
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: CKpd2ebAZ3F/cY5XOnj8Vq4ttHzNUw9rz5njrbhcb00=
Subject key identifier: 4A:64:A8:24:BD:47:DA:22:4B:44:D5:03:C4:4B:C5:4F:A9:55:4B:E8
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 2BD9D4F1F9EF4C650501B715FB8243DD3C668B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 02EF
Signing time: Sun 01 Mar 2026 09:37:00 +0000
Manifest this update: Sun 01 Mar 2026 09:32:00 +0000
Manifest next update: Mon 02 Mar 2026 10:47:00 +0000
Files and hashes: 1: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: b12Jh9n5kDH+cVevl0w78Aj3DIH1B3HKo6N/Eenv+Lc=)
2: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
3: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
4: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
5: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
6: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
7: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
8: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
9: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
10: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
11: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
12: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
13: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
14: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
15: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
17: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
18: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
19: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
20: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
21: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d9:d4:f1:f9:ef:4c:65:05:01:b7:15:fb:82:43:dd:3c:66:8b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Mar 1 09:32:00 2026 GMT
Not After : Mar 2 10:47:00 2026 GMT
Subject: CN=4A64A824BD47DA224B44D503C44BC54FA9554BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:44:2d:d7:85:33:39:ff:61:4e:ea:e0:62:
dd:57:f7:7d:6d:25:d6:34:86:99:b8:f2:0b:89:5b:
db:1e:c3:79:15:ca:e7:fa:3e:8a:eb:20:d2:97:de:
81:fa:e1:e8:58:17:0f:03:49:ff:62:0f:d2:30:20:
ca:e5:77:0d:16:21:47:97:b4:8e:53:41:9f:5f:37:
2a:48:65:4b:2c:89:16:ca:3f:e7:9f:ea:f0:7e:52:
fc:b3:b5:9b:a7:d3:7a:97:40:09:6c:82:32:84:b7:
35:be:3c:f1:bf:05:d4:24:4d:27:db:86:81:f2:f0:
01:26:50:c8:52:88:fc:7a:dc:e7:83:23:96:54:ba:
3a:aa:42:ea:0a:da:95:ba:1e:4b:ac:68:de:cb:ff:
94:af:f7:71:24:3c:5c:5c:b9:d1:8e:06:ec:7f:9a:
3b:27:69:fe:90:10:06:27:42:01:48:5e:9b:78:cf:
57:87:62:00:ce:54:03:74:ab:40:1d:6e:7f:50:3b:
26:9f:84:65:b2:4e:98:5d:c5:5a:d5:ab:a4:58:11:
81:a8:fe:33:bf:da:c6:77:fc:4d:64:10:69:d4:5e:
df:be:71:cb:64:e0:c6:44:9a:28:9e:b6:6d:b9:b4:
5b:60:53:7d:30:e8:67:7f:0d:f1:25:5e:8a:9e:15:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:A8:24:BD:47:DA:22:4B:44:D5:03:C4:4B:C5:4F:A9:55:4B:E8
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:70:14:6f:8d:f4:a5:f3:94:ae:70:f6:a0:ab:18:91:a7:c1:
99:fb:8e:8d:6a:5c:77:85:af:ec:7c:cb:59:ed:da:01:07:5d:
6e:f0:94:d4:bd:b7:d7:5b:de:ab:d7:db:cf:c5:42:51:ec:c4:
4f:5e:0f:db:ef:b7:03:43:3f:42:be:d1:5f:62:04:a8:47:5e:
3a:29:be:17:b4:c9:b5:6c:c3:78:46:40:c4:bc:ec:a4:b3:f5:
d9:0c:0e:3c:9e:c8:f0:01:d1:1d:cd:7b:55:0f:49:80:b3:cf:
1c:20:42:89:e6:89:5e:6b:ff:63:e4:70:09:82:ab:34:7d:7e:
f0:93:9b:21:97:04:f7:bb:fa:ea:6f:b1:41:fb:c5:75:55:50:
f5:bb:cb:91:6e:60:e6:d5:55:70:2f:7b:4c:e5:8f:ca:6d:eb:
4e:d6:1f:aa:c5:ae:ea:b7:50:74:99:f9:ca:02:6f:a1:d1:ad:
f2:b3:df:e6:b1:2a:06:31:a6:57:71:86:73:45:82:8f:47:85:
f8:f4:97:31:e5:ec:f4:5d:76:b1:f3:0e:93:2f:4b:e3:9d:b1:
65:5b:24:44:9c:db:b0:8d:3c:34:85:c0:11:b0:f3:4c:34:f6:
a8:de:6f:d8:55:96:bf:21:60:0d:5a:b1:00:4f:c1:f1:a4:b7:
71:7a:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:21 2026 by rpki-client