
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: PRrDkOiooxegH4wmnmkdOc6NfaxyuYzWZaFKFzovqss=
Subject key identifier: 9F:4E:F3:12:82:3F:98:3C:43:C8:5A:B2:84:26:90:A9:84:2B:44:D2
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 1057FF368740991F95D781ECF6E18254B70380F6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 0310
Signing time: Sat 26 Sep 2026 01:12:57 +0000
Manifest this update: Sat 26 Sep 2026 01:07:57 +0000
Manifest next update: Sun 27 Sep 2026 04:25:57 +0000
Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=)
2: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=)
3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: WNUbOQFQBKaCLzmDBGSk5qOMHZfWyKvK8O/K029/LXM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:57:ff:36:87:40:99:1f:95:d7:81:ec:f6:e1:82:54:b7:03:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Sep 26 01:07:57 2026 GMT
Not After : Sep 27 04:25:57 2026 GMT
Subject: CN=9F4EF312823F983C43C85AB2842690A9842B44D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:c8:88:d2:a4:98:ef:32:99:38:1f:fc:37:
e5:58:7f:d1:77:01:05:f1:de:34:62:2d:aa:1a:52:
e5:d5:91:ce:e1:5d:f3:a1:2f:4f:cc:b8:d6:28:62:
51:aa:26:5b:9f:62:ed:85:b6:d0:e8:a0:15:cc:f4:
91:f7:6a:6b:cf:f0:62:6f:bb:f8:72:f4:99:09:7c:
e6:a8:e4:67:5b:f8:a9:64:61:d0:a0:08:30:a8:2e:
d1:3f:20:a4:9e:e7:0d:97:ee:92:b3:f9:2c:59:8d:
66:0f:6e:80:bf:57:f5:9f:8f:a8:20:e0:8e:55:22:
cf:f0:49:63:ef:74:b9:48:07:75:eb:99:aa:e4:aa:
ab:59:dd:19:b9:84:27:fb:99:51:66:cd:1e:88:f0:
3f:01:74:93:41:8f:c0:f9:c0:d7:6a:00:0c:c3:2a:
d9:23:e6:0b:17:19:1c:b3:f5:a8:9a:3f:32:9b:82:
0a:42:7d:bc:4f:5b:5e:71:d7:52:d7:84:b5:4f:74:
54:06:a0:16:e6:e6:fb:9b:08:90:e7:86:75:6d:cf:
91:b0:f6:ec:f2:33:f1:d7:ba:44:1e:b9:fb:da:5e:
e0:bf:2c:27:af:b5:ce:6c:98:a1:c4:d2:6d:91:9f:
38:8e:d7:d9:11:e5:6d:1f:6b:4e:8e:a3:61:f2:eb:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:F3:12:82:3F:98:3C:43:C8:5A:B2:84:26:90:A9:84:2B:44:D2
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f1:56:34:17:ec:29:82:ba:c9:4c:f4:dc:94:27:2a:8c:77:
d3:45:5f:64:59:ad:61:65:ee:b0:0c:79:4a:8f:b0:4c:85:d1:
50:ef:41:8e:a3:a2:44:8a:53:95:dd:7e:36:a2:c8:99:18:93:
76:dd:76:b5:7b:91:f0:4c:c5:5b:ee:ef:ff:56:bc:76:ad:06:
29:d6:9d:78:50:4a:59:86:fd:e5:62:ce:69:66:ba:ff:6e:1b:
8c:e5:f9:09:76:d4:b7:fa:a3:a4:d6:91:6c:ac:7f:a8:73:b2:
0c:c0:fb:ba:dd:2f:f5:fa:c9:d8:79:af:27:f1:cb:b9:c0:95:
4b:c5:0d:6f:0b:f0:a3:e3:10:dd:ff:51:21:b7:0b:d2:ed:3f:
0a:54:a8:26:a2:dc:a9:99:81:a3:24:51:50:33:8d:76:75:db:
f0:79:17:ae:36:01:1e:f5:09:86:16:e7:57:9d:ab:fd:5b:11:
f2:30:f1:e6:15:06:a7:15:3f:c5:a4:f0:9f:4e:89:d4:34:d2:
a1:fa:d0:23:02:5b:a7:e5:ca:88:ab:49:c0:a4:e5:96:e6:1e:
c7:a6:5c:7e:71:10:48:c5:d8:21:61:32:c6:03:8b:11:d9:bb:
ff:ad:1a:d8:ca:12:ab:21:72:f1:49:22:15:e8:fb:5f:09:8c:
0f:ef:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:31:26 2026 by rpki-client