
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: oehHaSREO83QUahFJmfLVYOOUBkElG7RjGEONdE0UBA=
Subject key identifier: 36:21:47:94:30:BB:41:32:8A:6B:48:43:74:A5:44:2A:D7:1D:DF:C9
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 044D101718B6CF1D3BD75C3A9FE5AA2FB4488A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 03F7
Signing time: Wed 09 Sep 2026 18:45:42 +0000
Manifest this update: Wed 09 Sep 2026 18:40:42 +0000
Manifest next update: Thu 10 Sep 2026 19:49:42 +0000
Files and hashes: 1: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
2: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
3: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
4: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
5: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
6: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
7: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
8: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
9: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: +1iGysyQucPMgeGFPsfnaH5dItK0ns/N5dfVva1FNcQ=)
10: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
11: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
12: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
13: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
14: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
15: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
16: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
17: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
18: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
19: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
20: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
21: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
22: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
23: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
24: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
25: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4d:10:17:18:b6:cf:1d:3b:d7:5c:3a:9f:e5:aa:2f:b4:48:8a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Sep 9 18:40:42 2026 GMT
Not After : Sep 10 19:49:42 2026 GMT
Subject: CN=3621479430BB41328A6B484374A5442AD71DDFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:9c:e6:74:74:66:58:00:be:1e:6d:20:4c:
83:60:54:b9:29:34:d1:e8:f2:06:f1:2a:d8:c7:9f:
3b:36:7b:be:29:06:f3:de:3a:5b:92:e6:6a:48:65:
ad:1b:b7:4e:21:4a:63:1f:7c:56:48:e9:87:71:cd:
5d:c3:dc:e7:19:8e:97:42:63:6e:23:11:e2:35:df:
0a:b3:65:dd:39:dd:b4:f0:7e:91:90:c2:5f:cf:2d:
db:3a:e5:20:51:fd:6c:24:9e:38:82:66:af:9d:ca:
42:ad:2c:27:40:df:13:fc:22:c2:cb:cb:89:c8:36:
59:b6:5c:17:6f:21:8e:73:9d:84:f5:36:10:f3:b5:
30:02:98:58:a4:d4:bf:49:b1:bb:79:b3:6a:c6:5b:
06:04:37:4d:fc:36:71:62:13:39:33:e9:4f:21:17:
06:9d:45:71:bd:f4:96:5d:44:02:21:04:3c:27:b4:
24:4f:34:72:5a:88:4e:11:d4:a3:48:1e:d0:59:a3:
41:b8:19:0b:b1:92:a2:7c:b2:94:e3:3d:51:d2:d3:
e5:b8:75:04:07:ab:55:c4:d0:fe:24:d4:c9:3c:2a:
64:d3:16:bf:88:88:5b:0e:2d:a0:6b:00:b7:5f:6d:
2d:8a:aa:97:e2:06:b5:b5:39:86:5a:57:d1:6a:8c:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:47:94:30:BB:41:32:8A:6B:48:43:74:A5:44:2A:D7:1D:DF:C9
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:97:55:b0:45:ef:9d:4b:75:b9:60:e3:74:ff:c2:a3:52:62:
4b:3d:e8:19:b7:b7:f9:dd:25:b5:17:87:29:01:6f:28:22:73:
54:01:6f:aa:06:84:13:cc:4a:47:96:89:cb:91:d5:12:be:c6:
8e:5b:ec:f2:6a:f9:c6:b1:b7:07:e2:a0:0d:0a:43:70:47:91:
ec:c7:91:fc:9f:a7:68:55:0a:27:c7:66:0d:18:df:ed:39:21:
0e:99:43:05:5b:0f:12:f7:02:6b:02:7b:1c:42:bf:9a:14:a8:
ae:ed:28:a6:df:28:b5:f0:f9:d9:1d:42:9d:64:02:13:a0:07:
52:bf:a4:d8:b0:31:0c:b9:ef:b8:6f:56:ef:28:d2:73:6c:ad:
e7:22:bd:98:18:dc:27:0a:f3:de:6a:99:42:a8:d4:22:4d:0f:
f6:1a:11:09:22:07:01:b9:98:74:9e:ee:64:65:e8:57:3b:7c:
93:e2:f9:d1:1a:a8:5b:92:86:73:e3:1a:aa:fc:fb:3d:8a:e8:
8b:59:28:00:70:66:d8:4a:59:82:c4:7e:ba:05:02:b5:4c:40:
c8:e4:8f:b5:0e:9c:90:ca:e9:b1:7b:bc:a1:5c:35:de:bd:4a:
5c:6d:f3:6f:2c:ed:ad:92:65:9f:14:f6:4b:5e:dc:49:e0:1b:
db:2d:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:31:10 2026 by rpki-client