
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json)
Hash identifier: EqmQaxjgJI3VAONYOa67gxFI3J2w6KHjxdFZpZL7TDE=
Subject key identifier: 00:FF:95:1C:C6:78:1B:FA:53:4E:A4:B0:D3:AC:98:D3:6D:64:2F:34
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 3084264D10168DCAD8E424B96CF541E96788D831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
Manifest number: 02E4
Signing time: Tue 12 May 2026 12:44:50 +0000
Manifest this update: Tue 12 May 2026 12:39:50 +0000
Manifest next update: Wed 13 May 2026 16:17:50 +0000
Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=)
2: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=)
3: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: nC6ZSi5Mm1ZxpLpHYV1D1G2FZwYkE8aORBJadoJg+MM=)
4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=)
5: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=)
6: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=)
7: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=)
8: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:84:26:4d:10:16:8d:ca:d8:e4:24:b9:6c:f5:41:e9:67:88:d8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: May 12 12:39:50 2026 GMT
Not After : May 13 16:17:50 2026 GMT
Subject: CN=00FF951CC6781BFA534EA4B0D3AC98D36D642F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:b2:b5:52:5f:68:0a:6c:09:0b:2f:08:11:
42:11:eb:44:6d:b1:29:c3:a5:a8:81:e1:03:61:a6:
2f:c5:a0:11:f1:d4:06:0b:46:fe:4c:06:7c:16:ff:
da:b4:85:55:e3:0c:d5:ec:95:72:b1:31:47:58:46:
a9:17:c2:ba:63:a1:74:5d:f1:a7:e4:2f:55:0b:c9:
3e:1b:14:08:f4:ee:96:5e:ab:f9:54:af:69:6e:a8:
00:9f:f3:ae:21:0b:47:54:de:bd:bc:c0:30:a4:8a:
35:28:19:66:eb:5c:1c:36:e8:5c:69:3a:8c:5f:ba:
93:67:df:18:d3:59:4f:77:a1:f0:12:3e:95:f2:9f:
02:24:93:62:fb:62:1e:e9:37:05:d1:90:85:14:a8:
5b:07:15:b3:18:2a:44:03:d2:1d:43:89:bb:7d:40:
61:2a:59:5d:24:12:d7:49:b6:7f:da:3c:bc:ff:af:
72:a9:53:27:77:b1:32:4d:e2:33:8f:3c:23:1c:5a:
1d:8f:25:d0:a4:61:81:64:93:7a:cd:05:81:6c:bd:
48:67:7b:bc:f1:30:8b:83:fc:b1:53:f7:b2:a8:a6:
53:51:17:97:25:b3:9f:b7:23:89:40:94:de:c3:e4:
9d:b4:49:6e:21:8d:64:40:47:91:bd:35:9d:c8:99:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:95:1C:C6:78:1B:FA:53:4E:A4:B0:D3:AC:98:D3:6D:64:2F:34
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f6:24:8d:6a:de:46:ee:9e:de:62:65:c3:aa:a3:95:db:00:
58:bc:b4:bf:01:85:40:a3:dc:68:5b:13:63:2a:23:bb:84:ed:
3f:17:17:d7:f7:5c:1b:44:b4:fe:06:46:17:ae:20:75:d3:db:
c8:2e:9e:63:12:2a:fb:3b:b0:97:26:e8:b5:da:6c:5c:91:77:
1c:41:b6:e0:2e:80:e0:bb:fe:5d:bf:34:28:5d:d9:75:21:4b:
18:d8:c5:ff:55:88:ff:d1:a4:ee:00:37:2d:56:16:b7:fb:34:
b1:b9:af:75:fe:fa:07:6e:42:06:64:a2:7d:04:ab:36:9d:5b:
a3:f6:b4:5a:a0:fa:c7:5a:d6:4b:16:89:9b:e7:1e:7f:35:c2:
4f:03:f9:f2:56:a0:60:3b:96:0c:54:70:99:c3:84:83:be:21:
63:1c:b6:c5:79:94:a3:55:9c:a5:77:8a:ea:e5:44:6a:05:72:
95:43:fe:2f:fc:af:bf:3e:ae:d9:3d:79:91:0c:9c:0c:9a:af:
e0:15:f1:8b:41:28:59:72:e2:7b:82:3d:69:f2:65:4d:f1:2e:
cf:39:91:c7:60:bb:03:5e:c1:8c:0e:7f:a0:06:c8:c9:83:56:
7f:57:3e:2d:9f:44:1a:33:e2:d7:c8:f9:00:74:52:3a:08:2e:
a7:ee:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:47 2026 by rpki-client