Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: r3TWPjQEx277jc4p8Sq95jt2EW1m8Wy2EEjNB630+z0=
Subject key identifier: 7A:95:6E:FD:1A:56:FB:E5:CD:5D:EC:1E:D6:4E:97:D4:C8:8B:B7:72
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 01A12C8D930664DA2AE4F17B96BE377D5DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 20:00:37 +0000
Manifest this update: Sun 11 Oct 2026 20:00:37 +0000
Manifest next update: Mon 12 Oct 2026 20:00:37 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: 7f3du1x5HyMj1z/4BO/oCx1WHkec8/V3QMPXtnvb/50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:93:06:64:da:2a:e4:f1:7b:96:be:37:7d:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Oct 11 20:00:37 2026 GMT
Not After : Oct 12 20:00:37 2026 GMT
Subject: CN=7a956efd1a56fbe5cd5dec1ed64e97d4c88bb772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:a4:e1:80:c1:35:d2:6d:62:fa:e1:b8:32:
7b:8c:c8:fe:66:79:71:b1:a8:3c:b7:dc:c2:7b:99:
dd:60:5a:5b:7b:ee:fd:f3:9e:20:12:51:e1:1a:47:
88:70:ab:a8:11:51:b5:ce:e7:e9:9d:aa:65:c9:bc:
ac:87:02:09:e6:3b:b1:ae:41:4f:a8:53:9a:95:79:
ba:5e:1a:f3:ff:66:5f:e5:b1:85:68:88:e4:c1:c8:
17:56:56:ab:67:46:72:12:23:3a:d5:f5:82:f3:ce:
dd:35:22:4b:7f:07:73:e5:03:45:e6:dd:60:32:cb:
42:df:4a:70:0e:fa:78:1e:ab:b1:29:c8:c8:b0:35:
ae:42:95:f0:26:41:d2:3a:47:45:4d:78:6f:20:d5:
a3:9f:27:23:e8:2a:41:cf:9e:6c:93:97:8d:c9:40:
41:76:78:76:d9:2c:ec:9d:1e:12:d5:de:99:10:d4:
1d:6c:bf:5b:1d:cd:57:79:18:17:cb:78:6e:08:72:
56:f2:7d:00:05:36:be:28:29:ec:03:fd:b6:0e:3d:
b2:43:20:0a:ec:bf:cc:e8:93:c7:9e:62:22:53:e8:
a3:9f:12:23:4a:c5:ba:4c:c6:d2:ac:b3:e1:76:d0:
ad:bb:64:a0:92:a9:fb:d0:02:db:8e:d4:e2:5b:f0:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:95:6E:FD:1A:56:FB:E5:CD:5D:EC:1E:D6:4E:97:D4:C8:8B:B7:72
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:63:bf:b4:fd:c8:ac:55:56:e8:a8:c9:f8:b9:f3:57:fd:
e6:10:21:8b:1d:69:68:b6:1f:a9:b9:f3:0f:05:0e:f7:65:c6:
7e:fc:9c:f1:71:55:e0:36:31:d7:94:2a:9d:49:6c:35:59:59:
1e:d0:54:91:51:5e:38:a6:9d:7b:10:be:51:b1:c1:5b:6f:88:
b9:04:f7:fb:27:fc:d9:69:7b:22:c7:2b:c6:5b:7f:07:7a:43:
27:4b:95:e4:ec:fa:65:d6:a6:4c:98:b1:3f:32:1e:42:f0:26:
50:64:d8:13:77:a6:3a:41:c8:f4:d6:d3:6b:28:b3:87:7a:3d:
b3:e5:62:f7:72:82:52:3c:8a:cf:59:9d:44:a4:ef:e0:55:dc:
33:3c:c1:5c:41:cf:73:a0:6f:34:22:4f:ab:73:94:90:06:56:
e7:9d:8f:be:9c:70:03:b2:7e:1e:9e:4c:e1:be:3e:89:2e:fd:
c2:d8:94:b0:48:f8:48:d2:92:b9:06:00:34:98:cf:64:1c:c0:
f7:0d:a8:23:5c:f3:f5:a8:73:96:4c:fd:b9:2f:3f:83:29:f8:
81:23:bd:4a:4f:e9:5e:37:d9:7c:b7:7e:e6:b6:f2:6c:93:7c:
9d:88:ee:be:4e:52:e2:44:f0:03:5d:fe:bf:77:78:7c:b6:f4:
a2:8b:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:23:47 2026 by rpki-client