
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json)
Hash identifier: PzPiQ8Cs8YEquxXrxa4VpnbWOGvB6Vw6udMXBn/zsxs=
Subject key identifier: 50:DB:76:80:10:F1:76:E3:01:B9:5C:BD:A8:10:3C:8C:6B:97:05:6B
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 261691E6F4BE59B6C219A716363C5E9EEBB2906D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
Manifest number: 0610
Signing time: Sun 15 Nov 2026 05:50:17 +0000
Manifest this update: Sun 15 Nov 2026 05:45:17 +0000
Manifest next update: Mon 16 Nov 2026 07:25:17 +0000
Files and hashes: 1: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=)
2: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: KRzIFLwk9MQ65X9sq1MaEk6P/DrXO5Ch7+8vK2CYVmU=)
3: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=)
4: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=)
5: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=)
6: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=)
7: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 7KlnQuTWqE35EvvZ6Oc9Z0eOmEdOopKsfo+J34frqK4=)
8: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:16:91:e6:f4:be:59:b6:c2:19:a7:16:36:3c:5e:9e:eb:b2:90:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Nov 15 05:45:17 2026 GMT
Not After : Nov 16 07:25:17 2026 GMT
Subject: CN=50DB768010F176E301B95CBDA8103C8C6B97056B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:31:df:6f:de:a6:e3:6c:ee:b1:cc:9f:61:
1c:6e:b5:f0:8d:d1:ec:49:df:95:e9:da:83:b1:f3:
dd:2b:7e:50:0b:4f:81:0b:3e:21:c1:02:08:ab:7f:
17:56:69:bc:79:a4:9c:15:0a:ae:9e:81:a9:1c:d8:
a0:e4:2e:04:6d:94:a8:53:71:ac:f9:67:b7:b7:4f:
db:61:e5:ee:90:da:88:6d:d3:cb:b5:44:c3:c9:23:
c1:8f:82:60:d6:a8:25:b4:86:b5:76:db:4e:15:5f:
0c:46:80:72:0f:fe:c6:43:df:4c:fc:8a:15:e4:e3:
02:88:66:0d:83:0d:2f:c8:1c:31:d1:ed:c1:fa:61:
05:62:94:5f:68:52:25:9c:1e:ae:65:e3:f6:e5:9a:
68:1f:49:81:61:2c:ed:2a:89:3e:94:61:75:53:e3:
6f:61:43:70:52:6d:b3:e8:c9:33:69:df:b9:3a:ea:
ea:04:54:7f:6d:36:8e:ad:ba:38:de:fa:8c:bc:ff:
46:97:2e:26:07:a4:7b:b1:8a:43:e6:47:b2:3d:da:
f2:d1:12:a5:b4:0c:d0:71:46:1f:4c:a2:8e:36:d2:
68:d4:14:b2:70:e6:05:d6:9c:8f:c2:5e:a3:11:16:
77:48:d8:dd:de:9d:37:35:56:68:bb:ab:b9:e0:62:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:76:80:10:F1:76:E3:01:B9:5C:BD:A8:10:3C:8C:6B:97:05:6B
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:76:a4:1a:6f:93:dd:6b:da:6b:d8:0e:91:d4:86:18:a7:
ac:d3:54:09:1e:3d:3a:39:4c:76:70:27:d2:ec:c4:e8:dc:f3:
01:17:72:9f:70:32:7a:2b:ae:73:b4:66:5c:8a:27:e0:26:af:
f7:8f:5c:7b:ae:90:f6:40:89:91:44:fe:2f:ec:5f:1b:0e:5f:
23:73:cd:c6:39:a0:89:22:35:7a:50:1d:89:7f:80:cf:f3:d3:
f2:cf:b9:47:a8:6d:fa:98:c8:00:3d:dc:04:5e:12:b8:00:da:
7c:7a:c9:d6:62:f5:f2:f7:96:5f:1a:88:b1:01:8e:e6:2d:08:
32:25:44:09:ac:68:b4:6e:82:e9:80:de:b3:c2:fb:c7:ca:c6:
01:ae:32:91:42:47:ed:06:4d:10:a8:ca:6f:86:dd:76:9c:5c:
41:ba:f0:9b:a8:d9:05:1b:a2:36:1f:bd:2a:40:3f:44:69:7b:
03:d6:5c:b8:32:60:ea:c9:45:d2:eb:b6:d2:67:f8:54:61:d6:
82:1b:09:89:a3:aa:15:a3:58:20:c1:7a:fe:1c:8d:44:03:4f:
2d:e0:98:03:d2:53:9b:47:de:70:21:7a:ac:73:db:c8:de:43:
15:de:65:8c:89:a9:01:bb:a9:0a:e3:27:97:7b:65:21:50:21:
a5:fe:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:30:17 2026 by rpki-client