
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: kiSgdxALEpEH9eaf9mJBKO50dfv4XFu5sXFRz3dfIOM=
Subject key identifier: AF:F6:82:47:41:E8:DE:3F:F7:44:5F:1A:F7:BF:2C:97:84:84:5F:7D
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 087021EAEA2E936D16FF5DE97AAEF1AC89F48948
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 02B9
Signing time: Thu 23 Jul 2026 15:50:44 +0000
Manifest this update: Thu 23 Jul 2026 15:45:44 +0000
Manifest next update: Fri 24 Jul 2026 17:20:44 +0000
Files and hashes: 1: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=)
2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: 13HgrI8alXwhfvRcR3cuM4UiuHGwnYfL7SIxKn1MyyE=)
3: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:70:21:ea:ea:2e:93:6d:16:ff:5d:e9:7a:ae:f1:ac:89:f4:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Jul 23 15:45:44 2026 GMT
Not After : Jul 24 17:20:44 2026 GMT
Subject: CN=AFF6824741E8DE3FF7445F1AF7BF2C9784845F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:69:60:85:2f:d6:a5:5b:e3:ea:e2:0c:7c:
1b:84:a2:90:78:3d:19:7b:9c:e0:51:be:2d:f2:b4:
f8:2c:e6:e1:7c:6e:d2:95:63:63:57:25:0f:a4:09:
79:fa:fe:08:02:ca:b9:a3:57:3a:b0:63:2a:be:c7:
2a:d0:bd:0c:d4:fa:73:e6:42:e2:bf:e4:1b:0a:df:
3b:5b:b1:da:c8:76:23:66:94:95:bc:ff:a5:c7:31:
a5:47:64:c6:99:4b:52:03:e0:70:ee:62:f9:ae:8b:
4b:40:ac:c0:66:af:1a:6c:4a:85:f8:05:db:03:8a:
29:18:0c:8e:22:7c:62:0e:12:4b:83:d4:8d:45:fb:
d1:d8:08:b1:32:56:98:85:54:42:4e:da:b6:67:7f:
b6:3a:fc:98:59:b6:4a:2e:26:7c:32:f2:5b:3f:a0:
cc:ac:5f:bd:f6:bd:36:34:8f:93:30:69:a0:0b:aa:
63:a9:a5:44:a4:51:3d:40:c9:13:f3:aa:ce:cc:de:
5f:69:af:c2:c9:9e:e6:3e:ee:76:cd:57:2a:37:3a:
b7:92:ea:56:95:0b:28:6a:13:32:31:7a:4b:b3:c0:
67:62:1c:f6:c4:dc:dc:94:9c:82:2c:73:4e:0b:86:
60:35:40:fc:4f:b2:41:da:b0:60:f5:1c:39:5b:b8:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:82:47:41:E8:DE:3F:F7:44:5F:1A:F7:BF:2C:97:84:84:5F:7D
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2d:8e:00:83:3e:aa:09:b5:fa:55:ce:77:30:a7:6a:7e:ba:
95:4a:a6:b9:4d:c0:9a:7d:49:d8:43:ed:af:98:49:54:85:7a:
29:59:46:2e:9e:d2:45:eb:44:00:a4:3b:cb:05:0a:a5:41:ac:
19:a7:d8:09:0b:25:f8:42:7f:74:68:53:d4:ca:83:72:47:eb:
9f:52:d7:ea:58:e5:3a:6e:42:1e:2c:a8:ba:94:3e:77:50:52:
4f:97:39:87:5c:f6:99:5c:1d:f8:3c:3d:2f:2a:e9:90:43:ac:
64:53:1e:f2:e0:4c:fd:e9:74:6b:ba:27:4e:35:27:33:66:e6:
07:9c:d1:4b:d4:79:43:22:da:23:01:58:88:a7:7d:6d:06:f1:
21:6e:15:fb:fd:a0:2c:39:65:80:2d:ff:5f:98:a0:07:ca:70:
6f:bd:e1:7b:8a:96:75:d0:cc:f3:ba:bf:fc:82:40:10:e3:4a:
1a:bf:e9:a6:01:33:00:46:9c:f2:f0:76:fa:cb:1f:88:c0:bf:
f2:6c:fd:ce:78:c2:73:2a:ca:47:cb:af:7d:72:54:08:73:33:
b6:4a:44:26:41:14:b3:30:b3:a8:71:98:d9:6c:ef:38:dc:cf:
0c:e3:e9:f2:88:26:67:cb:64:18:8b:64:f3:b7:d6:7d:ac:66:
58:f2:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:54 2026 by rpki-client