:55:ec:2e:30:
88:4c:d3:38:c2:4f:3d:54:f7:6e:04:cd:dc:74:79:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:3C:7C:7E:EC:F8:17:AF:DD:56:02:56:C7:D0:62:46:90:21:DB
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:94:e2:95:cb:34:23:7a:b5:df:af:17:36:02:7c:42:8b:
6a:23:60:a7:25:2d:fb:d0:ca:c9:62:0c:da:b9:00:9f:d9:7c:
db:51:f5:ad:05:e8:f5:fe:a2:a5:d0:e1:30:97:48:f7:4a:fb:
6f:59:d9:c9:59:b6:0e:a7:e6:ba:93:90:02:d2:9e:6a:1d:97:
1b:55:54:39:10:b6:9d:18:3e:f5:27:a9:cf:53:4a:be:9d:14:
4f:c9:a0:f1:99:8c:4c:5f:26:57:29:b8:f2:a4:28:7c:dd:0d:
02:fb:fc:80:b7:c4:d6:ca:6a:e3:dc:a3:4a:1d:97:85:de:62:
e9:a5:31:40:4b:85:61:34:22:ce:41:28:19:ee:a2:e3:a4:0c:
ec:d1:5b:40:47:74:09:bd:fd:75:42:6d:69:2c:e1:eb:46:57:
0e:a3:eb:d6:2a:80:34:0b:79:7e:9f:bc:42:71:b2:34:ca:16:
78:87:58:18:f3:dd:64:41:a6:7c:ae:c4:dd:66:17:d8:01:d7:
fd:be:84:66:d6:8f:7e:52:b9:f3:94:02:0e:3d:9f:45:24:91:
f8:e5:c1:d0:f7:98:4e:f5:22:00:38:cb:de:40:93:ab:ef:0d:
13:27:3e:dc:09:24:81:57:94:2c:8a:22:0d:f9:6a:9b:7e:93:
0f:30:e4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wIbjig0/1m4LqIY8ze3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg2ZWEyOTk1ZTkzNGI2NTA0MTkxMWNiOWViNjU4NzJj
MjI4OWYwHhcNMjYwMzI5MDkwMDQ1WhcNMjYwMzMwMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg1NTk1M2M3YzdlZWNmODE3YWZkZDU2MDI1NmM3ZDA2MjQ2OTAyMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iDIMrTETOwlHw2MFTEkhMDHgcOH
zRgHi1XLaaq/kGAwrj/KrVK7FltJs1W6rl/51KCFvePPQgE5DXLZD7fj3erQyom6
H08V20kuceDkhTfyI4Znra7nV0JxmY8PZgHl18UmrZLIm3QGJI6BDUAjGl/TwNK7
/IVJKZbAoCNX2OpGo9GF68IBmiCweHgKM+8vLFLl13gggUwPedUCBfqBg73+X9ZT
n40GQ62wq0XS9dduJADCgv/2j3byUYaMcG1ETxBerq0M0prVNh1MGNk/81Cq0c++
4oSwgYLY5/bL8JYqDiG0wkxjkvMyTVXsLjCITNM4wk89VPduBM3cdHkfywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWVPHx+7PgXr91WAlbH0GJGkCHbMB8GA1UdIwQY
MBaAFPPIbqKZXpNLZQQZEcuetlhywiifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMt
YzYzNWQ4ZWVkNDQ3LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTU0YWEtZTRlZC00OTQ4LWI2ZmMtYzYzNWQ4ZWVkNDQ3
LzEvODhodW9wbGVrMHRsQkJrUnk1NjJXSExDS0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio2U4pXL
NCN6td+vFzYCfEKLaiNgpyUt+9DKyWIM2rkAn9l821H1rQXo9f6ipdDhMJdI90r7
b1nZyVm2DqfmupOQAtKeah2XG1VUORC2nRg+9Sepz1NKvp0UT8mg8ZmMTF8mVym4
8qQofN0NAvv8gLfE1spq49yjSh2Xhd5i6aUxQEuFYTQizkEoGe6i46QM7NFbQEd0
Cb39dUJtaSzh60ZXDqPr1iqANAt5fp+8QnGyNMoWeIdYGPPdZEGmfK7E3WYX2AHX
/b6EZtaPflK585QCDj2fRSSR+OXB0PeYTvUiADjL3kCTq+8NEyc+3AkkgVeULIoi
Dflqm36TDzDk8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:26 2026 by rpki-client