
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier: ++JuBKi4vR33fMn8CQQdrq5vCh2+0eXAUOtsxkrN6WU=
Subject key identifier: 2D:6B:B4:95:D6:8D:F7:FD:C3:35:70:E3:B1:CC:7E:26:C6:DB:6D:06
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial: 3FBC1961C5BF36AFE07D2E6CB0AB174D79BC4693
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number: 01B0
Signing time: Sun 27 Sep 2026 16:40:03 +0000
Manifest this update: Sun 27 Sep 2026 16:35:03 +0000
Manifest next update: Mon 28 Sep 2026 20:06:03 +0000
Files and hashes: 1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: JAclb+xoH2Q6JDKWc8GlT+/Jynw3j6haQIY5XOcgbCQ=)
2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 18:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:19:61:c5:bf:36:af:e0:7d:2e:6c:b0:ab:17:4d:79:bc:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
Validity
Not Before: Sep 27 16:35:03 2026 GMT
Not After : Sep 28 20:06:03 2026 GMT
Subject: CN=2D6BB495D68DF7FDC33570E3B1CC7E26C6DB6D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:15:db:44:e3:bd:04:c9:2e:f0:81:57:3b:
21:88:8c:8f:1b:23:42:3b:70:ef:da:2a:12:d7:d4:
31:08:8d:4f:14:7e:91:11:8e:19:66:b0:d4:43:3a:
84:2c:35:d4:46:7e:44:60:e9:ed:06:64:08:79:01:
a3:fa:4e:68:45:41:f1:2e:7f:f2:4f:4d:35:34:7f:
5d:91:7a:8e:91:22:eb:e8:6c:dd:54:c9:cf:5f:f3:
90:d9:64:05:38:01:56:a2:89:aa:37:47:30:db:73:
01:d0:a1:e2:fd:2c:82:6a:00:f4:3f:09:11:0c:7a:
2c:17:25:b6:d1:79:3a:2b:c4:a2:77:c8:72:f9:6b:
c4:d8:53:24:e7:0a:fe:6a:86:4f:15:4b:4e:f1:15:
3b:84:d8:f9:f5:cb:b0:ca:64:17:c6:a1:b5:8b:5f:
1c:31:05:3d:67:d8:0d:f4:8a:ea:66:56:3e:99:b7:
f2:aa:9a:47:5b:bb:fa:80:7e:3f:c9:82:5d:d1:91:
4f:88:f0:0c:59:63:83:7b:88:26:5e:f8:a6:81:a4:
e6:f4:03:1b:c9:d3:92:b3:f5:9b:76:12:c9:fa:c9:
a2:af:87:de:89:ee:2d:ad:49:b9:e8:04:c1:cf:26:
d1:95:2e:79:c2:96:3f:2e:e2:4b:49:67:37:c1:86:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:B4:95:D6:8D:F7:FD:C3:35:70:E3:B1:CC:7E:26:C6:DB:6D:06
X509v3 Authority Key Identifier:
keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:bb:6b:74:70:6e:40:e1:63:11:4e:86:25:24:c7:64:dd:
53:3d:9e:b7:05:d2:ff:59:c4:f1:81:17:96:5a:7d:3f:a1:f1:
e3:d3:bb:31:48:c8:f9:f4:f6:f5:df:dd:4d:cc:f3:27:d9:bb:
55:d0:b8:18:59:4a:1e:ef:9a:1c:57:99:42:ec:55:0f:6d:fc:
9c:c8:7d:9a:27:6a:c8:88:59:ad:c4:76:c5:0d:73:b2:f7:a4:
14:9f:9f:3d:8c:6b:3a:ef:68:8b:e7:a5:b0:8c:69:1a:e7:ea:
94:5d:bd:dd:3c:47:c8:05:64:80:38:99:b9:15:3c:73:3c:77:
f7:d0:45:09:57:32:b2:ac:88:eb:40:42:96:0b:b6:1d:bf:5e:
80:cc:39:0f:65:6b:41:44:26:40:8e:38:71:42:b2:ff:f2:3f:
b2:13:e4:c3:ae:a3:2b:64:de:f7:22:c5:39:14:6c:c8:2f:3d:
0f:76:43:1d:02:d4:d7:8c:4d:27:27:1e:6c:88:f7:9f:bc:58:
fb:eb:8a:36:77:67:2b:70:5f:f6:0f:22:1c:3d:55:8f:46:49:
cd:4b:ed:2f:46:8d:fc:6b:df:9f:c2:14:e1:ec:2e:21:a9:59:
c6:8d:75:83:a0:51:cc:7b:70:e8:94:71:5a:5c:34:b5:2c:37:
a7:aa:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:35:08 2026 by rpki-client