
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: oNR4+qDgCxcR+do+e9Z+LOvwAmtFCbBXdWFwnqdsKg0=
Subject key identifier: 99:14:7F:AA:78:AE:EE:D5:ED:AD:82:9A:89:84:00:4A:93:EC:12:AC
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 6CF73BE74F1254A21B7E8C9AEFA74A35E82ED187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 043B
Signing time: Wed 28 Oct 2026 18:46:41 +0000
Manifest this update: Wed 28 Oct 2026 18:41:41 +0000
Manifest next update: Thu 29 Oct 2026 20:50:41 +0000
Files and hashes: 1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: /uaMgihPC3IleOA8rrRxlWBDKgcrHemqwt+82sssPAU=)
2: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: Qmo3MoWwkKBWouocBexituyWf2OsxX6PDMEUO8aReSw=)
3: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: L9N61GZrgQ5virt2qFxgsc/JOkknEDcdSanMcULWk5s=)
4: 352e3137382e3132342e302f32342d3234203d3e203431373230.roa (hash: denS4ShosQEflOOKSOFKHIlQq2P37gUifSSYnpY0oi4=)
5: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: m6wWT3FMNVMcoRRQhZ+mdOZfMcT4LVgmbvVeTssNZ1o=)
6: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: stUKzxp9FSabLqBbmp/31UHFmp2ltgPOF6jMIp4guIM=)
7: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: KGBdO03qyyafMOxo4U+d/wPS0xbGpENnx76PaW6XZ3w=)
8: 352e3137382e3132352e302f32342d3234203d3e203431373230.roa (hash: 2wW5t36NJMTXW3Jrvo3pMIkucCLejHza7QPvifnreNo=)
9: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: KmE4Ra4RNXxBeAk9rV4T92zm3sto8pmIbD9YJoj2hJY=)
10: 3138352e32312e3132392e302f32342d3234203d3e203431373230.roa (hash: X00xehiC09J74nSsF8Ko+/NFcQ+tlis5g8MfH1Xa6kg=)
11: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: srrAE4PnG7Smy0Hyw6ZLJcjBNnqLRb+bmWYGj/WYI2E=)
12: 326130643a623238373a646464643a3a2f34382d3438203d3e20323139333038.roa (hash: lhnf24+d+KsCQOPaVipDtlRXOcDvUPxkqrOPn+C77uU=)
13: 3138352e3133302e38382e302f32342d3234203d3e203431373230.roa (hash: Q6SwM6coh0lhmv2Gg85VRe+9HM4FBsO6keE2v7Y1R3c=)
14: 3139352e3138322e3231312e302f32342d3234203d3e203431373230.roa (hash: fKLQTu0IVvtIU1j1ED5jisbzx/ixZ3gIYrA73t09dNU=)
15: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: IWxDGwnCe47DwB/QE0frhiu04YnzGfcmOau8r6CSuq0=)
16: AS41720.asa (hash: MwLliTX8n57WMFW6o6NS6fwel9rD3ohuAmiMMy87fZg=)
17: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: ivRYcKVBavH9t8GiJ9N3cjwe45NnnX0wNJoN9vaUIQU=)
18: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: I/iO3YAfj293FmGBTRLAPscviIPgQbl+nLgu16ZbM5M=)
19: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: c/O7QOCGP6dZWdMg85nw8EMYpXMSqcsPpnlxKsXEJxg=)
20: 34352e3134362e352e302f32342d3234203d3e203431373230.roa (hash: /A+vKWQmGHFkxgp4vYuvNcELZtcoJ1pL9jVDE0PN8VU=)
21: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: gf5b8NhF0zR0RYc46WS4uCNmpBmFubnVS7Fe41WKmKs=)
