Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: VfLf+xYbAkjcCaHhQ1Oqq1v90TcqFq6QmZtazEy/9LU=
Subject key identifier: E8:CA:26:D4:E9:DD:79:25:9E:81:EB:C2:5E:5F:68:40:20:C6:B3:6E
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019D389BFC39259C69118CD6DBACC2261CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: fyXEEofdazFhg5JIL/jg7f8tjY5msFjQt5o5JHL+oGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fc:39:25:9c:69:11:8c:d6:db:ac:c2:26:1c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=e8ca26d4e9dd79259e81ebc25e5f684020c6b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:25:2d:61:2b:50:6d:3b:6e:04:8b:ba:6e:
a2:3e:61:a5:2a:c3:89:ce:d0:03:a4:cf:32:b3:b5:
3c:50:17:26:fe:25:b4:dc:2d:3e:82:2e:57:43:63:
86:7c:0c:b0:23:bd:75:66:d5:43:24:6d:aa:5c:08:
65:2f:5b:88:a6:63:10:19:f8:60:92:66:c3:54:00:
c1:9c:39:76:e5:dd:e8:90:4c:8d:08:a5:92:e3:c8:
3b:75:2d:79:4f:83:d3:6a:7b:ec:45:bb:52:be:b6:
de:9e:c8:a4:a1:35:4e:13:6b:36:4c:6c:13:68:4d:
2f:92:fa:f8:13:a8:f2:2e:08:b0:bc:55:7d:17:26:
a9:c0:88:69:63:5f:1d:f7:fb:70:92:ef:5e:35:82:
da:0d:74:78:f2:21:d9:b8:33:e0:24:b8:de:0a:6b:
5b:f6:67:8e:d0:ef:9b:8b:49:31:e0:3e:d9:5b:5b:
87:54:5e:6c:92:f9:85:01:f5:19:86:33:ec:73:00:
db:0b:50:f3:54:12:9f:62:f7:23:0d:3f:c0:0b:a7:
64:8e:31:cd:97:fa:a2:04:6f:c7:7a:48:e0:c8:9d:
46:1b:4f:f5:90:b7:30:e7:b0:7a:d5:82:b2:67:7c:
9c:07:5c:17:76:40:2b:a4:30:53:45:b0:d6:e0:b1:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:26:D4:E9:DD:79:25:9E:81:EB:C2:5E:5F:68:40:20:C6:B3:6E
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:15:22:c5:b4:e5:ea:47:20:e4:23:68:43:7d:3f:21:7f:a0:
5c:53:89:24:d3:bb:33:7c:d8:72:d6:ab:50:ab:01:d3:d1:e5:
09:96:51:6c:fb:34:eb:3c:01:4e:82:ec:f8:f6:a2:60:61:81:
ad:67:5d:be:4e:fb:2a:e8:88:ad:a5:ae:d8:58:ab:c9:c5:ec:
50:c4:5a:7c:28:41:7b:bc:36:e3:76:64:3d:b2:3e:f0:04:c6:
5d:5a:3b:60:22:49:1d:8a:06:13:af:5e:c3:a2:42:3d:b5:ac:
9e:5c:91:e1:9e:4c:24:4c:40:a4:15:be:24:c9:f9:f3:18:7e:
7b:53:46:d3:08:31:b4:d2:56:dd:75:0c:04:53:c1:19:ba:e6:
21:0a:95:06:ce:c5:3e:59:0c:eb:16:fa:dd:8b:fd:1c:a9:56:
82:79:91:46:79:97:36:f2:0c:a6:95:df:79:15:0b:e4:8e:cb:
2d:1a:59:00:66:78:e6:5b:09:54:ff:50:f0:d0:4c:ec:2e:b3:
15:34:86:02:59:c4:05:6c:98:0c:b7:3f:ac:81:39:8e:77:7d:
56:38:d1:0c:41:bf:6b:ab:a8:25:51:23:e0:2e:d3:7c:67:29:
a5:0a:bb:d1:28:7f:a8:62:74:ea:2b:b9:6a:6c:8a:b2:84:bd:
bf:50:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:50 2026 by rpki-client