Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: J0pl9N4G5OMtGazexCRev3hqOWxcsZeMI2zuXwb//nM=
Subject key identifier: A0:01:D2:A1:C4:AA:96:BC:4E:1E:CF:FC:3E:47:30:E1:0F:20:58:16
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019E1C7D89A49E354C70CE48DEF1EC5A691F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:00:49 +0000
Manifest this update: Tue 12 May 2026 14:00:49 +0000
Manifest next update: Wed 13 May 2026 14:00:49 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: PtqBXgMtJmezsVhy+4StaezWoUfMUkyJwwcpyAia1fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:89:a4:9e:35:4c:70:ce:48:de:f1:ec:5a:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: May 12 14:00:49 2026 GMT
Not After : May 13 14:00:49 2026 GMT
Subject: CN=a001d2a1c4aa96bc4e1ecffc3e4730e10f205816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:fa:69:98:2a:8c:3b:81:05:05:fc:7f:9d:
bc:6d:94:fd:0b:ac:db:c4:0e:bf:8b:ba:9e:db:36:
82:87:8e:ac:77:21:11:50:3c:ee:7c:c2:37:76:5d:
c4:6a:f6:bb:c1:93:cb:4a:73:cc:33:dd:a0:c8:a1:
94:9e:85:5b:45:94:28:af:09:07:25:c9:57:77:f8:
b1:bd:d3:25:cc:98:ac:de:e3:e9:38:8d:99:e4:0e:
d2:88:31:c3:f7:59:ac:9c:48:95:ac:9c:27:4a:c3:
f5:14:67:73:3c:e7:fa:dc:44:10:e7:f9:0a:4c:3a:
93:45:e4:46:8b:a8:95:9a:ca:cb:3c:e1:3f:96:07:
0c:8a:21:fc:3a:6b:51:99:51:b3:8d:b8:d7:f8:fb:
8e:0f:5c:45:c4:84:92:61:79:ce:4b:5d:ee:c4:4e:
9a:0c:30:c5:77:2e:86:f0:1c:16:d3:c2:01:a3:9e:
f2:8a:c6:d7:67:99:af:d8:48:4c:ce:15:45:6e:f7:
05:9a:5b:69:5a:32:a3:8a:a3:ef:41:8b:e7:31:ef:
70:31:31:4a:74:8d:40:40:b5:ed:55:6c:06:44:b3:
92:3b:ed:fa:e4:6a:b5:03:35:6f:3b:12:81:63:17:
5f:8d:13:39:69:2a:f8:75:f1:f1:1c:b7:b3:58:23:
d1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:D2:A1:C4:AA:96:BC:4E:1E:CF:FC:3E:47:30:E1:0F:20:58:16
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:e9:cf:7a:2e:b3:19:bd:dd:1b:f0:f8:26:fe:ff:bb:44:
c2:1a:36:a1:d5:b6:0e:28:2d:87:78:c0:8d:95:97:97:d1:24:
6d:6f:5d:75:1e:e0:f3:0d:49:0d:85:8e:68:9f:9b:1e:36:e5:
71:37:a8:1b:d3:f3:3e:b9:3c:fd:e4:66:2f:21:28:3f:4f:23:
de:60:15:88:3a:cb:a0:1d:77:3d:1f:20:73:42:dd:5b:bb:96:
5b:01:a4:0e:6a:c3:08:8d:a9:4c:9e:44:d2:1b:bc:55:9f:93:
cd:10:f5:60:82:85:6f:c7:2a:2f:ac:b7:a9:91:b8:cd:7d:5e:
0c:90:74:87:5c:d3:bf:5d:59:eb:95:76:67:6f:23:e3:fc:05:
cd:10:7c:ab:c3:f4:d7:40:96:df:e6:45:a0:4c:c5:7e:dc:f4:
0e:4c:c4:61:d5:2c:a0:a0:2f:b2:34:69:8d:7c:3a:c1:7d:6f:
b4:7f:39:dd:9c:e6:72:af:2b:bf:54:a5:3e:69:a6:8c:13:8b:
61:47:44:19:e7:60:21:ca:cf:23:3c:ae:43:73:ee:ce:83:46:
32:c6:8c:fd:2d:ac:5a:83:e2:dd:ea:d9:3a:bb:a7:28:74:ce:
29:b1:ae:e8:71:80:7a:ae:48:97:87:7b:2d:30:71:02:43:59:
e4:18:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:42 2026 by rpki-client