
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier: caCDjMawDliFlXN/sPrnWxHjgUlSj7NHg25Jyt0w7ec=
Subject key identifier: 7E:11:87:FC:1A:9B:5D:31:41:46:F6:CC:23:43:9F:55:A9:57:DC:3F
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial: 1D7B5892A500954BA1E69AC5AF4B9636C4E00982
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number: 0153
Signing time: Fri 25 Sep 2026 05:38:22 +0000
Manifest this update: Fri 25 Sep 2026 05:33:22 +0000
Manifest next update: Sat 26 Sep 2026 08:16:22 +0000
Files and hashes: 1: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
2: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
3: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: tJsvlaTdMUPLyITkXoqSK43aOHCqq1mSG0/Q21CJovU=)
4: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
5: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
6: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
7: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
8: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
9: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
10: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
11: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
12: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
13: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7b:58:92:a5:00:95:4b:a1:e6:9a:c5:af:4b:96:36:c4:e0:09:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Validity
Not Before: Sep 25 05:33:22 2026 GMT
Not After : Sep 26 08:16:22 2026 GMT
Subject: CN=7E1187FC1A9B5D314146F6CC23439F55A957DC3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:e8:94:83:75:06:ba:98:ac:78:00:35:d4:
71:4d:13:aa:6a:cd:36:72:61:fa:bc:8d:0e:62:ea:
b3:11:6b:09:67:ac:98:d7:55:6e:89:08:a8:87:a8:
0b:f0:e6:6b:5d:7c:a4:2b:8c:71:9d:dc:ff:96:98:
9e:5c:60:40:8b:80:f9:3d:50:2b:bb:02:b6:cc:71:
87:c9:cf:96:e0:cb:6e:22:38:84:0e:3b:a6:7d:1d:
5f:b7:0c:25:0a:0e:77:56:85:ef:f7:4b:50:e6:44:
13:ab:df:48:f2:5e:08:8b:73:70:a4:f4:94:6a:47:
1c:0f:ad:12:37:da:1a:b3:fb:a9:b9:f3:df:58:bd:
27:ed:ff:5a:97:fe:e9:43:2d:53:14:48:ce:11:f3:
4a:c8:e3:57:59:81:8e:85:4e:c8:16:b4:8f:a7:a6:
8d:f0:6f:40:9e:45:61:2c:74:22:da:a1:21:07:ba:
ef:f4:ca:dc:be:3f:9e:b4:00:96:40:6e:b1:d0:0b:
ef:10:69:31:8c:cd:d8:04:62:8d:99:ec:d7:73:45:
4c:bf:82:2c:cb:f0:da:3e:30:35:8b:3c:05:fc:29:
0d:51:ab:a6:df:f3:c9:f3:78:92:64:e9:c1:41:f1:
93:92:7c:0f:ab:ef:05:98:e9:50:1b:e1:fc:6c:8d:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:87:FC:1A:9B:5D:31:41:46:F6:CC:23:43:9F:55:A9:57:DC:3F
X509v3 Authority Key Identifier:
keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:1a:3b:7a:69:3b:f0:2f:99:60:11:ba:e7:03:a3:18:c3:
4a:5a:89:67:46:5d:a6:21:5f:c7:49:85:81:32:b2:68:cf:1d:
8e:ee:73:1a:5b:89:56:56:c5:4f:51:07:32:d8:69:da:9e:32:
78:b6:50:6c:e8:32:83:5c:03:c3:85:70:8a:96:55:12:a6:49:
e4:40:fc:63:42:f2:fe:10:b3:a2:97:81:29:f9:6e:0f:b8:cc:
57:12:b8:b8:62:03:2d:a4:c4:e3:24:6d:f5:0b:63:e7:a9:a9:
c0:d6:36:f6:7d:32:2a:6c:3a:b2:41:1e:d8:14:64:a1:3c:29:
e4:4c:65:e5:1b:7b:e3:c8:4d:61:b0:00:cc:ff:a3:58:23:e5:
da:1f:a5:b6:b9:6f:80:6f:be:bf:0b:42:34:ff:59:2a:7e:90:
24:a1:9a:f3:d5:c9:85:65:3c:9f:28:8a:61:d7:a3:6f:24:a2:
8d:86:7c:5a:26:bb:45:1c:68:ce:6c:3b:54:f4:b5:96:53:ba:
de:86:6e:f8:8a:93:79:2b:54:6d:db:42:64:8a:d5:1e:82:65:
d9:b3:38:98:4b:5c:7e:b4:b5:92:01:2f:64:52:e2:67:ea:b0:
0d:db:c3:9d:9e:25:c3:59:4c:5d:37:9f:58:b2:5a:2d:c9:40:
ca:47:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:33 2026 by rpki-client