
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: XO1iyCkRNsDQFQC7LswYzDHTIIO+pJwAlM9RQlaQx1U=
Subject key identifier: DB:44:FD:6C:DD:B0:0B:77:B5:D1:35:DB:27:EC:9E:E8:5B:46:2F:AC
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 17A316099F37E63A4BC4818F2BF4EA1A0ED0E602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 032E
Signing time: Fri 17 Apr 2026 01:43:28 +0000
Manifest this update: Fri 17 Apr 2026 01:38:28 +0000
Manifest next update: Sat 18 Apr 2026 03:28:28 +0000
Files and hashes: 1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
2: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
3: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
4: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
5: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
6: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
7: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
8: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
9: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
10: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
11: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: mx7l5LgDC+Jq5qt9O9tTTUerW8KMq4k8AnH7aWpFHN4=)
12: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
13: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
14: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
15: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
16: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
17: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
18: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
19: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
20: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
21: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a3:16:09:9f:37:e6:3a:4b:c4:81:8f:2b:f4:ea:1a:0e:d0:e6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Apr 17 01:38:28 2026 GMT
Not After : Apr 18 03:28:28 2026 GMT
Subject: CN=DB44FD6CDDB00B77B5D135DB27EC9EE85B462FAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:17:16:39:fb:bf:ad:52:26:93:30:3e:da:
96:a4:d9:84:81:b1:92:08:40:0e:7b:56:21:3c:d6:
77:a9:f5:a5:2b:a4:f1:f4:25:e0:a3:55:f2:87:55:
c6:f9:bb:47:f1:ad:83:37:df:1c:43:74:ac:9d:c9:
c2:8b:25:ac:7f:11:b5:c4:e5:24:9e:ec:62:6b:84:
4f:b3:32:7b:08:f4:97:70:0c:09:11:ef:10:b6:e2:
66:cb:b1:b1:80:7b:46:9b:9a:56:e9:94:89:f2:5e:
c0:81:2c:d1:1d:9b:80:db:16:79:2e:ea:50:1b:4d:
a9:5f:8a:b7:87:a3:54:c4:b1:75:fb:c9:22:88:d8:
93:c9:05:e1:f2:41:05:c6:99:f9:6d:74:8e:00:a7:
cb:5f:8a:7f:20:46:55:1d:73:3d:1d:dc:b2:7e:90:
74:f9:62:9c:4f:78:8d:62:67:f8:d6:8b:bd:1b:1e:
d3:af:9f:dd:0e:fa:2d:f6:0d:d8:32:fe:16:29:20:
87:3a:06:b9:96:5c:c1:9f:6b:1f:26:38:3f:6d:2d:
c8:e1:dc:93:aa:1f:95:7c:e6:8b:f9:de:1a:77:33:
ab:ed:b2:1b:9d:8d:fc:44:ab:a7:9d:29:ca:65:0c:
9c:8e:c7:e0:6f:fe:8e:b1:56:df:b6:2e:93:05:da:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:FD:6C:DD:B0:0B:77:B5:D1:35:DB:27:EC:9E:E8:5B:46:2F:AC
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:5a:90:c4:c7:7e:7d:15:54:13:75:c5:63:ba:69:bb:0b:
f8:38:36:e1:52:97:e6:fd:92:9d:2b:ba:c1:ff:91:41:f7:58:
88:53:f4:67:41:08:f5:3e:02:b8:1e:05:98:8c:fa:d5:81:36:
e9:8c:13:71:19:94:c7:8b:c3:53:ef:77:03:41:bf:0d:8f:41:
56:7f:2e:8f:7d:b1:ad:e7:24:a8:3b:19:11:d9:9f:5c:ed:77:
22:be:fc:5e:3f:1e:d2:7d:ce:39:05:0c:e9:7d:76:7c:23:e2:
ef:f5:35:60:39:11:6c:f6:f6:16:3f:0b:e5:5d:6f:41:3e:27:
12:d4:93:8a:76:62:f8:63:be:68:bb:d6:14:3f:d6:8f:99:4b:
3a:66:1a:75:b0:b9:26:3f:af:bb:56:33:0d:27:06:51:82:29:
eb:98:cb:8d:16:2e:ee:8c:aa:07:54:49:2f:5d:f9:8c:c7:01:
52:17:6c:34:33:11:c4:7e:b6:63:dc:ab:91:12:bc:85:9d:0d:
a7:77:cd:98:d6:33:b3:35:16:2d:73:13:75:9d:f3:f2:63:a0:
e2:0d:bb:2a:c9:9d:bc:36:ed:f3:3d:00:ee:14:97:bd:5c:e7:
5a:12:44:82:2b:d1:7f:72:bc:68:bc:bc:4e:30:71:6e:46:8c:
08:6d:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:04 2026 by rpki-client