
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json)
Hash identifier: 81NpBq01YBZZj8WTSVdrLZGPW6PcoN9yhhtE6GBwnPo=
Subject key identifier: A3:8A:E9:36:05:40:0E:76:97:87:28:3A:C5:AC:9C:B6:21:BF:B1:23
Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13
Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
Certificate serial: 1BC3B38872BD4A2E6A74D960B76E318EBD878ED2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
Manifest number: 0183
Signing time: Thu 26 Mar 2026 05:35:02 +0000
Manifest this update: Thu 26 Mar 2026 05:30:02 +0000
Manifest next update: Fri 27 Mar 2026 06:16:02 +0000
Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: EiL7o4X77yUlE0eMQNabBSN573KStI2k3Vm9ziHvX7A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c3:b3:88:72:bd:4a:2e:6a:74:d9:60:b7:6e:31:8e:bd:87:8e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
Validity
Not Before: Mar 26 05:30:02 2026 GMT
Not After : Mar 27 06:16:02 2026 GMT
Subject: CN=A38AE93605400E769787283AC5AC9CB621BFB123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:e1:e1:71:9d:44:bd:38:57:89:5b:58:47:
a0:8b:0c:3e:a8:61:f3:5e:14:24:f5:11:5f:2c:0d:
17:2f:5a:20:16:ca:1a:f7:b3:32:2d:51:2c:10:94:
ba:9e:82:7a:5e:af:c4:4a:1d:fd:57:61:88:c8:d5:
fa:24:b6:17:11:14:a6:dd:d4:39:19:8c:f3:b4:44:
b2:6c:f5:91:31:ec:d3:c5:e0:16:86:44:67:83:b5:
c2:34:1e:98:f6:86:cc:20:fa:eb:aa:c1:eb:b2:41:
8d:ba:0a:19:12:46:fe:fa:0a:b3:00:13:79:37:79:
67:b2:6b:ef:c1:4c:a4:c1:74:c9:f8:23:5f:7f:63:
22:19:62:b2:2f:2b:db:83:a6:09:84:38:f4:68:99:
32:94:b5:29:51:d6:25:ce:87:26:14:40:43:f7:57:
61:46:f5:c0:52:81:26:df:28:c6:c5:a8:cc:66:71:
3c:0d:b1:38:58:c9:a8:c1:c7:54:40:0d:4d:a3:a3:
6d:1f:f3:ba:48:35:97:9c:83:8b:14:66:a0:55:3a:
8c:94:04:0b:35:da:66:75:6a:a7:3e:ea:f4:00:b5:
f2:d4:08:83:32:89:e5:5a:c3:5e:1a:05:b7:fe:3f:
ed:b2:66:a5:b2:b9:bb:76:cb:9c:89:a6:8a:48:06:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:E9:36:05:40:0E:76:97:87:28:3A:C5:AC:9C:B6:21:BF:B1:23
X509v3 Authority Key Identifier:
keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:19:9d:4d:04:50:71:a5:5e:f6:5f:ce:9b:e6:74:79:fb:
20:f8:8c:a3:1b:04:61:a6:c6:bf:83:1b:aa:a4:92:1d:c0:d9:
98:d2:ea:5f:6a:f8:97:15:48:f4:11:0f:38:49:a4:28:17:38:
a8:ca:df:33:ed:cc:42:03:9e:06:d2:e5:5a:ab:86:f3:7c:c8:
3e:f8:7e:10:2f:e0:04:f9:64:bf:c9:37:48:d1:db:ca:4f:9a:
53:23:f1:cc:32:35:f6:34:7c:44:05:63:e2:57:32:cd:b6:cb:
32:ac:0f:15:63:ae:f3:6c:bd:fe:66:42:2c:cd:25:c6:6a:88:
cc:93:5e:ec:4a:5b:a2:fa:ec:71:96:bd:3f:1f:fb:3b:1b:62:
a8:1d:9f:1a:ac:96:32:27:c6:63:7f:26:f6:eb:93:cb:0f:05:
2b:f5:26:61:9a:6c:14:65:1b:3c:03:94:ef:df:c0:2c:10:d7:
11:76:76:13:40:50:df:6b:0c:e4:6b:6f:d2:15:22:6b:ef:94:
85:34:23:a4:e7:69:bd:52:da:f3:4f:a4:87:65:2b:cc:a5:80:
d5:a7:96:5b:7e:80:7c:d5:24:d1:ec:22:cd:74:e0:f3:1f:dd:
40:b2:ed:74:3a:5e:4e:35:da:39:cc:76:b0:bf:ce:15:92:77:
a7:9c:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:25 2026 by rpki-client