Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: 1C8WmzZ2Af3YPLJ/DHqGhV/mfzOvf+fhiWjylYJRwS8=
Subject key identifier: AC:03:AD:32:CE:9C:87:7E:BC:41:A3:7D:B8:0E:07:64:5E:A8:D9:E9
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019FAC3F502A12F5ADFD456795BBC74EDAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 05:00:58 +0000
Manifest this update: Wed 29 Jul 2026 05:00:58 +0000
Manifest next update: Thu 30 Jul 2026 05:00:58 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: LCN1qvUACNSYtYF/FrtVN4JJ7LhsubbuTrM6/OAxUKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:50:2a:12:f5:ad:fd:45:67:95:bb:c7:4e:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jul 29 05:00:58 2026 GMT
Not After : Jul 30 05:00:58 2026 GMT
Subject: CN=ac03ad32ce9c877ebc41a37db80e07645ea8d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:27:2e:c0:0a:ba:e5:b3:31:65:a1:81:8c:
c8:8a:eb:6e:a7:97:7b:06:2a:8c:15:10:6c:b5:94:
88:04:78:8b:b0:0e:95:77:dd:eb:c6:cb:90:5a:4d:
95:3c:f4:c9:4c:04:29:16:84:65:ff:17:d4:a5:3c:
86:ac:0b:cd:e6:b2:d2:fe:74:31:8d:21:05:7e:20:
81:2f:aa:99:97:3a:01:13:7c:95:38:66:97:9f:5b:
ea:49:d5:63:11:08:6b:05:63:da:bc:b3:8f:dd:d9:
d5:9f:a6:f3:57:fb:0b:a7:97:af:61:74:9a:96:79:
2a:f2:eb:29:27:cd:3f:a0:1e:0c:df:64:82:9c:c1:
c3:5d:aa:bb:0a:f7:7f:42:2f:03:4e:8e:79:76:e4:
dc:0b:fa:65:e2:2c:ff:05:c2:80:c9:f7:3a:fc:d4:
ed:31:8f:6b:d0:03:65:4c:fc:e2:22:9f:2f:e8:4b:
32:a0:40:8b:cd:1b:43:71:8c:ef:87:0c:e9:de:73:
73:a1:f0:af:60:dd:64:01:85:3a:41:a8:6d:b0:e9:
eb:cc:37:74:75:b8:49:30:85:2d:61:aa:56:7b:b9:
e5:b7:44:08:ea:32:d5:07:d4:91:6f:fe:e6:48:8b:
ac:ac:53:b4:46:96:35:ac:18:bc:17:0c:2e:e5:99:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:AD:32:CE:9C:87:7E:BC:41:A3:7D:B8:0E:07:64:5E:A8:D9:E9
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:e6:fa:54:60:58:41:78:18:25:a9:3b:d5:85:0b:06:d8:
04:8e:61:65:d4:cd:97:09:9b:51:e5:51:aa:70:da:da:98:3a:
6e:d6:21:d7:e5:3d:d2:e2:97:79:fc:dd:b7:df:1e:94:1d:eb:
85:c3:e6:94:20:a3:77:4d:81:4f:69:15:9a:72:28:d0:bc:fd:
d9:6a:db:c3:23:a0:4f:45:82:10:31:1b:46:de:d1:d8:af:d9:
38:c2:88:02:dc:12:a3:1b:dc:c6:d3:9d:b9:cf:72:34:3d:c2:
f6:33:c5:1f:b9:73:e7:98:b7:e8:1e:cd:8d:65:d2:c6:b0:00:
27:a5:45:22:a3:d9:d9:bc:33:aa:36:83:a9:9c:b2:6d:4c:d9:
9d:98:59:4d:56:fd:d3:ca:ec:d8:73:71:fa:5f:e0:62:9b:03:
84:4d:b5:24:b6:90:d5:3d:8f:fe:ff:2b:e5:c2:b8:79:05:b1:
ab:59:f5:66:5f:d9:c8:b2:7b:d9:d2:ff:48:b5:07:f8:3f:5e:
24:a2:be:e8:68:e9:2f:7a:24:e3:4f:57:57:c5:27:73:b4:00:
e6:06:a7:53:a6:2f:bc:df:72:cc:c7:aa:66:7c:f5:70:d1:5c:
d4:fd:ed:93:ae:32:db:13:c0:53:0d:d0:85:7f:1f:42:48:e5:
0e:8e:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:05:36 2026 by rpki-client