
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: VCWbiwCYVrie3ZsRLARHBEKoXXIwUKrOPci4R55ivN0=
Subject key identifier: 7A:A6:20:75:31:04:EA:7D:49:C1:4B:F0:77:7A:04:F4:82:BD:87:AF
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 59018F12BAA23690FA33E8FC45309623415395D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: 01C6
Signing time: Thu 23 Jul 2026 21:09:39 +0000
Manifest this update: Thu 23 Jul 2026 21:04:39 +0000
Manifest next update: Fri 24 Jul 2026 21:52:39 +0000
Files and hashes: 1: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
2: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=)
3: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
4: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
5: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: nQAV59n3wU5Bida8ejII5UX7+/U2FP57vmlBuHMm3kc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:01:8f:12:ba:a2:36:90:fa:33:e8:fc:45:30:96:23:41:53:95:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jul 23 21:04:39 2026 GMT
Not After : Jul 24 21:52:39 2026 GMT
Subject: CN=7AA620753104EA7D49C14BF0777A04F482BD87AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:70:b7:02:0a:4d:c2:63:ba:43:05:92:da:
d2:f9:cb:c9:3e:2c:96:d1:32:69:31:32:ea:3d:04:
fc:86:e6:4d:2b:c8:7e:8d:72:51:ad:d3:89:1a:ab:
5e:e8:50:d2:f8:db:a6:74:27:82:f1:10:54:f7:8d:
1e:94:36:ad:23:1c:cc:a1:6a:25:31:a0:a7:43:ae:
13:91:8b:15:b2:b4:42:c9:0c:b3:b2:67:b3:21:50:
9f:10:4d:5f:04:d9:cc:da:52:8c:8c:82:b5:5a:32:
41:fa:a6:f9:30:f7:ce:0c:98:dd:ac:d4:d7:2e:3b:
3d:45:9d:72:d4:f1:8b:1a:33:85:ec:c8:ad:26:19:
6f:98:5b:e5:17:f4:5b:56:d1:34:37:f9:ba:0b:aa:
d5:c5:7c:c2:54:ba:dc:39:f9:2d:e1:7a:8c:b4:49:
c4:db:85:a1:c7:af:38:74:4d:04:13:b8:06:9e:1c:
0a:d4:db:0d:22:fa:a0:57:d6:0b:a8:fc:40:a7:06:
77:3b:34:23:13:dc:61:61:1a:3b:4e:e1:32:e3:f9:
99:0b:b0:d9:f3:0e:00:84:ef:bc:cb:83:27:0f:26:
25:87:4e:0a:c0:4d:66:bf:27:c4:c6:2f:6c:38:f4:
fa:d5:99:d5:76:ec:54:2a:e5:ba:4b:b7:45:c4:d1:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:20:75:31:04:EA:7D:49:C1:4B:F0:77:7A:04:F4:82:BD:87:AF
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f9:ce:e8:b6:c6:f5:92:a9:d0:62:4c:79:6f:31:45:4a:60:
fc:ed:e7:89:d5:80:0e:b5:79:c0:85:41:f5:3b:aa:c7:78:7d:
4f:6b:36:71:e9:b8:57:0c:a2:a3:99:db:53:1e:82:ae:83:22:
70:9d:a8:85:7f:f2:22:16:eb:08:fb:d4:0e:4b:5d:dd:d7:b6:
ab:af:61:19:b5:ea:bf:28:e1:f7:30:77:33:16:ea:ac:b9:37:
f4:77:ea:7c:3a:ef:77:80:2d:18:20:5b:c9:5d:36:d2:f0:40:
f6:91:0e:38:10:a4:a9:b7:85:30:a9:9a:77:58:1e:fe:c1:d9:
92:80:22:f2:f8:aa:c2:2d:3b:42:e7:4a:ef:23:e2:74:98:50:
3c:c4:62:bf:8d:67:b5:c4:7e:8f:d3:3a:5d:e8:67:a6:a9:80:
6e:80:54:7d:d5:26:70:d7:32:b5:77:02:8e:03:02:bd:07:37:
97:b0:b7:52:82:ee:4b:2e:6d:18:89:ef:be:62:7e:9c:d4:ee:
97:48:2d:65:79:c2:90:fe:05:da:24:16:df:1b:bc:2b:5e:e4:
7c:c1:bc:cf:d3:65:13:65:d3:3c:89:43:56:98:23:bb:da:ea:
d4:68:5a:a5:37:11:b5:3a:50:65:4f:cb:70:69:8f:8a:09:9d:
ce:59:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:17 2026 by rpki-client