
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
File: E9AE8529E9A69A4FA376F17695E6EB8731823068.mft (raw, json)
Hash identifier: ifqMS+q0+wwJxnzO1gadM4g/EY9FbazwPz8h/m7ARC8=
Subject key identifier: FA:D9:8A:9A:AB:61:B1:AB:71:FD:67:DA:E5:21:90:D3:12:D3:25:2B
Authority key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
Certificate issuer: /CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
Certificate serial: 2E7F08ED6A59E522CF7B958B4F8348F13DC604E5
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
Manifest number: 44
Signing time: Thu 26 Mar 2026 08:07:26 +0000
Manifest this update: Thu 26 Mar 2026 08:02:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: E9AE8529E9A69A4FA376F17695E6EB8731823068.crl (hash: FVdNbvxJUzDTlWSToaJi3GLSlvCvXhaC+vKCjAlg4ak=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7f:08:ed:6a:59:e5:22:cf:7b:95:8b:4f:83:48:f1:3d:c6:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
Validity
Not Before: Mar 26 08:02:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=FAD98A9AAB61B1AB71FD67DAE52190D312D3252B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:5b:c2:39:a5:b1:7c:cf:fe:60:45:68:58:
e2:c9:8d:c2:3a:c6:1b:92:aa:bb:04:f8:da:3e:b0:
15:4a:a9:90:c7:8e:54:a2:51:82:d3:4e:93:ed:4a:
31:01:74:7f:30:22:93:ad:a9:73:eb:79:79:ac:cd:
f9:cf:93:fc:96:48:84:e5:75:49:dd:b6:db:0e:83:
7f:10:dd:b5:ef:28:c5:bd:17:04:64:df:6f:02:6b:
e7:13:85:8b:70:a8:e1:51:d8:e3:90:90:d9:1c:55:
55:3d:54:52:57:e6:1d:8b:72:0e:16:44:5b:71:13:
c8:bc:47:3a:e2:1b:9d:6f:44:c9:f2:0f:56:a7:af:
50:28:e5:7f:8f:88:36:86:0b:37:5b:3c:35:17:1f:
73:c1:c4:45:4b:7c:07:8a:bc:08:e4:85:bc:a3:9e:
1a:4a:6a:52:a7:0a:f2:0c:6e:5c:a5:71:83:ff:1f:
de:e6:0d:90:01:34:f6:dc:5c:c5:72:c5:e5:90:f1:
25:a9:2f:c3:41:7f:e1:27:82:87:19:5b:d9:18:53:
72:65:ff:19:00:e2:9c:26:ea:36:53:0c:70:55:40:
cf:41:4b:25:63:8c:86:47:ca:c9:78:7f:2e:d7:24:
a4:d4:8c:2a:22:c4:d9:cb:af:f1:42:1a:1b:d2:85:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:8A:9A:AB:61:B1:AB:71:FD:67:DA:E5:21:90:D3:12:D3:25:2B
X509v3 Authority Key Identifier:
keyid:E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:38:58:cd:ae:61:14:f3:55:63:f4:ca:c8:89:be:d5:a7:
af:99:1e:3c:8e:14:78:a3:3a:01:59:03:f0:25:3e:72:fb:d3:
ac:d7:ba:98:fe:e7:b8:e1:d2:d6:6b:46:3b:14:9a:3d:8b:31:
bb:1a:90:14:11:3e:ad:cb:88:15:a3:20:7f:7f:f1:47:9b:40:
7c:d7:95:4a:52:28:13:cd:c1:de:ab:64:78:f4:66:d4:1e:55:
45:8e:66:81:ed:5e:5f:7b:ee:01:65:2c:6c:f8:ac:5b:14:b5:
b4:9f:dd:8f:46:9c:99:01:68:bd:8d:fc:46:9b:73:3a:df:59:
22:f6:a9:7a:f4:5f:f3:59:bc:0a:6e:3e:55:48:99:d9:b0:21:
dc:a6:d7:63:be:a4:be:e3:27:fc:5b:93:6c:a2:40:1e:92:dd:
6f:fa:ef:49:22:45:bc:21:0f:7c:00:76:fa:2a:80:4a:66:62:
e1:9e:56:51:21:ae:14:b7:eb:be:d7:04:b8:12:b5:fe:82:ee:
8a:a2:d2:5b:9d:65:19:bc:d8:3c:27:85:a0:52:b4:ae:d5:5a:
04:f9:ab:97:39:85:76:0a:9d:f7:d2:36:8a:ca:e0:d6:ee:15:
2a:0e:54:e6:8f:1f:7e:64:e1:ce:f8:17:b7:c2:31:5b:cb:c7:
d7:2f:0b:0d
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIULn8I7WpZ5SLPe5WLT4NI8T3GBOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODcz
MTgyMzA2ODAeFw0yNjAzMjYwODAyMjZaFw0yNjAzMjcwOTAxMjZaMDMxMTAvBgNV
BAMTKEZBRDk4QTlBQUI2MUIxQUI3MUZENjdEQUU1MjE5MEQzMTJEMzI1MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GlvCOaWxfM/+YEVoWOLJjcI6
xhuSqrsE+No+sBVKqZDHjlSiUYLTTpPtSjEBdH8wIpOtqXPreXmszfnPk/yWSITl
dUndttsOg38Q3bXvKMW9FwRk328Ca+cThYtwqOFR2OOQkNkcVVU9VFJX5h2Lcg4W
RFtxE8i8RzriG51vRMnyD1anr1Ao5X+PiDaGCzdbPDUXH3PBxEVLfAeKvAjkhbyj
nhpKalKnCvIMblylcYP/H97mDZABNPbcXMVyxeWQ8SWpL8NBf+EngocZW9kYU3Jl
/xkA4pwm6jZTDHBVQM9BSyVjjIZHysl4fy7XJKTUjCoixNnLr/FCGhvShbClAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQU+tmKmqthsatx/Wfa5SGQ0xLTJSswHwYDVR0j
BBgwFoAU6a6FKemmmk+jdvF2lebrhzGCMGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzkvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgyMzA2OC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvRTlBRTg1MjlFOUE2OUE0RkEzNzZGMTc2OTVFNkVCODczMTgy
MzA2OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9FOUFFODUyOUU5QTY5QTRGQTM3
NkYxNzY5NUU2RUI4NzMxODIzMDY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjQ4WM2uYRTzVWP0ysiJ
vtWnr5kePI4UeKM6AVkD8CU+cvvTrNe6mP7nuOHS1mtGOxSaPYsxuxqQFBE+rcuI
FaMgf3/xR5tAfNeVSlIoE83B3qtkePRm1B5VRY5mge1eX3vuAWUsbPisWxS1tJ/d
j0acmQFovY38RptzOt9ZIvapevRf81m8Cm4+VUiZ2bAh3KbXY76kvuMn/FuTbKJA
HpLdb/rvSSJFvCEPfAB2+iqASmZi4Z5WUSGuFLfrvtcEuBK1/oLuiqLSW51lGbzY
PCeFoFK0rtVaBPmrlzmFdgqd99I2isrg1u4VKg5U5o8ffmThzvgXt8IxW8vH1y8L
DQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:40 2026 by rpki-client