Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: 6KjRgWyjFcCCdv/9SMGsi3G9lyMxes+SPqFLZLxFG80=
Subject key identifier: D5:6B:5D:63:85:8A:D0:18:3E:EB:DE:6C:C0:07:29:B8:5D:D2:C9:CC
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019D2D056B39D26249BA82AE158031E733A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 188C
Signing time: Fri 27 Mar 2026 02:00:23 +0000
Manifest this update: Fri 27 Mar 2026 02:00:23 +0000
Manifest next update: Sat 28 Mar 2026 02:00:23 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: nHA26wk+rvIE8d2DIz/v80AFkVN84U+HU27AMhXN7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:6b:39:d2:62:49:ba:82:ae:15:80:31:e7:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Mar 27 02:00:23 2026 GMT
Not After : Mar 28 02:00:23 2026 GMT
Subject: CN=d56b5d63858ad0183eebde6cc00729b85dd2c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:ac:0a:67:ca:76:6f:7f:0e:ff:22:73:27:
bb:a0:3b:e3:d4:40:26:ce:fa:36:1c:0f:e2:13:cf:
5e:27:48:2d:6b:24:2a:54:eb:9c:2a:f0:55:7e:83:
e7:10:8b:d2:b3:02:b0:97:35:02:cf:d2:39:b5:b6:
80:6f:10:d3:fa:6c:4e:55:1e:48:ea:ad:34:d3:da:
ae:8e:16:8b:9f:ca:ea:1a:c1:ab:05:cf:a6:27:87:
5d:c2:81:ce:43:3c:a2:d6:88:4c:14:76:e3:ed:ae:
b4:6a:10:21:bf:86:fc:d3:3d:a9:1c:e9:b8:30:18:
f4:c3:61:16:f2:bb:79:b6:5a:3e:ea:92:94:34:4b:
e0:7e:51:5e:a4:2e:d5:15:e0:3d:87:30:9f:11:7e:
e3:67:ac:f1:fd:b8:c9:97:ef:d6:8e:29:08:98:9c:
2d:40:d2:f2:79:d5:69:f5:1d:0d:f9:fc:ef:8c:97:
c7:a8:63:2c:72:56:4b:5a:b2:15:15:fb:23:94:01:
47:f3:00:25:81:04:3e:b5:c5:a9:c5:f0:0e:42:0a:
a6:e1:78:49:49:91:c4:2e:d7:00:e3:fc:cc:54:e2:
3c:9d:a6:c2:6c:44:50:dc:c6:fe:74:17:8d:43:af:
0b:61:cf:f5:a1:b8:ae:65:f5:f1:2a:ec:64:02:c5:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:5D:63:85:8A:D0:18:3E:EB:DE:6C:C0:07:29:B8:5D:D2:C9:CC
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:0b:c6:16:c5:22:5e:bb:cc:26:31:2e:2a:a0:a5:05:ad:
b9:04:43:6d:da:99:4a:42:73:2f:65:70:6d:a8:10:e2:49:55:
50:89:12:5c:99:5e:08:2d:6b:39:c3:81:99:5d:13:7d:87:c1:
7d:6f:f9:a1:e2:98:fd:35:be:4c:9d:5f:51:e6:ee:4f:97:dd:
bd:42:0f:03:e2:51:63:89:71:c4:eb:fd:4c:19:c3:0e:3a:66:
da:39:af:f5:1e:4c:35:92:f6:49:6d:c6:0a:97:86:3c:7b:50:
b3:73:86:cb:ce:83:f3:10:39:12:21:b7:52:8b:f1:4b:d1:f0:
e7:ba:c3:5c:9e:f2:14:c3:c7:33:69:a6:0b:40:41:71:f3:f2:
60:ce:01:21:45:9a:6d:b6:1b:93:32:c7:72:38:0f:9b:9c:9f:
d7:40:e0:aa:6a:1d:fd:0c:9d:a8:9c:a5:da:75:96:66:2c:7d:
b4:ef:19:6f:56:bc:20:2c:d9:95:2d:3c:85:c9:e2:e0:43:f2:
37:e8:1f:bc:6b:f8:15:41:f7:91:7b:2d:44:e3:12:86:24:6a:
b1:3f:6e:6e:a8:c0:53:b6:0a:66:4b:98:fa:65:2d:94:8c:0e:
ad:92:e4:e1:97:e7:92:44:5f:eb:76:02:33:88:98:9a:08:29:
d3:07:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:49:52 2026 by rpki-client