22: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
23: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: noOpptHyYahGYRczsInCwYjuMyS1afxmOWJs2YpvAT0=)
24: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: PivPGN9xNNuplOmy9E3nfw1TUinsGI+X07yLclSfZdw=)
25: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: YpPTi9R5puadCgdU1ozZSs1eaFYHiNZs61jWCfgGXKA=)
26: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: 5bbIRsdAjK7srHufZ+Dw+kesoYz11+KIuBbiQq0S3J0=)
27: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: jCFWapAcSAL9ciWMikQNoNWJEA+G6RFzEYAyKbOa3n0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f7:3b:e7:4f:12:54:a2:1b:7e:8c:9a:ef:a7:4a:35:e8:2e:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Oct 28 18:41:41 2026 GMT
Not After : Oct 29 20:50:41 2026 GMT
Subject: CN=99147FAA78AEEED5EDAD829A8984004A93EC12AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:98:01:4c:ff:c5:7f:55:41:3a:78:0e:fc:f7:
0e:8a:46:4e:e0:53:af:dc:65:00:af:73:36:fe:02:
e0:ab:9d:0c:47:a2:ba:bc:b0:af:f5:7d:9b:1b:71:
0f:c2:46:df:45:19:19:b5:9c:0d:18:4a:97:a2:fe:
ed:cc:1c:60:bf:c7:16:da:dc:22:0d:90:44:78:d7:
e7:99:28:8e:d2:3b:45:d1:9c:0f:dd:a3:3c:4f:71:
71:7b:5a:e1:9e:9d:18:50:2a:f0:04:03:71:ad:19:
83:f5:d3:ce:7c:2e:94:eb:0b:c9:87:f2:d6:8e:69:
67:4e:5f:cb:58:b4:79:be:b0:c6:b8:dc:e7:7f:a0:
a2:e4:15:e2:8f:e5:ef:67:f0:e4:66:d6:e9:b9:1e:
13:22:21:71:92:9c:ff:9c:54:d1:21:64:dc:4a:9e:
33:fb:10:cc:62:b5:f1:03:c4:23:62:8f:45:3a:50:
a6:0e:62:82:8c:fc:b9:89:22:06:8d:7a:94:a4:33:
2a:7c:47:19:bd:73:c6:48:a7:9e:ff:be:56:c9:8b:
83:55:ed:52:88:6c:86:43:7e:e3:d4:53:9a:4f:29:
5f:08:ff:c2:cc:55:79:59:38:62:7a:6f:c0:d2:bf:
04:10:4f:99:5b:b8:b9:4a:f9:8c:7d:14:2f:06:16:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:14:7F:AA:78:AE:EE:D5:ED:AD:82:9A:89:84:00:4A:93:EC:12:AC
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fb:58:da:04:ee:be:65:ac:eb:59:d4:26:ec:33:5f:ab:ea:
69:82:08:6e:d5:e4:31:f9:a5:f1:be:6c:89:0a:e9:6a:02:fe:
a0:2b:4c:b8:21:4b:dd:6b:1a:f7:de:7f:00:03:e5:28:45:85:
ed:b9:dd:1f:f6:44:b7:13:cc:ed:ce:8c:2a:30:9c:b6:23:38:
05:13:55:2e:2e:dd:93:2f:41:30:13:f1:e3:08:9a:b1:bb:3d:
45:55:5e:54:2f:4b:d5:bb:b7:8e:b7:d2:05:29:46:d5:b1:cf:
24:c5:d0:8d:50:c4:f6:a9:1d:02:d1:03:13:31:d1:cf:96:f9:
0e:32:fc:cd:89:b9:bd:27:82:96:f8:42:3c:4d:dc:c9:09:c3:
c6:2f:29:32:4e:31:31:19:61:40:0b:cb:c3:8a:e0:09:8e:48:
2e:49:f4:55:70:07:7c:7e:be:4d:8c:fd:16:ca:31:8b:e0:92:
32:49:97:b9:37:ae:3f:02:6d:32:1c:2b:cc:29:b6:98:46:2c:
c8:5e:47:3a:ba:9d:de:25:d0:12:b4:8d:e2:6e:27:89:eb:b2:
2e:bb:9f:b7:82:fb:9c:d5:55:e7:17:2d:dd:90:81:54:2b:b4:
4f:9c:02:b2:07:13:ec:e3:f4:4a:17:22:dd:7c:dc:68:10:19:
0f:bd:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:51:22 2026 by rpki-client