Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: YZhXIK5yALLcbfSoII5vBUctrabjq5jCeQyQxVzQnxw=
Subject key identifier: 0E:D5:CC:E1:A6:C6:75:9C:E3:E7:22:91:E5:38:DA:90:DB:51:08:D8
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 01A12A9F2CA4129B8028E8C578C90C445583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 11:00:36 +0000
Manifest this update: Sun 11 Oct 2026 11:00:36 +0000
Manifest next update: Mon 12 Oct 2026 11:00:36 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: C+q0rWCrN4lsEpqnk5+tUoqp0JUiZPn8U0UkuLVOLr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:2c:a4:12:9b:80:28:e8:c5:78:c9:0c:44:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Oct 11 11:00:36 2026 GMT
Not After : Oct 12 11:00:36 2026 GMT
Subject: CN=0ed5cce1a6c6759ce3e72291e538da90db5108d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:0c:55:a4:ba:26:a5:e7:50:39:b3:f5:ce:
36:0f:52:f8:a5:d8:3d:d6:22:b8:83:12:3c:f8:86:
5b:1a:0c:0b:ab:5c:f6:fd:2b:a8:60:1e:1a:20:71:
89:ca:b0:8d:09:f3:5b:d6:d2:ce:08:24:3a:b2:af:
35:49:42:37:1d:73:e0:09:e4:ed:cc:9d:30:9e:8f:
fa:b2:c1:23:c5:5d:d7:ad:04:ae:84:db:ec:fd:ac:
8a:1e:75:b3:d2:24:2f:6e:e3:e4:88:fd:5f:fa:90:
7f:64:db:c8:d0:dd:65:e4:3c:5b:4f:8f:6e:04:7f:
c7:a8:6d:9c:7d:5d:85:4c:a9:53:bc:0d:34:d8:39:
03:5c:b5:9e:3d:58:5d:85:fe:5f:1a:0a:63:4c:30:
a8:2a:6c:08:87:33:78:06:ad:fb:a0:b8:be:d9:cd:
d8:01:88:ef:72:25:58:f6:91:df:63:98:bf:a6:db:
07:78:68:f0:c7:12:26:25:6d:10:8a:03:2e:c4:97:
09:41:12:50:ab:05:45:73:80:d1:52:4f:9c:b4:3b:
4e:6c:e1:db:92:ab:cc:3b:64:89:f3:32:35:57:2a:
a4:2d:8b:ed:05:76:05:bf:d4:96:02:63:f9:f8:b8:
51:dc:a1:59:44:73:e9:78:cb:45:c6:92:aa:f6:98:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D5:CC:E1:A6:C6:75:9C:E3:E7:22:91:E5:38:DA:90:DB:51:08:D8
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a3:5a:b0:e8:9a:73:1d:21:c8:4d:0c:74:61:27:44:3b:a8:
ad:f2:83:49:eb:46:b7:a3:66:0d:33:03:93:c5:f9:0c:3a:68:
2f:80:f8:f3:90:6d:9b:28:86:d9:ff:7e:6a:8f:a1:60:cf:63:
8d:1b:56:d2:26:be:74:50:0c:f6:d8:98:2f:b1:2e:7c:56:e6:
35:8f:af:bb:a7:63:3a:d7:03:d7:12:61:2a:dc:22:55:16:22:
e8:91:1d:d1:1f:d6:df:ca:99:84:77:39:aa:66:93:13:42:8a:
27:d2:84:57:2f:5a:ed:9e:35:32:52:93:66:de:b4:5e:8e:a8:
2d:6d:10:bd:81:7e:7e:dd:6d:98:66:6c:2e:8f:4b:11:a1:f3:
12:5b:76:5e:21:c9:ce:cd:73:cb:ea:26:bc:16:cd:32:2d:40:
88:ea:1e:ba:db:52:66:3b:e0:96:ee:6d:7d:83:10:ba:8c:77:
04:d0:6d:ea:b0:04:8c:29:b1:bc:2d:19:bf:38:32:da:53:c9:
da:f6:10:cf:94:3e:63:f5:12:18:d9:8a:81:1a:36:cc:c8:19:
93:ac:63:36:6e:38:aa:f9:41:c7:f8:ef:08:b2:f4:d0:20:54:
91:49:20:87:b0:60:7b:9b:88:1a:cf:f9:fd:44:a6:25:4c:67:
7b:09:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:07:21 2026 by rpki-client