
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
File: 0211335370D92B6E733E38A6FE83F1920BC863B5.mft (raw, json)
Hash identifier: R6LCBC42/4PCjLRnLlkLxA9rM91sA79tt4lnyftbUbc=
Subject key identifier: 1F:ED:8C:4D:92:DC:98:49:3C:49:DA:02:4E:2D:E8:3E:89:D0:DE:A4
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 6CC34D390ED9328E7031EF254D4D373710ADA13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
Manifest number: 56
Signing time: Sun 15 Nov 2026 09:07:39 +0000
Manifest this update: Sun 15 Nov 2026 09:02:39 +0000
Manifest next update: Mon 16 Nov 2026 09:30:39 +0000
Files and hashes: 1: 3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa (hash: mRrktVVzgp9WLxvIVxjZObNrqYbtAS12PHB9uq/IM8c=)
2: 3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa (hash: 49txmzZNLvCPr15ARV3WbmTYeadLhmZy34zOlOEzRrU=)
3: 3138372e352e302e302f32332d3234203d3e20343031373736.roa (hash: ggrPZGJNFvRaNdu29nW6qD/tbIXrA9UCiA3GSM/ljmQ=)
4: 3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa (hash: 6VlSy78EXLts3m52KdfH1bvFr0WCFgj7yOOFdiifcTE=)
5: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer (hash: t8m+GVm5KBL4s0C+gqYGKbQ+nFGT+lTw0+urN/zNeTU=)
6: 3138372e352e322e302f32332d3234203d3e20343031373736.roa (hash: t7e8Ue+dmD4MWVhuJTygPEfP31EkS4IaHfWcKSvt9EQ=)
7: 3138372e352e342e302f32332d3234203d3e203336353330.roa (hash: dIuywrzSNbCCEekBSaoXmgU86wOlt/vDAicT0m2wq8s=)
8: 3138372e352e322e302f32332d3234203d3e203336353330.roa (hash: ImNR7I3qCj3VybLOJ64a9gsJO9gRGCsCF2YSjnFpDdY=)
9: 3138372e352e342e302f32332d3234203d3e20343032363238.roa (hash: kqadylwDPfdhFybl/OD7ZR5o6+1amL3GEF8IhVwvMN4=)
10: 3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa (hash: OfR2OfwKIEIccuBrvJ/24hfOmX9MQXaTnvRCeGTvD0o=)
11: 3137372e3137372e38322e302f32342d3234203d3e203430393239.roa (hash: iWdaGQnxhL4Kyq5sRcP+nJQ7jeI4VD01lzRIxG9VX90=)
12: 3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa (hash: Y73eMeFRShzAPcM5FCCx+xJJkFDRtiEZGY1+8ydp6k0=)
13: 3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa (hash: Lm1R07YGu002nCkpfGa4ICNj7dqJkFC8RKuIECKNPgw=)
14: 3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa (hash: JgQLWhOybdMoYCTT8Z4Dr3ScDMDO1QSUBy27ch6mucg=)
15: 3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa (hash: 5CdjtZRYnbutA3BKpPju7cbxaX8M66Lp/8wxC1V973w=)
16: 0211335370D92B6E733E38A6FE83F1920BC863B5.crl (hash: Auk//Yhmoc0LxWdA/xwF77EcD/gV8uP2gb2NBu8ERBY=)
17: 3138372e352e302e302f32332d3234203d3e203336353330.roa (hash: ynR5uBaLkLiRAgIe6f14NNnd7rYuTbTNx6eEfjYbyd0=)
18: 3138372e352e342e302f32332d3234203d3e20343031373736.roa (hash: 7j0B7rf5zied0Vm/Xuqc90kNHgJ3FCl1+jRdTQYQqAo=)
