
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: hXMwqM2tw2NPkyGNe6P9eMCQKu+aF21hvDhsSRkeOUs=
Subject key identifier: 68:F4:47:30:AE:4E:6A:0A:A6:2A:EF:4D:E1:33:B1:82:36:5B:BF:00
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 3E7867F3BB0164EED047554D93A1BB84A9883B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 037C
Signing time: Thu 11 Jun 2026 13:24:22 +0000
Manifest this update: Thu 11 Jun 2026 13:19:22 +0000
Manifest next update: Fri 12 Jun 2026 13:48:22 +0000
Files and hashes: 1: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
2: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
3: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
4: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
5: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
6: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
7: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
8: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
9: AS41720.asa (hash: 4An44TkWkAj35xBt6Xef84p/tUjH5ZEGoqkH2/CZIMo=)
10: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
11: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
12: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
13: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
14: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
15: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
16: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
17: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
18: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: VvRp1CJVLgCdmMTZm0cd4gFVRHJvo+tIOAje3cbltnA=)
19: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
20: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
21: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
22: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
23: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
24: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:78:67:f3:bb:01:64:ee:d0:47:55:4d:93:a1:bb:84:a9:88:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jun 11 13:19:22 2026 GMT
Not After : Jun 12 13:48:22 2026 GMT
Subject: CN=68F44730AE4E6A0AA62AEF4DE133B182365BBF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:31:d0:3c:89:11:4a:95:32:d3:6e:07:3c:
f8:1f:02:bb:a1:73:81:99:fa:9f:df:47:9f:b8:f0:
5a:22:07:a0:3b:95:90:5f:ee:97:2b:aa:ae:c4:2b:
2f:62:6b:ae:10:1a:b6:1a:36:10:37:26:9b:00:c9:
0b:ce:28:36:28:13:42:d1:ae:c2:eb:e7:f9:73:eb:
ca:9a:29:9f:8e:c6:09:ba:0b:0a:d0:3e:3f:11:e7:
50:c1:43:7b:06:4b:6c:98:da:3d:4d:98:3e:c2:d2:
09:21:bb:76:a8:c6:49:80:ab:a6:04:5a:7e:07:da:
b1:8b:1f:51:52:71:a7:83:0c:50:f4:83:b9:7b:47:
21:bc:cd:f4:6e:6f:38:bf:8b:e9:0b:85:24:16:fb:
ca:14:28:dc:4d:80:01:e1:c4:d0:f4:66:d3:01:9f:
5e:53:ae:0f:d9:09:03:93:3a:bc:1f:0e:2c:4c:b9:
58:2e:e0:0a:07:59:0a:11:68:54:17:de:f1:21:12:
06:31:27:9e:43:51:6b:85:aa:94:21:09:33:b7:9e:
ac:06:c2:08:9b:72:ec:48:bb:62:62:a1:34:ea:29:
f3:1f:a8:a3:b8:3b:50:32:81:b6:ea:05:54:22:98:
41:da:7b:92:62:b9:4b:ae:73:29:8d:4e:84:33:1b:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F4:47:30:AE:4E:6A:0A:A6:2A:EF:4D:E1:33:B1:82:36:5B:BF:00
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:55:41:8c:07:3d:b1:1c:dc:78:90:13:6c:5c:fe:87:7c:f8:
c6:a6:26:d9:e8:27:ef:81:13:22:15:81:8b:6e:ef:91:c5:92:
a1:f6:ef:b9:b1:cc:4a:25:81:64:ef:c1:34:42:ac:55:40:c6:
92:14:23:77:81:1c:5c:8c:cf:1a:b5:08:1f:6b:0b:cf:1a:40:
a9:90:8b:68:fe:9e:28:86:30:1d:9d:30:bd:f4:2e:b3:97:93:
c7:15:0c:0c:51:cb:32:fd:bd:d4:39:5a:75:39:8c:82:07:65:
44:0c:98:59:8a:c5:ba:fe:28:7b:b5:2f:32:80:9b:08:82:24:
5a:7a:8c:bb:41:89:62:66:ea:c9:8e:94:c1:37:0e:a6:05:95:
29:45:7b:b8:71:80:86:1b:8a:c1:f9:c3:43:0b:8c:1a:a2:a6:
c1:70:3d:47:d6:37:27:74:43:ec:68:ab:de:49:8c:84:48:b1:
e5:49:ea:67:52:92:ef:e7:6d:61:72:61:79:97:6c:2a:ef:7a:
df:3d:19:85:73:e4:08:23:54:73:b1:fb:47:3a:78:74:2b:a0:
31:d1:ed:fc:b1:85:58:86:e4:52:37:6b:a6:b4:70:fc:0a:f7:
80:6e:13:4b:69:b3:8f:57:3d:45:cb:da:89:41:65:e1:fd:4a:
2e:14:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:13:57 2026 by rpki-client