
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json)
Hash identifier: 84rk9UGjcldBEYzxOFPqeBxdUPR5Gd6g/yBxtOSC6Zc=
Subject key identifier: AC:94:45:3A:90:EA:D0:D4:EC:31:B8:DB:73:CA:B4:01:33:DC:66:5C
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 4224889621E1A8CCD4F740B5B90DE6970FA210AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
Manifest number: DE
Signing time: Wed 23 Sep 2026 07:49:20 +0000
Manifest this update: Wed 23 Sep 2026 07:44:20 +0000
Manifest next update: Thu 24 Sep 2026 11:41:20 +0000
Files and hashes: 1: 238A11AE245357E72FEB39785C7BC03A973A44E1.cer (hash: R+HEqGQkKX3kuC+uAGVikvyFGt/9CvxJ0iCn1j10oDE=)
2: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=)
3: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=)
4: 326130613a643638333a3a2f33322d3438203d3e2030.roa (hash: 1AoAuE4mRiqziiHkgepF+g+OjuGOS1bv+xQ+rN/5kXU=)
5: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=)
6: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (hash: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=)
7: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: kyq35IdsR0Y222ygRcXrol/9FU6bAh3e7y76zsz2h2Y=)
8: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=)
9: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=)
10: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=)
11: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=)
12: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=)
13: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (hash: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=)
14: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=)
15: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=)
16: 326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa (hash: 1T45wJGc9qWA/I6HYWiBwXOEkTOAa5L1s8+wvsXsnRY=)
17: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=)
18: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=)
19: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:88:96:21:e1:a8:cc:d4:f7:40:b5:b9:0d:e6:97:0f:a2:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Sep 23 07:44:20 2026 GMT
Not After : Sep 24 11:41:20 2026 GMT
Subject: CN=AC94453A90EAD0D4EC31B8DB73CAB40133DC665C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:a6:a9:ea:76:2e:da:9b:52:41:54:8b:fa:
42:ca:ce:39:1e:57:04:81:47:8b:85:3b:3e:a0:73:
d5:9b:59:65:81:15:e6:43:85:06:b4:98:e8:83:73:
04:13:47:47:3b:8d:8c:fd:94:12:5d:26:e3:ef:ad:
c6:ec:b7:c9:92:5e:74:0b:be:eb:05:19:c6:81:11:
f4:d7:e3:92:91:3a:8b:e3:c0:ae:68:0b:5f:ee:95:
f8:f5:7c:9b:ba:93:4f:a0:e2:4e:42:dd:75:28:db:
51:ef:ea:23:c6:2b:5a:4d:8e:4f:a6:a0:1e:79:23:
c5:9b:74:09:e3:51:23:7d:3f:a9:23:cb:c9:09:91:
6f:50:6b:82:ba:b1:2d:5b:0f:48:be:28:0d:21:5c:
14:64:cb:c2:05:8c:62:46:20:c4:f5:20:89:08:4f:
da:0b:ab:fc:4d:65:1e:40:10:b5:19:61:46:35:42:
68:40:fe:c8:9b:d5:c2:67:79:37:b5:83:8d:a4:92:
b5:8f:75:5b:de:28:d1:45:69:b2:5e:08:8f:64:36:
ec:41:0e:5c:bd:66:57:fb:c6:aa:7a:e4:0b:d7:2b:
91:d4:d0:74:a8:a5:b8:11:05:4e:7d:2a:75:13:b8:
11:d6:b8:30:8c:eb:41:e7:64:f2:9e:8b:bf:8d:92:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:45:3A:90:EA:D0:D4:EC:31:B8:DB:73:CA:B4:01:33:DC:66:5C
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:c4:4e:6d:95:5b:8a:57:2f:0b:fb:b0:82:50:df:76:af:
30:dc:4e:27:af:1c:3b:3b:de:f6:92:97:75:a6:2e:37:c7:bf:
3e:c6:41:05:5c:bf:22:82:c7:89:17:0a:cc:9d:35:8b:fe:c8:
df:2c:06:60:ce:b0:19:ad:48:0f:0c:d4:01:8b:26:77:4b:9a:
3a:b1:93:d6:52:34:a7:1b:4e:b7:6b:dd:10:86:a4:3d:df:76:
34:cd:0f:be:1e:e3:f3:3e:49:34:40:cc:ed:84:f3:e3:c4:e0:
fd:ed:85:60:ff:a2:3d:b9:42:82:71:c6:14:e3:66:b2:3f:f2:
c0:22:4a:9d:a5:72:ce:12:1d:17:46:7b:98:fa:3b:9c:c3:c2:
7f:d4:14:53:96:4c:37:c6:12:21:90:3f:8d:fa:6b:31:ce:ae:
b5:2a:9d:52:e8:d6:89:d5:6e:3c:62:27:e8:c8:02:e5:40:ed:
fb:e2:6e:41:0c:a3:a8:65:a6:20:e5:67:28:1a:ea:56:bd:9c:
b6:92:be:03:9a:b6:24:0e:e0:7c:0a:8f:e7:87:b6:39:fa:94:
70:6b:55:28:64:fc:cf:2a:87:42:b1:6c:81:01:3d:b5:71:c5:
97:a2:a1:41:e7:d2:b0:97:5e:54:2e:70:52:a7:e6:ea:9a:25:
ae:53:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:28:16 2026 by rpki-client