19: 3138372e352e302e302f32332d3234203d3e20343032363238.roa (hash: sOWwN1iWOUxq1OKmqE9tetEROxDx8Lf4GbCjWEk5Fiw=)
20: 3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa (hash: b+aRVPGdn8VjyVWg6D+nOEaa2NWDotR+0eAXSQ+Dtls=)
21: 3138372e352e322e302f32332d3234203d3e20343032363238.roa (hash: ssHgplBujnGQyFL04QKXLfebdjoomF4Omf3lnrq3DKA=)
22: 3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa (hash: VX52D13T3rJk+Y+H+h/oenE4mh7mWRd72nOjMprbcBw=)
23: 3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa (hash: 9gFp7L4EVR2AOnCZNx3rjlrEioLeoEoqktUxPRG+wjI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c3:4d:39:0e:d9:32:8e:70:31:ef:25:4d:4d:37:37:10:ad:a1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Nov 15 09:02:39 2026 GMT
Not After : Nov 16 09:30:39 2026 GMT
Subject: CN=1FED8C4D92DC98493C49DA024E2DE83E89D0DEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:7f:e9:3f:d8:a8:93:63:b7:0c:f8:1b:33:
e9:ed:1e:66:49:87:13:56:24:2f:0c:22:0f:d7:cb:
c0:8c:5d:85:74:65:f3:c9:ec:c5:84:35:34:f0:9e:
b0:b0:7a:53:eb:c2:9d:13:ac:5e:60:03:2f:42:ff:
23:e8:01:bb:5d:81:9b:39:e4:fd:ad:4e:31:2b:84:
1e:11:9f:7c:1d:e1:51:6d:e2:25:5d:db:f5:9f:64:
8b:4d:cd:6e:ff:3b:d8:91:10:8e:e0:46:ca:66:e7:
62:c2:36:7a:fb:ee:9a:49:80:3a:30:7c:81:85:32:
40:4a:4e:a9:b3:03:7b:f6:e6:bb:f1:17:19:57:e6:
0e:8c:48:dc:df:ae:f8:eb:89:99:0b:ca:3a:b3:82:
34:de:04:d3:08:d0:b4:8b:ce:14:14:e4:2b:15:61:
10:63:47:d5:1b:3d:50:67:82:2a:19:97:98:d9:83:
01:45:7c:5e:8d:df:e8:bc:62:16:31:11:1c:26:a9:
d4:82:cb:e4:87:38:bd:71:4f:61:21:de:e8:ed:5c:
66:aa:02:a3:09:84:c2:00:0d:a4:16:8d:82:2e:ff:
89:ba:28:01:f3:98:3f:74:3b:f0:86:11:d6:ab:69:
d4:80:eb:f1:c4:1e:7d:ba:35:89:27:a9:19:08:25:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:8C:4D:92:DC:98:49:3C:49:DA:02:4E:2D:E8:3E:89:D0:DE:A4
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:29:b3:ba:f5:67:ce:56:e0:e9:cf:69:56:9e:42:17:79:8b:
63:42:be:a7:04:3f:cf:a0:71:8a:e6:25:4e:2c:51:00:55:f0:
da:15:0c:c3:ff:42:b2:af:93:f8:5f:e2:a9:f9:33:5e:25:f9:
f9:da:ad:ea:17:ae:e0:ed:8c:a8:9a:35:62:04:a4:a3:a9:1b:
ee:28:67:e4:fe:6f:c7:20:a1:44:71:e2:ff:db:9d:19:3f:48:
2a:00:2a:b1:ce:0d:09:80:65:83:78:ac:30:19:67:2d:f5:5d:
0f:d0:56:ad:f6:ae:52:b9:0a:a7:e4:ce:09:5c:f1:a4:7d:38:
65:62:cc:75:36:22:4f:f0:24:7d:fb:a4:e3:bb:36:06:e3:e0:
3d:9b:96:c4:16:22:20:5a:79:d7:32:c4:47:11:ed:74:b0:89:
a0:a5:19:e1:34:56:95:0a:6e:b9:8a:a3:cc:f0:1b:42:9e:4d:
68:39:57:0a:53:24:79:42:6e:f0:7c:88:46:b6:62:7c:cc:f8:
a3:2c:f7:18:24:14:e3:7d:7f:e0:08:d8:46:3a:95:da:8d:aa:
67:e3:2d:63:8e:a4:95:bb:da:b9:49:5a:f0:e1:c4:b5:91:4a:
33:35:43:77:4a:b6:d8:a0:55:a6:e1:fd:9f:1c:56:5e:fd:ad:
aa:c5:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:44:51 2026 by rpki-client