
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: C52AFtRG4e97alkI08PHNOlW5g2tpwUvgE+YJBSDuW0=
Subject key identifier: C3:A2:43:0C:A3:ED:7B:8F:39:83:61:B1:10:90:1A:7C:24:34:D5:7E
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 5C06B7736C201B8E7FFD574235DFD8CC134C73A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 0354
Signing time: Tue 12 May 2026 19:59:02 +0000
Manifest this update: Tue 12 May 2026 19:54:02 +0000
Manifest next update: Wed 13 May 2026 20:22:02 +0000
Files and hashes: 1: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
2: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
3: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
4: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
5: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
6: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
7: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
8: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
9: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
10: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
11: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: pHzo0c/qjIm7zZT/NvInUzVXWMLvQ5sIBMTOtkOoCmg=)
12: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
13: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
14: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
15: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
16: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
17: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
18: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
19: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
20: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
21: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
22: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
23: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
24: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:06:b7:73:6c:20:1b:8e:7f:fd:57:42:35:df:d8:cc:13:4c:73:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: May 12 19:54:02 2026 GMT
Not After : May 13 20:22:02 2026 GMT
Subject: CN=C3A2430CA3ED7B8F398361B110901A7C2434D57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:fd:62:6a:56:79:df:bd:25:83:c3:b5:3b:
29:13:c0:24:97:2e:ce:f3:c2:6c:7b:23:5a:ca:d1:
d4:d6:aa:12:79:9e:ec:f1:7c:04:d2:23:95:6e:60:
d3:8f:dc:9f:76:ec:6f:ed:b7:4a:b5:fe:18:87:e9:
2b:78:c9:50:45:62:58:a5:4a:9f:27:35:bb:a2:3a:
10:97:a6:59:b6:05:f1:44:87:1d:7b:b3:ad:f5:fa:
42:86:32:ec:05:7e:66:a5:10:91:eb:64:92:ca:db:
d7:01:5b:bb:23:a2:a1:f5:29:bf:f2:e6:7f:cf:8e:
18:2e:b5:bd:6d:4c:12:4e:01:6d:4c:22:3d:c9:fe:
6a:90:6e:15:29:7d:fe:eb:ca:26:c0:27:26:3f:8a:
0e:9d:a7:d9:e3:6d:20:21:68:ca:85:04:57:3e:7d:
8d:e0:4f:ae:d1:c1:2e:5f:40:36:f9:b8:b6:ac:e6:
9a:b3:88:96:76:8f:96:13:0e:af:ec:dd:58:22:44:
e9:7e:b7:90:7b:fa:9e:e8:7f:cf:60:ad:a4:4e:70:
29:c7:b4:07:f6:06:d1:96:76:e4:f9:b7:27:6e:6b:
35:59:14:ba:b8:71:d9:ab:4a:c4:08:f7:15:91:5c:
7e:d8:e6:54:3a:8e:95:b8:b8:14:63:a8:36:b3:e2:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:43:0C:A3:ED:7B:8F:39:83:61:B1:10:90:1A:7C:24:34:D5:7E
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:61:cb:35:d6:ee:c9:d8:21:4f:59:39:97:eb:b4:5f:48:
dc:bf:58:8e:ec:b4:a3:ca:f4:b0:4f:36:03:53:0f:9c:db:21:
8f:c7:44:6e:5f:63:f6:93:ac:70:e1:f3:73:62:5a:50:3a:f0:
6a:49:c9:a9:6e:6d:5b:85:6b:6c:68:59:c5:43:f4:21:24:48:
51:b5:19:3c:17:fe:a2:c4:5a:27:b6:be:76:5d:58:f3:67:62:
bf:7c:83:c4:dd:67:6d:68:1b:71:9f:72:a1:93:d2:3f:05:7d:
2e:06:cf:5e:2f:1e:a7:34:aa:9e:fd:f9:79:8a:66:0e:89:40:
67:fd:ad:ca:10:71:a4:9c:18:ab:bb:9a:ee:1e:49:fe:d8:63:
83:7e:03:c2:97:86:9d:2b:e2:3e:c6:22:1f:f1:74:4d:98:36:
bc:1a:90:93:21:45:24:81:cf:6f:ea:d2:6f:e7:d2:08:d8:2a:
e2:e7:5d:72:3f:ef:ec:56:48:03:a4:b6:96:dd:47:21:51:0a:
8d:14:94:cd:8b:6a:2b:4e:01:ce:fb:cb:36:6c:5e:a4:43:9f:
5d:a0:0f:13:89:25:ed:b2:21:34:21:08:2d:67:1f:03:ef:5d:
af:27:41:ec:f1:4e:0e:a0:a0:f2:48:2d:c6:4f:e4:df:80:39:
03:ce:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:19 2026 by rpki-client