
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier: UEFH8Bt1sLZrxYOCn7rm2tEPtMVeD+l+bITV4frNOPs=
Subject key identifier: BC:E3:BD:AB:19:5E:EA:2E:BC:5B:72:5C:00:77:83:6E:E8:86:82:93
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial: 294663DFDF9E6A8B163E6DCB8625F8F7023D2B68
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number: 0108
Signing time: Thu 23 Jul 2026 09:38:54 +0000
Manifest this update: Thu 23 Jul 2026 09:33:54 +0000
Manifest next update: Fri 24 Jul 2026 12:00:54 +0000
Files and hashes: 1: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
2: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=)
3: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
4: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
5: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=)
6: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=)
7: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
8: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
9: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
10: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
11: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
12: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
13: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
14: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=)
15: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
16: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: Y7s0vPOCGezHZic30RcWSQjpRozCpvb35WrDacO0aMQ=)
17: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
18: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
19: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
20: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:46:63:df:df:9e:6a:8b:16:3e:6d:cb:86:25:f8:f7:02:3d:2b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Validity
Not Before: Jul 23 09:33:54 2026 GMT
Not After : Jul 24 12:00:54 2026 GMT
Subject: CN=BCE3BDAB195EEA2EBC5B725C0077836EE8868293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:ea:2e:4a:8b:e6:23:05:17:dd:e8:48:9b:
39:51:87:31:ae:b2:4f:f2:6b:7d:0e:ac:fa:d1:3c:
d2:17:45:16:7a:61:05:ad:3c:61:ac:85:d3:94:2f:
67:8b:35:32:13:23:da:ef:f1:33:9b:b6:5a:36:a3:
7c:27:bb:13:84:38:91:ea:86:20:1e:3e:d4:a8:69:
0c:b9:0c:f3:b9:f6:30:c6:58:30:d1:f8:cb:c4:f2:
db:06:29:66:28:05:57:71:0c:e5:9d:1c:e0:16:a4:
06:68:69:7f:d8:02:46:2e:ad:4e:11:fe:4d:8a:61:
87:a2:29:8e:c5:5e:78:d1:58:07:fe:4b:ce:e6:ae:
07:88:af:fe:32:7d:c0:a3:14:cb:48:6a:2c:90:c9:
8a:01:a0:dd:05:56:60:4b:00:9b:89:fb:16:ee:61:
ce:90:8e:dd:47:d2:42:c2:7d:de:70:b3:f1:14:24:
1a:f3:f8:5e:d5:05:da:90:b0:e3:b5:c7:7c:7b:56:
0f:04:a2:ed:60:53:6d:4b:80:a5:62:b3:f4:76:fb:
1a:27:51:bb:ad:8a:b1:b9:7d:e9:4e:1d:8a:0f:c3:
80:d7:d4:8a:c1:10:c7:b6:25:ed:b1:0c:27:5c:cf:
b6:88:63:58:da:84:e5:73:1e:23:55:93:bc:38:02:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:BD:AB:19:5E:EA:2E:BC:5B:72:5C:00:77:83:6E:E8:86:82:93
X509v3 Authority Key Identifier:
keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:34:e9:88:55:0b:4a:2d:48:6a:29:c7:16:f1:b8:20:50:19:
25:9b:97:08:ca:41:4c:36:50:a9:6f:8c:c2:0e:28:99:40:74:
eb:88:cb:6c:b9:85:86:b5:38:36:97:42:38:6c:d5:1f:1f:85:
d6:c9:b7:a9:5d:75:4f:08:ce:d7:ef:8c:97:11:ec:a4:ff:21:
ea:59:3c:66:29:eb:35:8d:1c:13:f5:e8:f0:94:0a:99:e9:d8:
6d:9e:c9:4a:51:aa:9d:96:65:e3:6f:4d:91:ae:88:e2:f6:06:
ce:ed:0d:ec:5c:fa:ed:1e:50:44:72:b7:f2:46:42:77:05:e8:
46:61:eb:4f:2a:f3:cc:6a:b8:17:c4:ad:cb:a3:f9:ad:64:f1:
11:b8:7b:63:32:fc:c5:b1:5e:d9:08:3e:ac:20:d8:fa:95:4f:
1f:19:4a:e3:47:d8:6e:3a:10:cb:91:b0:62:4f:c4:4d:4f:33:
ca:71:ce:05:20:0b:67:bd:60:29:d4:cc:fb:20:1a:3b:9a:2b:
eb:3f:19:b6:e2:39:0b:92:6a:50:38:e6:1b:cd:9b:b4:1c:06:
4c:09:c9:b5:5b:ce:67:49:d6:a8:c5:d4:7c:4e:53:f0:11:38:
69:87:61:b0:3f:d0:27:3f:d7:03:fd:c2:56:65:f7:13:d2:a1:
3e:88:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:44 2026 by rpki-client