
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json)
Hash identifier: 8W7RHNkXf6EW7hakllun6Wdb6EFWjZri38bZTTPS0zI=
Subject key identifier: 44:E4:01:93:AE:1B:8E:B1:4F:9F:22:82:78:60:21:C8:E8:23:4F:FA
Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47
Certificate serial: 7FF790E2B27E7362F1F5C057D508ADFCD38E1E7C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
Manifest number: A0
Signing time: Tue 12 May 2026 10:15:37 +0000
Manifest this update: Tue 12 May 2026 10:10:37 +0000
Manifest next update: Wed 13 May 2026 12:26:37 +0000
Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: fq9gI+8+XJYAVBu+rYRJKiS0KWVu8eQLGL7M7mEg6ns=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f7:90:e2:b2:7e:73:62:f1:f5:c0:57:d5:08:ad:fc:d3:8e:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47
Validity
Not Before: May 12 10:10:37 2026 GMT
Not After : May 13 12:26:37 2026 GMT
Subject: CN=44E40193AE1B8EB14F9F2282786021C8E8234FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:8d:f6:99:9e:3e:7b:e4:e6:bb:37:64:ec:
25:fd:ab:0c:ed:2c:e8:14:0f:d4:5d:8b:3c:b3:e8:
58:1d:dc:ea:ce:36:02:32:1a:33:65:e8:63:45:82:
d4:38:fa:4f:b9:4c:34:ad:3f:05:eb:85:9c:6a:15:
5c:a0:e5:de:16:ed:6a:4a:da:b1:13:6c:4d:69:39:
e5:0d:ee:0d:8b:94:f6:ca:a5:2d:c1:2f:d8:f2:29:
cb:fd:4a:0d:5a:9b:66:bd:c2:2b:56:98:a4:76:8c:
46:ce:b4:53:78:8f:1e:e0:87:33:f9:a6:96:f8:d5:
a1:ef:31:ec:65:8b:bf:0d:0c:c9:21:23:72:cc:6a:
85:3a:21:c7:e8:97:36:b8:ec:35:76:a4:1d:cd:e9:
1e:66:d9:39:53:7d:f6:80:23:68:f0:67:00:1d:91:
65:c7:35:80:33:60:3c:22:48:0d:c8:0e:fd:d6:54:
69:7b:d7:2b:d6:b3:1d:c3:6e:69:95:84:1b:d5:17:
b6:97:4d:c6:7e:18:2d:77:fd:e1:1c:9a:17:46:9a:
96:48:3d:b4:fd:8d:98:17:46:d0:ca:ae:1b:f8:90:
94:6c:9f:82:ca:c9:13:99:d7:af:f9:0b:0f:fd:bf:
dc:eb:49:db:77:90:87:8c:8b:02:1a:56:10:c7:52:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:01:93:AE:1B:8E:B1:4F:9F:22:82:78:60:21:C8:E8:23:4F:FA
X509v3 Authority Key Identifier:
keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ed:e3:12:75:17:a2:36:b7:61:ca:9f:5f:fc:74:41:f8:e2:
94:8a:3d:09:ab:23:cc:16:7e:42:75:22:51:9d:0e:01:36:7c:
3f:97:1f:d6:cf:cd:03:28:37:ee:8a:0f:6b:2d:78:46:25:b0:
6d:cc:41:47:29:38:e0:87:f8:dd:5a:02:96:78:78:f9:1c:5d:
83:ca:36:59:17:f7:cc:81:0b:7c:0b:aa:9a:a9:fd:b2:13:b7:
64:b5:cc:a1:59:6d:3d:76:0f:e1:e4:fa:a4:d1:08:f2:03:c8:
6f:4b:d2:ef:05:9c:2d:43:ed:f8:9e:9b:e6:0c:6f:46:ba:2a:
68:de:09:9d:46:65:47:c6:e2:2d:9b:71:6c:9d:77:f0:17:b7:
4f:bb:e2:96:c6:6c:f0:bb:ae:cf:a6:cd:20:0b:67:b8:2c:d6:
11:70:61:e3:de:70:c5:6d:e5:a0:ee:10:53:ba:9f:d5:e6:10:
06:c3:02:c4:aa:cc:eb:6e:96:e8:f0:24:3e:68:d2:3a:ce:b6:
06:53:aa:d6:54:33:66:bf:fd:9d:77:30:78:bd:bc:bd:b6:ea:
f6:e3:b1:a5:e8:29:93:f8:66:ba:6b:64:e5:41:c7:30:94:ff:
2c:1c:6a:bb:8c:66:2e:a7:94:48:7c:e7:0c:6e:0d:06:7e:5f:
5b:e4:48:03
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUf/eQ4rJ+c2Lx9cBX1Qit/NOOHnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2
MjE4NkM0NzAeFw0yNjA1MTIxMDEwMzdaFw0yNjA1MTMxMjI2MzdaMDMxMTAvBgNV
BAMTKDQ0RTQwMTkzQUUxQjhFQjE0RjlGMjI4Mjc4NjAyMUM4RTgyMzRGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWr432mZ4+e+Tmuzdk7CX9qwzt
LOgUD9Rdizyz6Fgd3OrONgIyGjNl6GNFgtQ4+k+5TDStPwXrhZxqFVyg5d4W7WpK
2rETbE1pOeUN7g2LlPbKpS3BL9jyKcv9Sg1am2a9witWmKR2jEbOtFN4jx7ghzP5
ppb41aHvMexli78NDMkhI3LMaoU6Icfolza47DV2pB3N6R5m2TlTffaAI2jwZwAd
kWXHNYAzYDwiSA3IDv3WVGl71yvWsx3DbmmVhBvVF7aXTcZ+GC13/eEcmhdGmpZI
PbT9jZgXRtDKrhv4kJRsn4LKyROZ16/5Cw/9v9zrSdt3kIeMiwIaVhDHUmOjAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUROQBk64bjrFPnyKCeGAhyOgjT/owHwYDVR0j
BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw
Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz
RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5
MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf7eMS
dReiNrdhyp9f/HRB+OKUij0JqyPMFn5CdSJRnQ4BNnw/lx/Wz80DKDfuig9rLXhG
JbBtzEFHKTjgh/jdWgKWeHj5HF2DyjZZF/fMgQt8C6qaqf2yE7dktcyhWW09dg/h
5Pqk0QjyA8hvS9LvBZwtQ+34npvmDG9Guipo3gmdRmVHxuItm3FsnXfwF7dPu+KW
xmzwu67Pps0gC2e4LNYRcGHj3nDFbeWg7hBTup/V5hAGwwLEqszrbpbo8CQ+aNI6
zrYGU6rWVDNmv/2ddzB4vby9tur247Gl6CmT+Ga6a2TlQccwlP8sHGq7jGYup5RI
fOcMbg0Gfl9b5EgD
-----END CERTIFICATE-----
Generated at Wed May 13 04:12:40 2026 by rpki-client