
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier: G24d+/Ol15HfG5jJWpCsy+1uoU3BN24e876+/9fFW5c=
Subject key identifier: AD:C6:FF:B0:99:93:34:51:3F:DA:A5:77:8D:75:BF:0B:B2:C7:47:2F
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial: 05A18C78FF55214FA5AEE9A15AE7FD494D522BC0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number: 5E
Signing time: Thu 26 Mar 2026 00:13:21 +0000
Manifest this update: Thu 26 Mar 2026 00:08:21 +0000
Manifest next update: Fri 27 Mar 2026 01:30:21 +0000
Files and hashes: 1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
2: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
3: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
4: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: jlAMZXZHBrN4WNrvXWe8DK0dcQD3Q5WIGVxMORDNavc=)
5: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
6: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 01:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a1:8c:78:ff:55:21:4f:a5:ae:e9:a1:5a:e7:fd:49:4d:52:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Validity
Not Before: Mar 26 00:08:21 2026 GMT
Not After : Mar 27 01:30:21 2026 GMT
Subject: CN=ADC6FFB0999334513FDAA5778D75BF0BB2C7472F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:ff:39:13:af:d5:eb:cb:24:a8:1c:b5:08:
40:13:a1:67:10:8c:6e:ee:8f:66:27:6f:8a:03:2c:
40:03:c4:d1:36:11:7b:3b:16:71:28:44:88:69:3e:
c3:3e:47:bc:d4:29:95:22:c1:6b:e5:e4:8f:dd:91:
57:28:13:c9:eb:96:30:b3:8a:59:9f:62:1f:00:68:
bd:25:1e:09:0e:3d:35:c0:73:f9:2e:46:9e:78:5b:
44:78:c2:99:5c:2a:cd:18:59:af:97:36:e2:3b:40:
28:f8:c7:92:08:1e:d9:97:a2:27:b7:89:36:f9:72:
d8:f5:30:c0:96:93:1a:4b:25:bf:fc:f6:e7:8a:e5:
9d:59:3a:89:fa:f9:7a:f7:59:02:08:89:ea:c6:ef:
3a:12:80:02:f4:0f:cd:38:66:27:97:c8:db:fb:48:
2f:90:51:d1:40:b6:2a:3a:fc:71:0b:fb:52:7f:3c:
08:5f:9e:fb:96:3f:1c:05:11:07:4e:c5:fe:89:7d:
2e:ec:06:76:8e:15:eb:49:ce:dd:9f:d4:e7:17:f0:
1a:55:52:b2:01:5d:2f:f2:57:12:8f:d1:92:61:5f:
cf:18:42:58:bb:e0:40:c4:85:a2:15:cb:66:4f:01:
0a:9f:9d:20:3e:69:77:aa:ef:39:b8:f1:c7:46:4e:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C6:FF:B0:99:93:34:51:3F:DA:A5:77:8D:75:BF:0B:B2:C7:47:2F
X509v3 Authority Key Identifier:
keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:9e:b2:e0:08:71:33:77:97:5b:dc:81:04:85:a6:0e:48:
ad:86:c1:7b:57:4f:d5:5f:75:25:62:81:ba:48:1b:15:35:bd:
12:b9:ab:4a:80:2c:7e:47:ec:01:34:fd:d9:e7:09:7a:45:11:
53:5c:e4:7e:00:d0:14:67:4b:15:c4:8b:57:d5:80:b4:8f:8c:
1a:c9:a6:37:bd:d6:2a:09:6f:bd:9c:a1:8e:c2:af:f8:e8:ab:
5f:70:c8:31:fb:18:0a:eb:4b:7e:28:96:30:64:8c:66:a9:f9:
75:13:1c:eb:d4:15:10:c2:fb:69:4d:91:3e:41:4d:ee:a7:3a:
e5:c0:44:28:01:0b:01:df:27:58:29:3d:5b:4a:33:0f:e1:94:
21:45:b8:aa:bb:72:83:e8:dd:e8:e4:33:66:cb:f5:b8:ce:d2:
be:93:7f:79:81:c4:bd:ab:91:ef:ee:49:cc:bc:c8:c4:53:6f:
34:83:94:f2:94:d8:2e:cc:cd:fe:87:e2:ef:70:e6:d4:3d:ca:
3b:aa:b9:1a:45:b6:49:95:e7:05:91:b5:8a:8d:02:25:e5:39:
e7:47:fa:96:66:a5:f9:3a:0c:25:8a:00:cd:0a:7a:01:f2:af:
df:de:04:5c:50:4f:eb:6d:b2:39:1e:ec:7f:33:90:d8:8b:d0:
eb:85:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:02 2026 by rpki-client