
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: eY5y4r8llYAWUqnODibkRlj6hRPlru98CilumZ7Osas=
Subject key identifier: 1D:0F:12:7A:47:EB:DC:CF:8F:95:1E:9D:CF:C5:2D:71:1F:3C:07:4E
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 4728C23360BF975196386373D2AE159A70FB52D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 0452
Signing time: Sat 14 Nov 2026 22:47:08 +0000
Manifest this update: Sat 14 Nov 2026 22:42:08 +0000
Manifest next update: Mon 16 Nov 2026 01:31:08 +0000
Files and hashes: 1: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: L9N61GZrgQ5virt2qFxgsc/JOkknEDcdSanMcULWk5s=)
2: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
3: 352e3137382e3132342e302f32342d3234203d3e203431373230.roa (hash: denS4ShosQEflOOKSOFKHIlQq2P37gUifSSYnpY0oi4=)
4: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
5: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
6: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
7: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
8: 352e3137382e3132352e302f32342d3234203d3e203431373230.roa (hash: 2wW5t36NJMTXW3Jrvo3pMIkucCLejHza7QPvifnreNo=)
9: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
10: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
11: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
12: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
13: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
14: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
15: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
16: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
17: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
18: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
19: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
20: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: KGBdO03qyyafMOxo4U+d/wPS0xbGpENnx76PaW6XZ3w=)
21: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
22: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: ifGbyk4k2bpgbow5CdzQuCwq86Vy68DDUjPqYUmAwZI=)
23: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
24: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
25: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: qIVbCWoUWEg+tQzWZWbmyLK7nIDIg61oUBuCCXXfkHs=)
26: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
27: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:28:c2:33:60:bf:97:51:96:38:63:73:d2:ae:15:9a:70:fb:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Nov 14 22:42:08 2026 GMT
Not After : Nov 16 01:31:08 2026 GMT
Subject: CN=1D0F127A47EBDCCF8F951E9DCFC52D711F3C074E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:47:81:90:cc:7d:3f:29:6c:14:3f:e2:e2:
b8:cd:ef:1f:f1:41:64:a1:cf:e1:69:fd:2c:8c:95:
e6:47:7e:ad:83:be:56:64:71:7a:e0:94:5b:a3:12:
38:79:ae:f8:b4:a9:9d:3c:07:7d:06:ad:e2:9f:cc:
4f:82:ae:e6:7d:6a:7c:0b:ed:16:d0:54:a4:b6:e7:
97:85:0b:ab:a2:98:76:05:e1:3d:67:ff:74:02:8d:
06:17:1e:9a:50:b3:22:a1:a1:56:6f:ad:93:02:2d:
9c:b3:6c:ac:36:e0:38:17:a7:20:8c:04:c9:5e:c9:
14:ab:f7:45:9a:80:1c:ac:f8:35:ad:33:28:55:23:
08:c2:3c:4d:b8:3c:25:bc:fd:ee:a7:8a:b5:2c:5c:
50:96:83:b0:e5:c9:7a:4a:11:3d:2c:1f:4c:eb:19:
8e:b5:84:a2:4d:c8:37:09:5c:9a:b4:70:b5:c4:34:
d6:b2:7c:e2:17:43:73:16:8b:a9:5c:42:7f:24:6f:
b4:82:8e:7a:df:97:95:01:ac:7c:f1:cb:06:08:b1:
98:59:cd:41:41:11:78:eb:b5:73:7e:6f:12:29:87:
bb:cb:1f:f2:7e:af:eb:59:49:f4:31:77:c1:a6:9f:
42:bb:b4:92:90:3a:d6:97:2b:a6:20:f9:56:21:39:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:12:7A:47:EB:DC:CF:8F:95:1E:9D:CF:C5:2D:71:1F:3C:07:4E
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a8:25:b3:39:5e:4c:12:84:05:c3:d9:a0:e5:0a:e8:80:a9:
8d:f0:c8:fa:bc:92:9f:25:e6:bf:2c:0d:0f:c4:97:d5:ea:9f:
73:64:b9:a4:c1:ae:46:f2:b0:50:8b:05:c0:35:6d:3a:0e:e5:
64:eb:5e:09:4f:35:6e:4c:04:4c:2f:6e:cf:6a:a6:78:cb:f9:
f2:3b:fd:65:2f:ad:ab:47:7c:f6:0f:39:e8:f8:3d:b5:44:97:
cf:e2:cf:86:1b:62:fe:42:02:d2:fb:a1:3d:31:08:2d:11:5c:
f1:cc:62:9b:c7:cf:60:11:7d:aa:66:da:fb:1a:63:78:c7:b0:
a3:0a:b7:31:ab:7d:34:06:c4:70:eb:2a:c1:2c:f6:c0:26:23:
0d:20:53:47:ac:d9:7a:70:16:dc:66:c8:81:82:4f:76:8a:9c:
63:54:de:eb:9b:d5:b3:65:5c:1d:ab:1b:f7:ee:8a:bc:f6:5d:
e0:e4:78:44:a2:7e:ff:e2:3b:df:ff:b9:ef:8b:d9:eb:f9:b9:
f4:c6:74:cf:cf:d8:de:be:9a:e7:a6:ab:b2:3d:2f:ba:0b:eb:
86:3b:a9:3c:79:10:d4:44:3e:95:61:17:e0:88:fd:b2:d0:fa:
f4:35:91:8b:c4:46:e7:bb:66:1f:85:79:4a:1f:a6:79:d3:07:
e1:e3:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:00:02 2026 by rpki-client