
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: 7os8L2NlrLeEg8uxQ7QI2fMlgiFqVuVOp1plxLiHRQg=
Subject key identifier: BB:4B:CC:F1:D0:FC:D9:64:A8:F3:16:21:B1:39:B5:DA:54:13:F0:A3
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 7F9CD311731B757389F1218BACBBAC6F39BC3B4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 0213
Signing time: Wed 25 Mar 2026 18:48:07 +0000
Manifest this update: Wed 25 Mar 2026 18:43:07 +0000
Manifest next update: Thu 26 Mar 2026 21:07:07 +0000
Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=)
2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: UZOiFEWW9cOl678Fz3p+Biaj2bc+VUHVQ/WfqtQrYpE=)
3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9c:d3:11:73:1b:75:73:89:f1:21:8b:ac:bb:ac:6f:39:bc:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Mar 25 18:43:07 2026 GMT
Not After : Mar 26 21:07:07 2026 GMT
Subject: CN=BB4BCCF1D0FCD964A8F31621B139B5DA5413F0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:c2:c3:a7:a2:16:d1:0a:2d:b0:3a:0d:d9:
10:a5:ce:43:43:01:6e:ff:30:0f:4c:bc:16:60:73:
4f:14:e2:24:52:d0:4a:ca:a7:fd:3c:cf:f6:81:a0:
b4:1c:74:6a:05:a0:7a:d7:72:7d:a0:17:18:79:da:
34:b6:3b:a5:3c:69:50:2b:a9:59:42:88:9f:83:c7:
a7:21:8d:eb:c8:47:de:c7:65:e8:b7:76:46:6c:65:
e2:e8:7a:5b:62:7b:9b:bc:90:57:44:8c:7e:9e:84:
aa:4b:3f:b4:9d:ad:b4:09:f6:cf:f3:05:7a:df:22:
6f:92:3b:d3:f2:9d:ec:b3:9c:1d:18:e8:a5:09:04:
08:67:ed:2e:51:19:70:40:dc:54:7b:52:d6:a2:0a:
13:f4:91:af:d8:36:e5:fb:f6:c1:48:b3:1e:b0:d4:
75:a9:fe:87:42:44:29:bb:fa:f7:7b:d5:3c:85:05:
48:c8:30:3a:61:3a:75:e7:e5:0f:4a:2d:0d:36:21:
2f:09:84:66:53:f8:78:1d:69:bd:9d:e2:04:23:f8:
fe:62:68:22:5b:51:39:11:9d:2a:dd:01:93:52:d1:
75:62:ca:1d:d3:c1:66:4f:6b:fd:af:94:43:06:48:
c0:33:08:39:5c:de:24:88:1d:55:77:2e:28:14:7a:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:CC:F1:D0:FC:D9:64:A8:F3:16:21:B1:39:B5:DA:54:13:F0:A3
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:4f:28:14:95:1c:8d:eb:2f:2d:d5:7f:75:a4:21:ad:8a:
55:96:44:26:25:cc:f7:05:6b:b6:e1:3c:48:96:92:62:c5:77:
b3:94:54:f4:2b:59:90:40:8e:a0:d8:9f:e3:af:47:de:8e:7a:
61:2f:fb:a4:e8:ef:9a:6e:e9:e9:43:0f:f5:a6:ed:e7:62:ea:
6c:33:e1:59:5d:3c:c6:f4:22:74:05:b4:32:28:5b:42:0d:74:
b5:37:8c:d3:93:fd:a4:a7:96:43:bd:5b:91:07:f9:4d:7e:9d:
96:d3:38:ed:fe:4d:f7:fc:d3:b2:4e:d0:a5:1e:55:9d:ad:58:
89:51:d4:ce:63:39:c5:5b:9e:7f:96:6a:14:c1:57:c1:4d:37:
b2:f7:27:83:4e:82:c3:53:9e:47:88:82:1a:a5:20:6f:7b:98:
56:49:a4:a1:36:27:f0:97:ac:2d:5e:81:82:c7:1e:2e:33:3b:
92:98:30:f4:15:49:a9:97:40:1e:16:43:ac:c3:f3:e4:c8:56:
9d:98:a6:65:5f:bf:cb:2e:48:ce:49:55:4b:7b:aa:5e:64:be:
0c:e4:c7:cd:5a:06:02:ac:c5:8c:24:f3:7d:5a:c7:11:f0:2d:
62:c2:31:be:a2:de:9e:cd:4d:df:2e:06:4c:26:68:3b:9e:ab:
2d:d1:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:37 2026 by rpki-client