
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json)
Hash identifier: PUWwuC/hlZYgy9mGGR6XtBhmpwSUg4CjetofVG2aEK8=
Subject key identifier: 1D:EA:FE:B9:8A:EA:32:51:C9:D2:4D:AD:9D:6D:16:78:3F:2D:0F:5A
Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Certificate serial: 113A46E5667F67089DA330141F9262B815B8D561
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
Manifest number: 02DD
Signing time: Fri 24 Jul 2026 06:33:24 +0000
Manifest this update: Fri 24 Jul 2026 06:28:24 +0000
Manifest next update: Sat 25 Jul 2026 10:17:24 +0000
Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: x4URndcJbSIXure+2iXcOWOE33cWiEMr6K82aexzHlI=)
2: 326130663a383563313a3339303a3a2f34382d3438203d3e20313331363330.roa (hash: SDgvWVR9BK4ArLiN2y0FdP04j29HfEBVHHfa70zlSZU=)
3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: PpctkXb5KUjo1ZozH4ZG/Vu6RAiqzknnMgLdpVk1Gts=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl
rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:3a:46:e5:66:7f:67:08:9d:a3:30:14:1f:92:62:b8:15:b8:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089
Validity
Not Before: Jul 24 06:28:24 2026 GMT
Not After : Jul 25 10:17:24 2026 GMT
Subject: CN=1DEAFEB98AEA3251C9D24DAD9D6D16783F2D0F5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:f6:1f:1a:1a:0c:49:da:d5:aa:f6:cf:6a:
92:0f:25:47:17:51:bf:3f:fb:0e:fb:f4:99:39:f6:
5f:53:31:ec:e7:0a:e6:cc:4b:a1:bc:21:b7:8f:d3:
99:e6:2a:26:97:b1:4a:f5:3e:ed:ba:d1:fc:5a:4e:
33:bd:ed:f6:5f:1b:78:84:2b:ac:84:dd:2d:a9:4d:
31:87:aa:97:b6:03:ca:66:5d:18:39:3d:40:6d:9b:
3e:93:44:a7:cf:92:5d:76:e5:12:04:35:52:33:af:
88:d8:1c:b6:5a:e4:55:7c:f3:9c:b5:d7:fa:2c:96:
97:57:0d:6f:4c:e2:62:2a:57:79:fa:39:09:f2:1a:
d6:d9:6d:fa:8a:e0:82:c7:42:5e:75:e0:a3:42:89:
35:08:d5:73:f9:86:40:ae:9b:0f:23:a5:d3:d4:23:
8b:75:06:e0:0a:8b:34:04:f3:ee:a6:7c:34:1d:73:
5f:30:a5:91:3f:ba:97:06:9f:01:3a:a4:9e:62:10:
b9:ec:be:ce:5a:a8:74:9f:4b:5e:14:f6:06:5f:f1:
cf:82:9c:a0:c3:f8:71:a8:92:f6:d4:bc:f9:9c:fb:
03:6b:72:e4:5b:a2:92:7e:4f:9a:57:d6:c0:da:95:
95:5e:78:ab:fc:89:52:d3:57:88:2c:9e:48:b9:40:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:FE:B9:8A:EA:32:51:C9:D2:4D:AD:9D:6D:16:78:3F:2D:0F:5A
X509v3 Authority Key Identifier:
keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:de:0d:56:3b:c1:e2:7d:57:4e:78:ac:1f:7d:a3:33:10:
f6:fd:36:66:fe:8c:ba:53:e3:62:98:52:3d:36:d2:29:a3:ce:
33:84:e1:d9:7e:9c:1a:33:87:eb:3b:36:3d:a5:63:61:60:0e:
67:9b:dd:5a:b1:3b:83:83:30:5f:a0:64:82:ac:b4:b3:84:56:
99:e0:99:e9:54:b8:c7:c4:a1:e4:eb:14:67:27:6e:1a:1f:ee:
e2:e7:46:87:f3:a4:97:40:41:f2:ad:56:98:ec:af:4e:99:ba:
42:fd:ce:b2:1a:73:c4:8b:34:a6:7b:c4:30:97:f8:02:00:18:
69:51:e9:8b:ef:61:05:34:9f:f0:dd:56:9c:ec:f2:c5:47:63:
ca:f6:9b:52:f2:93:d5:f2:db:42:de:52:76:6d:11:e0:4e:91:
88:f4:69:7d:5a:c6:5b:bf:83:c4:87:4b:d0:94:ee:dc:81:ba:
bc:69:a8:8c:21:08:d7:93:1b:e9:5f:43:2b:bd:44:2d:ae:b6:
f3:4a:d6:d7:7b:f7:5f:e3:96:be:61:e6:ad:ae:ca:a7:1e:2e:
c1:d2:e1:f4:93:d8:0a:71:c4:76:cb:69:ad:2c:f6:35:47:5e:
e8:b1:55:e4:5b:a5:4e:00:b2:b8:54:61:f0:2d:83:82:ea:87:
de:76:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:32 2026 by rpki-client