
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
File: 75F554161E3D1197F4F9B22E7171E99E87BEB830.mft (raw, json)
Hash identifier: F8vFMclZDkAqI/A0QwIPywBWUdXow1OuBPrN+HvAwkQ=
Subject key identifier: B7:76:8E:0A:0B:10:B7:97:23:D8:C1:44:74:36:71:AB:7A:20:F8:72
Authority key identifier: 75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30
Certificate issuer: /CN=75F554161E3D1197F4F9B22E7171E99E87BEB830
Certificate serial: 2D585E0A8889C07315440D2163A6B18F269F8C2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
Manifest number: 4B
Signing time: Fri 27 Mar 2026 20:48:57 +0000
Manifest this update: Fri 27 Mar 2026 20:43:57 +0000
Manifest next update: Sat 28 Mar 2026 21:11:57 +0000
Files and hashes: 1: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134343230.roa (hash: 1nc15sBmXGLcJ+vZKUEIDElcwAMIwyX0sJw3OiBW5oM=)
2: 75F554161E3D1197F4F9B22E7171E99E87BEB830.crl (hash: +vap3tniHuSQlGp43//08pJdd0dxjZN1xxqKRKmcEHA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 21:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:58:5e:0a:88:89:c0:73:15:44:0d:21:63:a6:b1:8f:26:9f:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75F554161E3D1197F4F9B22E7171E99E87BEB830
Validity
Not Before: Mar 27 20:43:57 2026 GMT
Not After : Mar 28 21:11:57 2026 GMT
Subject: CN=B7768E0A0B10B79723D8C144743671AB7A20F872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:a5:b2:10:34:3d:88:a6:6e:38:57:07:47:
b0:ee:25:e3:33:e9:3e:fc:a4:7c:56:52:9d:d9:c2:
8a:ab:a1:b6:34:42:8a:fe:16:c9:b5:28:03:41:43:
61:e4:c1:d9:4d:cc:3e:cc:b0:f9:c0:f3:ab:74:07:
b6:b0:a2:cb:b8:47:f1:07:f2:80:2b:70:df:3e:da:
43:dd:51:88:ee:3f:30:22:9b:39:74:83:d1:8e:07:
67:07:35:59:41:4d:3c:11:bd:f6:86:36:1d:e0:44:
60:03:f7:5c:d9:ac:3a:c0:f8:32:20:95:39:9e:e4:
4e:e5:dd:17:be:fc:4f:c7:fc:da:1f:0b:93:71:15:
53:69:81:73:91:6f:13:c0:fb:0f:1d:1c:b7:78:04:
2f:15:ee:2b:7d:bd:31:23:a1:96:7c:6f:c9:12:53:
8d:0c:11:b5:3d:31:ad:e0:92:de:56:2a:8e:02:16:
68:ac:6b:9a:d5:8b:5f:34:61:1b:b6:5d:5f:0b:04:
a1:f5:8c:f9:06:cc:99:e4:aa:20:76:84:01:87:a0:
3c:4e:dc:85:9b:a8:1f:c0:4d:f2:5a:56:72:9c:26:
6a:9f:78:c9:92:d7:26:c2:5e:e1:d8:e5:26:7e:8c:
e0:d9:ea:8e:91:eb:64:02:0e:67:a1:ed:6f:e7:35:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:8E:0A:0B:10:B7:97:23:D8:C1:44:74:36:71:AB:7A:20:F8:72
X509v3 Authority Key Identifier:
keyid:75:F5:54:16:1E:3D:11:97:F4:F9:B2:2E:71:71:E9:9E:87:BE:B8:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/75F554161E3D1197F4F9B22E7171E99E87BEB830.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/1/75F554161E3D1197F4F9B22E7171E99E87BEB830.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:17:92:54:4d:19:ea:b0:63:d1:f1:bb:e5:18:29:32:29:74:
70:a3:30:00:c8:3c:83:cc:52:bd:3a:cc:73:c7:36:a6:cf:c3:
71:3b:b6:d7:83:d2:fe:33:36:55:c8:fc:74:c6:64:12:2d:3f:
89:6b:e3:ba:a3:f7:22:08:e5:91:71:b3:e7:e9:a3:ca:5b:80:
34:89:a9:97:84:23:27:83:17:cf:5e:be:38:f0:26:b6:e7:43:
b7:20:61:8b:b0:56:15:ec:d1:79:1d:0e:13:cb:5c:8f:87:71:
49:e5:ab:a8:1d:8f:d8:d6:d2:7b:89:04:34:a2:06:69:26:5f:
e0:28:aa:2e:3c:6a:64:ca:89:6e:62:76:73:56:fe:20:4a:15:
1d:0e:24:20:d6:0e:1a:af:82:f2:93:d0:d7:ac:2a:71:0f:4e:
34:dd:4e:cb:cf:25:83:24:5d:ec:92:93:81:3d:26:8a:41:0f:
60:6f:2d:d2:f4:12:af:b9:33:2f:8e:bc:d2:2d:e5:e8:06:36:
26:23:73:fe:21:81:c3:c9:ab:be:c4:aa:af:ec:ca:f4:3a:98:
96:c8:a1:bb:9e:61:9d:7e:09:23:66:36:28:29:69:27:2e:76:
c6:02:6b:b7:71:0f:06:48:e3:68:7f:e0:b7:00:dc:de:ed:a6:
7b:75:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:12 2026 by rpki-client