
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier: pZZGF17P6A1w4BPKIs5VgOsSxhVo2g6qexu5cC73rXQ=
Subject key identifier: 6E:2D:E9:16:CC:69:E8:1C:9C:67:1C:1C:0C:03:27:7E:D5:1E:83:43
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial: 1CD21457E48D7F6C47C0080AB30B0466D3372B59
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number: 0158
Signing time: Thu 23 Jul 2026 06:09:39 +0000
Manifest this update: Thu 23 Jul 2026 06:04:39 +0000
Manifest next update: Fri 24 Jul 2026 07:16:39 +0000
Files and hashes: 1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: GyymDPQhnVh6sYnWgvgX0jzclMGFrj+3hVB5se8YUFU=)
2: 326130363a313238333a626434313a3a2f34382d313238203d3e20323130373936.roa (hash: dEQxNzWGRiNVE6wnRySg0Zjbuji/RIwRR1DUgWYNf80=)
3: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d2:14:57:e4:8d:7f:6c:47:c0:08:0a:b3:0b:04:66:d3:37:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
Validity
Not Before: Jul 23 06:04:39 2026 GMT
Not After : Jul 24 07:16:39 2026 GMT
Subject: CN=6E2DE916CC69E81C9C671C1C0C03277ED51E8343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:56:49:6a:64:79:b4:6c:ea:78:88:72:d5:
0d:0e:c9:c7:88:e3:70:cb:40:72:45:8e:6b:f4:5b:
74:60:2d:11:d7:a6:34:05:03:3d:88:12:4d:63:e5:
ee:44:8f:d9:fa:59:3e:58:9d:4a:6c:01:6f:8c:48:
f7:8e:d2:42:f1:c0:07:61:31:c6:54:62:7b:e0:f4:
26:24:85:db:d7:2e:c0:62:a1:0f:a5:98:99:65:84:
59:3b:5e:34:9e:87:fa:12:df:d0:d8:79:da:29:30:
8e:cb:0e:a0:15:0a:4e:07:9d:82:78:bd:60:2a:95:
5b:61:a8:c8:18:b9:db:a8:3d:1d:db:ad:05:68:a8:
95:49:77:22:0b:bd:b8:a0:be:e7:49:b8:00:0d:c2:
3a:d5:b0:9c:9f:41:a4:32:e6:43:2a:8a:71:85:e1:
f2:e2:b9:d4:6f:5a:46:ad:01:8f:41:e5:91:5d:85:
33:77:3c:40:83:3b:37:00:5f:fa:7b:94:bb:c1:0f:
5b:e3:bf:90:bf:4f:36:5c:0f:45:3e:e7:bc:1c:32:
82:81:f5:63:9b:ea:8a:4d:3a:f5:c3:b4:0d:ef:6b:
50:f1:c3:cd:81:d9:57:8e:dc:c1:7c:fc:8f:53:c6:
44:83:8a:4e:5d:32:c5:a1:ce:bb:96:e8:56:6d:9d:
0b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:E9:16:CC:69:E8:1C:9C:67:1C:1C:0C:03:27:7E:D5:1E:83:43
X509v3 Authority Key Identifier:
keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:29:40:a9:50:ef:2e:30:71:7f:df:f5:7f:3b:1b:90:bc:
b6:dd:83:c1:fd:fb:84:38:37:9a:23:b9:f5:79:a8:02:89:4d:
9e:eb:da:03:d9:12:ad:9c:5f:b1:00:2d:b1:42:ef:0f:d2:2b:
87:36:47:69:bf:cc:8b:f7:45:77:49:f3:df:0a:0c:73:b8:a4:
ca:c9:0c:4a:c0:4e:11:ba:f9:39:4e:62:7b:0b:c0:33:ba:5f:
2d:fa:e2:83:9c:88:26:db:c7:fb:a8:dd:00:5b:a3:9e:d1:76:
43:2c:38:0f:e0:68:af:12:df:85:78:38:41:ac:f0:47:30:e3:
88:d5:bb:d4:cc:81:c0:3e:f7:74:90:b2:73:1d:f8:cd:85:3d:
0e:2d:bb:77:7b:ad:71:75:04:52:dc:a0:98:c5:13:bd:ef:df:
e8:f9:aa:c3:f9:88:3d:16:53:0a:72:8b:b5:aa:c4:1e:82:d7:
50:4f:1d:53:66:a1:59:f9:cc:80:9f:14:a3:61:b0:17:18:3e:
92:2b:0c:ec:14:18:50:0a:e1:79:f3:db:9c:a2:42:56:c3:bf:
5a:78:8b:35:e7:98:2c:be:a6:5a:3e:10:39:ac:c7:71:f0:4d:
11:d1:54:55:4d:ba:2c:e5:0d:f4:1d:29:5f:cc:d6:f3:b1:e6:
f8:dd:af:62
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHNIUV+SNf2xHwAgKswsEZtM3K1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE
OEQyQTk3QjAeFw0yNjA3MjMwNjA0MzlaFw0yNjA3MjQwNzE2MzlaMDMxMTAvBgNV
BAMTKDZFMkRFOTE2Q0M2OUU4MUM5QzY3MUMxQzBDMDMyNzdFRDUxRTgzNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sFZJamR5tGzqeIhy1Q0OyceI
43DLQHJFjmv0W3RgLRHXpjQFAz2IEk1j5e5Ej9n6WT5YnUpsAW+MSPeO0kLxwAdh
McZUYnvg9CYkhdvXLsBioQ+lmJllhFk7XjSeh/oS39DYedopMI7LDqAVCk4HnYJ4
vWAqlVthqMgYuduoPR3brQVoqJVJdyILvbigvudJuAANwjrVsJyfQaQy5kMqinGF
4fLiudRvWkatAY9B5ZFdhTN3PECDOzcAX/p7lLvBD1vjv5C/TzZcD0U+57wcMoKB
9WOb6opNOvXDtA3va1Dxw82B2VeO3MF8/I9TxkSDik5dMsWhzruW6FZtnQupAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUbi3pFsxp6BycZxwcDAMnftUeg0MwHwYDVR0j
BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy
MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk
ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz
MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5
MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUDClA
qVDvLjBxf9/1fzsbkLy23YPB/fuEODeaI7n1eagCiU2e69oD2RKtnF+xAC2xQu8P
0iuHNkdpv8yL90V3SfPfCgxzuKTKyQxKwE4Ruvk5TmJ7C8Azul8t+uKDnIgm28f7
qN0AW6Oe0XZDLDgP4GivEt+FeDhBrPBHMOOI1bvUzIHAPvd0kLJzHfjNhT0OLbt3
e61xdQRS3KCYxRO979/o+arD+Yg9FlMKcou1qsQegtdQTx1TZqFZ+cyAnxSjYbAX
GD6SKwzsFBhQCuF589ucokJWw79aeIs155gsvqZaPhA5rMdx8E0R0VRVTbos5Q30
HSlfzNbzseb43a9i
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:51 2026 by rpki-client