
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier: /E7so7FhkTcPK4FAVICkh5W9+ydV37tj6LCD96ti3p8=
Subject key identifier: 68:CD:3F:8E:D2:BF:41:B4:5E:88:AC:B4:45:5C:73:1A:C1:C1:66:27
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 6CA96D6DE3EB9B59FB7F998C38847C7019784B69
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number: 02EF
Signing time: Tue 12 May 2026 22:50:54 +0000
Manifest this update: Tue 12 May 2026 22:45:54 +0000
Manifest next update: Wed 13 May 2026 23:13:54 +0000
Files and hashes: 1: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
2: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
3: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
4: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
5: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
6: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
7: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
8: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
9: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: 9uyHpWeGTrSNJFok9R0zbcty4pNJlr6QKL+urNhEyhg=)
10: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
11: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
12: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
13: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
14: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
15: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
16: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
17: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a9:6d:6d:e3:eb:9b:59:fb:7f:99:8c:38:84:7c:70:19:78:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: May 12 22:45:54 2026 GMT
Not After : May 13 23:13:54 2026 GMT
Subject: CN=68CD3F8ED2BF41B45E88ACB4455C731AC1C16627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:a3:e7:52:22:f3:3b:49:ce:38:c9:9f:03:
d2:08:4b:77:10:9c:4b:fa:c4:6f:cb:19:c5:95:1a:
b4:48:07:2b:bf:17:a4:fe:2a:d6:3e:e9:21:f0:0b:
bf:27:a2:b6:35:3e:ab:f5:e8:2a:2e:03:d5:c2:1a:
b6:98:f4:1c:b7:1e:3e:e9:7d:63:03:92:47:5e:26:
ec:c4:7b:7a:08:c7:66:29:b6:fc:23:be:2f:d5:1c:
6b:b7:c6:98:dd:34:13:b1:4a:ab:35:b1:a8:60:ce:
78:30:ea:fc:17:2f:5c:b3:51:5c:40:b9:54:60:6d:
e4:83:bb:a3:ad:24:c4:b8:64:6e:08:1d:6c:8c:7f:
08:36:46:3f:ce:6b:f5:65:66:b0:f2:e6:27:4a:6b:
ad:a3:e1:20:94:13:c1:3a:c2:95:42:91:4d:40:32:
e6:48:d5:06:0e:44:a1:5f:4c:5e:f7:58:34:b0:57:
d2:59:5e:97:5e:4e:82:76:ff:ee:5a:2e:52:8d:6c:
b0:71:43:f9:31:12:5d:3d:5b:a0:cf:d9:fe:12:be:
38:f5:fc:c5:ca:38:cb:3e:1d:4f:62:61:76:71:6e:
4d:51:e1:ef:26:53:31:7a:27:82:3e:7f:f7:e5:e1:
1e:9e:21:6f:f5:e1:f9:82:92:07:53:07:60:c8:07:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:3F:8E:D2:BF:41:B4:5E:88:AC:B4:45:5C:73:1A:C1:C1:66:27
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:df:1f:e9:d8:ad:3a:fd:e7:d0:fc:15:a9:3e:78:24:be:ca:
2d:a9:0f:37:c8:44:5b:75:34:6a:03:d7:d9:48:03:9b:0f:f3:
de:8d:98:e1:5b:c7:a5:d6:df:73:e0:fc:84:bb:09:8a:af:b8:
2f:65:4d:fb:64:84:2b:8e:db:97:9d:7e:3e:db:4a:90:cf:18:
d2:c7:ce:0c:d2:61:28:15:5e:74:f8:61:63:1c:aa:18:43:35:
dd:85:c3:ea:18:e4:c6:15:2a:79:b7:1f:87:a3:24:ce:02:4e:
f3:45:4c:e1:4a:1d:2a:f6:cf:d9:d7:c9:7d:90:f3:2f:1b:fd:
bb:4a:48:95:f5:e2:21:8d:17:3d:9b:d6:cf:61:cf:d5:21:eb:
39:86:83:05:d1:e5:6d:50:6c:d7:45:58:9c:b3:d1:4f:ae:61:
10:c8:53:c0:df:ea:d6:db:21:d2:2e:bf:c1:0f:73:be:f0:e5:
c1:6c:68:92:ee:4a:a9:33:01:f1:f7:3f:82:95:59:98:61:09:
75:7a:98:09:7a:80:a9:7d:a5:4e:61:ef:96:35:af:c0:5a:34:
f1:7c:fa:fa:20:1d:ea:e0:a0:78:fb:38:93:dd:1c:bf:08:01:
ca:ba:54:12:04:a5:79:04:4a:52:33:a5:42:61:9f:8a:d8:a9:
f9:0f:57:aa
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUbKltbePrm1n7f5mMOIR8cBl4S2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNjA1MTIyMjQ1NTRaFw0yNjA1MTMyMzEzNTRaMDMxMTAvBgNV
BAMTKDY4Q0QzRjhFRDJCRjQxQjQ1RTg4QUNCNDQ1NUM3MzFBQzFDMTY2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kaPnUiLzO0nOOMmfA9IIS3cQ
nEv6xG/LGcWVGrRIByu/F6T+KtY+6SHwC78norY1Pqv16CouA9XCGraY9By3Hj7p
fWMDkkdeJuzEe3oIx2Yptvwjvi/VHGu3xpjdNBOxSqs1sahgzngw6vwXL1yzUVxA
uVRgbeSDu6OtJMS4ZG4IHWyMfwg2Rj/Oa/VlZrDy5idKa62j4SCUE8E6wpVCkU1A
MuZI1QYORKFfTF73WDSwV9JZXpdeToJ2/+5aLlKNbLBxQ/kxEl09W6DP2f4Svjj1
/MXKOMs+HU9iYXZxbk1R4e8mUzF6J4I+f/fl4R6eIW/14fmCkgdTB2DIB3ljAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUaM0/jtK/QbReiKy0RVxzGsHBZicwHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW3x/p
2K06/efQ/BWpPngkvsotqQ83yERbdTRqA9fZSAObD/PejZjhW8el1t9z4PyEuwmK
r7gvZU37ZIQrjtuXnX4+20qQzxjSx84M0mEoFV50+GFjHKoYQzXdhcPqGOTGFSp5
tx+HoyTOAk7zRUzhSh0q9s/Z18l9kPMvG/27SkiV9eIhjRc9m9bPYc/VIes5hoMF
0eVtUGzXRVics9FPrmEQyFPA3+rW2yHSLr/BD3O+8OXBbGiS7kqpMwHx9z+ClVmY
YQl1epgJeoCpfaVOYe+WNa/AWjTxfPr6IB3q4KB4+ziT3Ry/CAHKulQSBKV5BEpS
M6VCYZ+K2Kn5D1eq
-----END CERTIFICATE-----
Generated at Wed May 13 07:21:46 2026 by rpki-client