Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: odPFZ5K0bhdtdrGVWPKbx26XSaRPVpJeiY03T1UDgSk=
Subject key identifier: 18:45:75:1A:19:1E:D9:01:D5:A8:D0:14:61:5D:49:BA:94:35:6E:61
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 01A1363567EC8C5407A734D930238A2A62D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 17:00:31 +0000
Manifest this update: Tue 13 Oct 2026 17:00:31 +0000
Manifest next update: Wed 14 Oct 2026 17:00:31 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: 2IKz0sDlFR2GhJ7CWo175RS81BR8u3zUkxnJXcfwnuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:35:67:ec:8c:54:07:a7:34:d9:30:23:8a:2a:62:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Oct 13 17:00:31 2026 GMT
Not After : Oct 14 17:00:31 2026 GMT
Subject: CN=1845751a191ed901d5a8d014615d49ba94356e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:76:1a:c2:1d:3b:36:23:33:a5:3b:82:ff:
36:80:54:03:50:25:b9:29:6c:33:30:b6:2b:35:eb:
fa:bd:08:c1:71:44:bc:c3:bd:d1:24:4e:36:49:4a:
53:19:e8:6b:58:94:1c:77:32:ae:6a:7e:2b:0c:3c:
b3:95:ec:8d:f7:24:cf:73:06:24:0b:cd:57:ea:7e:
fa:e0:a5:f7:fd:ed:d5:8e:d4:38:bc:94:5e:e3:d7:
bf:05:3f:bd:96:c8:4d:40:22:31:28:e4:d0:aa:08:
20:9c:ec:1a:b1:41:ee:6c:d9:a4:f4:cd:9d:5f:13:
ba:6f:91:73:15:79:f4:38:1f:c6:8b:eb:c7:fe:c5:
8b:25:42:2f:a1:9e:90:c9:67:6b:f6:49:e3:8f:35:
40:30:95:55:83:5f:56:a7:d0:55:be:76:42:83:67:
07:46:9f:e6:b0:d1:1b:11:54:8d:9a:52:f6:8b:8b:
90:0a:2d:24:33:47:d0:3d:43:67:bb:6d:5c:0b:15:
a4:69:5c:5c:53:59:80:d5:34:5a:5e:e8:5e:ed:79:
1c:9f:41:db:fd:c7:a3:90:7a:c4:60:1e:84:e0:98:
61:91:7f:86:6d:1c:66:d3:69:16:8f:ca:c4:62:4a:
28:9b:4a:ae:38:2b:a7:25:cb:e1:f2:7c:37:b8:96:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:75:1A:19:1E:D9:01:D5:A8:D0:14:61:5D:49:BA:94:35:6E:61
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f2:a3:2f:a8:25:78:64:e3:76:fe:8f:30:a5:b6:4a:d7:0d:
20:5b:36:f4:7b:ff:f6:b2:52:3c:9d:14:7b:42:fc:e0:b6:0d:
91:d7:6c:b6:86:6a:c6:6f:a5:d2:25:c2:1e:7a:5e:e8:a6:44:
1e:62:01:f0:06:26:7a:7d:a2:f6:39:0a:06:84:3f:3d:a9:52:
71:63:44:8d:5d:ea:45:e4:90:9f:09:96:99:bd:93:62:4b:07:
1e:ba:92:07:bd:f5:7e:56:ab:47:03:bc:e4:28:39:d8:c9:c7:
76:3b:94:38:4f:27:14:25:46:7c:e3:d7:dd:ea:2b:97:2f:4f:
2c:f0:b6:5d:49:c3:1c:83:35:b3:77:08:49:34:c5:27:10:fc:
6f:f1:d7:44:e3:6f:bf:71:01:f9:fe:ff:b3:63:7c:b3:7a:2c:
58:4d:96:5a:89:c9:c4:a2:b5:55:53:22:e4:00:c1:b7:67:d0:
8f:da:a8:bc:9d:f0:8d:7c:8e:02:f3:a8:f6:1b:a9:67:5e:61:
12:b7:bc:f4:bb:cf:9f:1c:63:06:74:0f:14:43:1f:31:2a:5c:
50:75:42:01:7f:a6:0c:28:ac:d0:0a:6a:de:7b:19:f0:53:41:
e6:c0:03:d3:cf:94:87:2b:65:0f:a6:d2:33:92:4d:25:59:32:
11:70:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:56:39 2026 by rpki-client