
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json)
Hash identifier: kcfLpj+emQGPDF+OukOgOwbpNbQ5xT85FU0KnUXRH+4=
Subject key identifier: 7E:59:AB:75:28:C1:C1:1B:F0:FC:BB:9A:D5:66:1F:BA:27:AE:0C:04
Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24
Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324
Certificate serial: 1EA47F4543B381CD958D9439B0D520CC97E37128
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
Manifest number: EF
Signing time: Tue 12 May 2026 06:08:41 +0000
Manifest this update: Tue 12 May 2026 06:03:41 +0000
Manifest next update: Wed 13 May 2026 07:06:41 +0000
Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=)
2: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=)
3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: KbZPhhxMtWiFjEWROCvTks8ZPZwXLT5XdcF9PcdQWDA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl
rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 07:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a4:7f:45:43:b3:81:cd:95:8d:94:39:b0:d5:20:cc:97:e3:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324
Validity
Not Before: May 12 06:03:41 2026 GMT
Not After : May 13 07:06:41 2026 GMT
Subject: CN=7E59AB7528C1C11BF0FCBB9AD5661FBA27AE0C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:82:08:99:e3:01:6c:6f:a5:5d:83:05:d2:
31:84:a5:41:d7:86:05:67:20:b2:b5:66:80:30:d3:
ba:b9:24:56:af:f8:61:00:0d:a4:f5:ae:81:0c:d2:
f6:b7:87:2e:67:50:78:3a:8c:17:6a:c8:8d:5a:20:
e6:4b:a5:25:e0:b2:ed:48:08:0e:28:0f:b6:7a:56:
0b:00:b9:dc:f4:22:a4:a6:7e:33:41:22:b4:45:02:
c3:e8:c4:6e:c2:93:76:11:63:5b:ff:81:ec:bc:ac:
b9:6d:14:a2:e3:82:82:e1:1d:fc:cd:62:20:3a:1b:
75:df:55:06:cb:e6:c3:a5:55:df:5e:cd:cf:02:47:
60:da:4d:68:dd:b6:98:cf:50:0b:99:5d:32:86:b7:
7b:0e:b2:22:80:4a:80:0b:04:09:9a:55:ae:30:83:
4a:46:48:4e:b7:63:ef:70:e0:72:f6:09:be:5e:45:
86:8f:db:27:4b:3e:9e:4b:df:a1:79:86:c7:24:a0:
9a:8e:8c:77:c9:cf:73:31:81:2b:2e:55:93:f2:9f:
96:96:48:f2:d1:d0:1a:ab:dc:4d:72:88:66:50:e3:
50:05:80:5a:8a:a2:c9:9f:64:9b:4f:ec:74:f8:95:
32:dd:dd:85:37:34:9b:60:72:e0:66:1f:c9:b7:92:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:AB:75:28:C1:C1:1B:F0:FC:BB:9A:D5:66:1F:BA:27:AE:0C:04
X509v3 Authority Key Identifier:
keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:ee:22:36:f8:78:44:d6:69:0d:dc:38:6b:a7:1b:66:f7:
eb:f2:4b:a3:c4:47:15:ee:22:f4:af:cd:98:6c:82:bb:7e:b8:
80:e1:8c:48:6f:4a:a8:9f:f2:cb:a9:11:de:7c:b1:5d:ec:99:
9b:68:62:0e:fb:35:2d:d4:87:68:cd:f3:c1:d2:e8:f1:86:ca:
79:27:82:f2:b9:06:28:7f:56:82:e3:c6:2f:15:63:86:a7:32:
11:b7:a2:50:70:a8:9f:67:1c:3b:73:4e:fc:a4:44:f3:29:59:
06:3f:45:76:73:d4:60:b6:31:c1:54:47:4f:ef:a0:fc:2f:bf:
24:7d:36:c0:0c:24:e0:66:19:56:39:3f:75:05:23:56:36:a6:
55:da:1f:76:50:10:ef:32:6c:37:53:b4:48:4a:85:df:8e:8d:
f6:99:26:82:2a:00:4e:b5:e4:82:2b:0e:19:b6:ea:32:6e:d2:
fe:45:ba:65:95:47:fd:06:e3:5d:ac:75:ee:82:1e:2e:1a:a7:
b7:ce:1d:3a:03:c8:83:bb:47:7f:a2:f9:24:39:f9:07:69:9d:
a2:db:63:18:dc:a3:04:79:05:15:31:ae:3b:cc:c4:62:c9:d2:
66:18:e5:a5:f0:d6:b9:7d:49:c9:f8:67:00:bc:f0:d2:2d:a4:
20:ad:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:07 2026 by rpki-client