Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: mIAC6Lhjb6jEYikPh2lMyn1IRm+nFAciLmcfyk31hnI=
Subject key identifier: 32:CF:B7:57:39:6C:F2:77:FE:05:5E:48:84:63:47:13:2E:84:F9:66
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019F9323D7329563A6D21515A2937BA03299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:00:27 +0000
Manifest this update: Fri 24 Jul 2026 08:00:27 +0000
Manifest next update: Sat 25 Jul 2026 08:00:27 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: UV2CDtGrGc1t/fydGvbeafuZoSDzi+oSr0mEke4Op0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d7:32:95:63:a6:d2:15:15:a2:93:7b:a0:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jul 24 08:00:27 2026 GMT
Not After : Jul 25 08:00:27 2026 GMT
Subject: CN=32cfb757396cf277fe055e48846347132e84f966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:ab:b5:03:7b:29:d4:57:19:cf:0a:e7:0b:
dc:76:c3:6e:a0:2d:47:8b:61:73:c1:46:86:c1:c9:
b9:03:67:e5:86:e3:85:8f:dc:8f:9e:92:5d:2d:37:
7a:df:9e:68:42:d4:d0:87:58:09:7c:38:b8:34:3b:
7c:c1:39:dd:57:07:99:89:c7:5c:54:cf:aa:21:93:
ba:d3:73:14:ae:db:c2:ae:21:2a:f0:ab:e6:bc:57:
a7:d7:ec:d9:6e:3b:42:f0:6e:cc:30:8f:29:d5:2a:
f7:bb:d9:d1:52:b4:7c:9a:42:b5:e4:14:b2:d7:71:
cd:58:cb:8f:b3:48:7b:0b:5c:03:08:41:78:81:43:
06:d7:e9:7a:b2:8e:90:d0:ed:d0:2e:08:ec:51:94:
29:07:63:54:46:f3:95:b5:61:c2:a3:b0:08:b8:e7:
43:e0:c7:51:f6:fb:17:16:95:74:be:4e:2b:1f:ec:
ef:2f:94:9d:36:2e:4b:84:89:fb:20:77:9e:3a:ed:
64:b3:f7:09:f9:41:01:b4:e2:98:59:47:1e:d6:95:
8d:49:55:7a:e0:d1:f1:17:fa:28:cb:3d:c1:17:cb:
79:74:80:c7:a7:49:1e:ee:a1:71:33:56:90:0d:9a:
22:ec:91:5f:91:2b:54:7b:f6:49:54:6b:29:40:fb:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:B7:57:39:6C:F2:77:FE:05:5E:48:84:63:47:13:2E:84:F9:66
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b7:5d:da:27:6f:b2:59:67:53:61:e0:a2:da:5e:55:2f:c3:
3a:92:51:cd:8f:72:8f:27:f1:b1:62:c6:4f:e9:2f:78:cf:b9:
b0:ec:aa:f9:28:17:3d:e5:37:a8:53:60:c5:b2:02:09:f4:39:
58:5b:b9:c3:95:e3:2c:86:e4:2e:d0:d9:d6:89:74:e0:94:2a:
92:9d:33:11:07:65:65:91:bc:aa:6d:3c:40:cf:7f:d7:92:37:
3b:45:bb:fe:34:52:ba:dc:61:e7:0b:65:46:82:77:7c:1e:66:
8b:a9:bb:c5:68:e9:c7:58:35:52:a5:12:b9:93:1b:0d:66:61:
00:00:4c:19:4a:60:92:4d:90:6f:d1:56:c1:0e:62:87:50:88:
a0:c5:c8:86:49:30:b0:8a:7f:cd:fd:41:29:28:8e:72:ea:99:
19:70:2e:4d:b9:8b:c6:7a:9f:1b:5c:f6:fd:e5:57:48:46:6c:
64:25:64:e0:34:03:50:58:c6:5a:7e:ba:bc:b5:10:e1:36:23:
f8:1d:4e:42:bd:27:a2:ba:65:f9:6c:71:2e:fd:ed:8e:34:cb:
f8:f4:e0:c8:b6:69:35:de:fa:c9:49:a3:2f:aa:2a:b7:d4:a2:
5c:ca:be:04:84:19:78:a6:4f:00:98:dc:5f:c1:6c:51:ef:24:
4a:ca:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:05 2026 by rpki-client