
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
File: A65FEBC1C46ADFA57072286562C5B598165C67EE.mft (raw, json)
Hash identifier: 9oLx1V5UEIulmd9W2p48n0e0DkWtlyN2ESvijQBVz1Q=
Subject key identifier: E3:C9:5D:A9:46:51:77:DA:47:4C:A4:CF:A5:52:EE:8C:99:3B:5C:88
Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee
Certificate serial: 6EBEB92A53B68CCECAC3ED461796C41E30395FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
Manifest number: 30
Signing time: Sat 14 Nov 2026 23:55:10 +0000
Manifest this update: Sat 14 Nov 2026 23:50:10 +0000
Manifest next update: Mon 16 Nov 2026 01:27:10 +0000
Files and hashes: 1: 3138352e3235312e3134342e302f32322d3232203d3e20333937343233.roa (hash: EujYDAEvWheVUX+5zyMLxg56IY6SlTmfDh+zV3yAF08=)
2: 3136372e39342e3137322e302f32342d3234203d3e20383132.roa (hash: G8x+fUzXcLwiY+ROUXSWk+wDyXKPyyI0mWKRwK9o2m0=)
3: 3136372e39342e3137302e302f32342d3234203d3e20383132.roa (hash: oHzSeP2PpUoa6IQgvHLBBzBCQLqhOSBXbzdll+dG7jQ=)
4: 3136372e39342e3137332e302f32342d3234203d3e20383132.roa (hash: 35AwVzdgEGp5zlnr0/lNtdMD3Uj6xpoz0EG4D5pXkKY=)
5: A65FEBC1C46ADFA57072286562C5B598165C67EE.crl (hash: oHMJWI1TMl8n0OqlJB2ZmndMobYnZs+98IekKwOM5k0=)
6: 3139302e3130322e3130302e302f32322d3232203d3e20333937343233.roa (hash: SyImA9I94NpPLhfvq0A9BsLA+kdB16CHA3jDOJ+cmI4=)
7: 3136372e39342e3137312e302f32342d3234203d3e20383132.roa (hash: NlQDMZYh+ngjbmQHGyVQcsSwU1CBlfu7kANaaWPP2jc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:b9:2a:53:b6:8c:ce:ca:c3:ed:46:17:96:c4:1e:30:39:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee
Validity
Not Before: Nov 14 23:50:10 2026 GMT
Not After : Nov 16 01:27:10 2026 GMT
Subject: CN=E3C95DA9465177DA474CA4CFA552EE8C993B5C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:a4:a0:8f:33:41:17:d1:39:51:c5:98:cc:
b1:7b:87:ab:9c:c9:bf:a8:f3:da:9f:92:54:a3:f3:
d6:09:89:97:c1:0b:ec:51:1e:e8:54:b8:01:ed:1b:
cf:fc:d7:7c:37:c4:7b:c6:e3:e5:79:6b:7f:50:13:
40:0c:1e:21:a2:bf:cf:5c:9e:1d:4f:59:4c:4a:83:
cf:eb:62:d2:71:21:d9:51:f8:2b:81:5a:82:be:d4:
a6:f7:cd:75:d5:69:ea:41:94:24:64:4b:c5:96:72:
fb:b8:58:f7:9d:78:50:81:d5:88:56:31:18:11:f8:
3a:2e:25:de:b8:67:d7:19:c4:f3:11:b9:52:f0:53:
31:cb:6d:8d:f5:1a:a6:b4:b8:8b:90:dc:8b:7e:a0:
e9:8a:ab:a8:65:77:d7:1e:22:e2:96:33:34:fe:3e:
e4:fc:51:f5:81:e8:13:e2:a4:b8:a8:3f:4c:9f:65:
42:a4:71:a0:0f:b5:37:e6:ac:2a:c9:b6:4a:bc:df:
b9:e7:e1:71:44:e6:4d:fb:9d:c1:c3:a7:9f:24:29:
47:0a:e7:c4:8e:a4:f0:1c:fc:f4:a1:25:e2:af:19:
d9:dc:fb:61:52:5f:b9:53:f7:a9:98:cb:3b:5b:6e:
c6:30:aa:25:4b:9c:97:8b:fb:7b:a0:72:86:81:f2:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:5D:A9:46:51:77:DA:47:4C:A4:CF:A5:52:EE:8C:99:3B:5C:88
X509v3 Authority Key Identifier:
keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:49:e0:43:1e:c9:00:0b:16:e6:92:cc:a9:a3:07:0a:fa:fe:
10:99:54:c6:d0:bf:65:82:30:97:bc:ec:84:d1:80:df:09:4d:
b2:56:16:6c:e3:84:2d:25:e7:9c:9c:88:d9:d9:67:ed:52:a9:
c6:d9:2a:98:f4:f9:d5:d5:ed:06:86:df:6e:c9:e3:bb:cf:78:
e1:94:09:5a:2e:47:5e:17:ae:bf:cc:e1:bc:a1:c2:eb:a3:27:
ee:c1:cd:6b:28:e0:2b:1b:c8:ed:ea:58:70:fc:52:80:9e:a1:
8e:4e:00:74:66:65:b1:a7:fc:5f:16:d1:a8:68:96:c8:6d:d4:
3d:07:e8:d6:52:a0:26:ba:c7:31:1e:05:54:16:59:05:c2:90:
4a:b1:56:88:83:d0:a7:a8:76:82:48:83:c4:b9:fe:01:20:4b:
43:10:76:07:12:ec:78:dd:52:6a:60:54:37:46:36:b2:9c:28:
57:6a:06:ca:14:5b:74:20:54:83:89:10:5a:12:90:d3:00:ac:
86:13:f2:da:d1:f6:b4:eb:1a:e9:79:17:16:52:0d:61:8c:6c:
8b:5c:d5:65:85:78:b5:27:4a:74:4e:5b:54:63:9a:fc:c8:a3:
90:b6:a6:54:6e:45:7b:89:05:6a:ce:f3:8c:57:ba:6a:ef:0e:
84:98:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:48 2026 by rpki-client