
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File: 088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier: qRU9vO/NEbw/Ae1WgiOQEz3ICSboe2LSf0K18iAoURg=
Subject key identifier: 99:BE:3D:C0:3F:EE:89:7D:F0:E3:FD:21:F1:BA:EC:1B:C7:EC:50:30
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019DA7C3CDF8403CF789214A0908261B8FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number: 15E0
Signing time: Sun 19 Apr 2026 22:02:00 +0000
Manifest this update: Sun 19 Apr 2026 22:02:00 +0000
Manifest next update: Mon 20 Apr 2026 22:02:00 +0000
Files and hashes: 1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: UE7MdtRQGI7lk/UbAYuOYlAdewNaDkHPwrf4Ua66Fdo=)
2: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (hash: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo=)
3: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (hash: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M=)
4: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
5: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
6: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
7: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
8: Att5HKYI3aC7_aNTZVFUqgSxCe8.roa (hash: rUmjLWfVdd7KMWGUiNf2cjqT7vTRErvaoU9x2sNbGew=)
9: EF_U3I32Y5RdvbXqEmBTtMapEa8.roa (hash: sIzDhi/oGDul4JL44c5eU+5E68fjPASfb0dG/ED5Apo=)
10: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
11: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
12: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=)
13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
15: PIrMEQyjvVKVeYvRJpXPZ61vDvI.roa (hash: H9cZ2L0KfruHg2t6PS78Ci9ZD3D4RvqB2QYXRdEkt/A=)
16: Q-GYq2m_tr6W_RtM0sCvHlInTxU.roa (hash: 1xrCYD5jiDLXpxJne8P+wvXM1GVUiEeJQXgzUbLbWSM=)
17: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
18: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
19: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
20: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
21: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
22: Xd00ng7nac-i-TetL-P_HvOhmMM.roa (hash: k5l8E0MsOMYmPHet67fQ/9LeL4IxYxuboXrgLM1fIRk=)
23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
28: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
36: u4owkfbGQjlZ17TauPKELfGr4-A.roa (hash: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc=)
37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
42: zPgdBYPAz3QBjg71o8G3YIE805Y.roa (hash: JgrCSwBTN9wdbX0XnRrlPGBIGb9WM1Yt8KIhYiVQTmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:c3:cd:f8:40:3c:f7:89:21:4a:09:08:26:1b:8f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 19 22:02:00 2026 GMT
Not After : Apr 20 22:02:00 2026 GMT
Subject: CN=99be3dc03fee897df0e3fd21f1baec1bc7ec5030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:b2:b9:8a:f3:bb:12:4f:e0:3f:10:6e:9b:
9a:e8:b4:9b:9f:f7:6f:6a:5a:0f:a1:49:c9:57:d0:
65:a2:28:74:16:7d:bb:9e:0f:3c:6f:1f:69:1a:fe:
ef:4f:03:cb:2e:6a:d2:19:77:19:da:d7:e2:ac:b9:
fa:c1:db:7b:12:f7:fa:10:d9:80:e1:23:a7:65:4e:
84:c9:ff:68:7b:d5:75:76:27:36:61:52:15:9a:e4:
b1:92:56:5f:6b:d2:32:7b:d3:8e:dc:17:eb:4a:b5:
80:64:ea:40:f1:e9:3d:c8:e1:80:91:8b:6f:30:95:
2c:a3:f9:02:0f:9b:58:43:f1:ff:38:55:87:de:29:
ed:8b:69:bd:7d:07:1d:c5:32:2d:e5:ea:49:d1:92:
c3:4e:0f:3c:fc:44:1b:34:b1:ec:1f:cc:85:c7:fa:
c2:08:06:d4:82:c5:37:0d:a6:15:bc:db:f8:c9:af:
ef:d5:20:9f:4b:41:48:77:fb:51:fe:b3:a7:e6:51:
2b:b8:6e:e1:92:49:56:ef:0b:c5:94:c7:14:c9:85:
48:32:93:c9:94:a6:00:25:f0:3f:0c:ad:14:75:5c:
59:a7:3a:7d:34:2b:cf:75:3e:0a:8d:c7:82:78:c1:
bb:d5:65:19:22:5c:ba:7e:26:66:7b:4c:e5:fc:90:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:3D:C0:3F:EE:89:7D:F0:E3:FD:21:F1:BA:EC:1B:C7:EC:50:30
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:1a:7c:b2:04:d4:6b:48:ba:27:6b:db:48:01:ad:6a:d0:
47:a1:96:5c:ef:01:49:76:c0:df:88:7a:e8:d5:a2:e5:e2:14:
2b:7f:2e:3a:c4:3d:fd:04:ed:81:bf:57:1f:f4:5e:ac:8a:2b:
60:3f:b9:96:db:f0:ba:db:bb:ad:f7:d6:53:64:0a:77:b6:27:
cb:3c:c0:22:29:08:5a:c3:dc:b9:12:f4:e4:9b:13:7b:06:aa:
79:28:92:e2:da:58:80:af:d1:1d:3b:81:ce:e7:e4:28:a2:aa:
7f:87:39:6a:48:a2:ba:66:e5:41:e0:77:46:03:fe:08:3f:7a:
ee:76:19:31:8c:98:35:b5:93:9d:26:43:e8:35:9c:ba:79:f3:
51:d9:d2:c9:5d:66:a0:fd:81:8a:ab:0b:a4:e1:07:c1:99:59:
2b:1c:01:91:68:bc:8b:30:35:47:6f:bb:8a:f0:29:16:16:cc:
f1:bc:09:d7:af:9d:02:b9:09:d0:ce:aa:ad:64:d9:72:a7:e6:
00:4f:e9:b1:69:00:df:e4:0c:5e:61:a9:9d:c3:b6:0b:a1:c3:
9a:d1:bc:33:0b:2c:02:f5:03:4d:8f:9c:08:61:77:a5:ad:d6:
b4:25:97:2a:9e:d3:1e:71:99:14:e7:09:5d:ce:a6:83:9a:c5:
bb:a8:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:25 2026 by rpki-client