
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
File: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft (raw, json)
Hash identifier: zTux1heGNWeA81LJWUhEWykxWZ1MlFhaT/Z/75zosaQ=
Subject key identifier: E3:5C:EF:50:DA:2F:B5:EE:07:C3:75:01:16:5E:6B:08:40:46:A3:98
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 5484389CB38641C6D1AA5C6FCCA85038C7EF35DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
Manifest number: 49
Signing time: Tue 12 May 2026 16:30:43 +0000
Manifest this update: Tue 12 May 2026 16:25:43 +0000
Manifest next update: Wed 13 May 2026 19:13:43 +0000
Files and hashes: 1: 3137382e3233362e3233322e302f32342d3234203d3e20313334353438.roa (hash: 7DgYKwKtLZSr7DRHabJtbuC0B6ix/bKEQ0cR0pfd3rY=)
2: 3137382e3233362e3233332e302f32342d3234203d3e203137353631.roa (hash: IaXCjgu5vZTh/itUXhcfbJx9MSY5NSRMA9XWogXno2s=)
3: 3138352e322e35302e302f32342d3234203d3e203137353631.roa (hash: qB0BB6ZhKcaJO+ugI4LyxfHcrE+NQHHBJFGIgs1wC9c=)
4: 3137382e3233362e3233362e302f32342d3234203d3e203136353039.roa (hash: 0Mm/V7Wp1ZSi2mt8rDpaa6kvf12GFpAfRZvXodrVnHg=)
5: 3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa (hash: a++fo1ZwWeohzZL4au1Gv3n+pN7wCIzdhg0ArbQ5nTE=)
6: A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl (hash: yHVLtKuLTscdlc6SrrkstFF8PnOqIHOrkWZR9UxDbxw=)
7: 3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa (hash: CAMbXIY1N8VhXT+Q3NZkXi8aaoa4UsQXngYC7GnBD9g=)
8: 3138352e322e35302e302f32342d3234203d3e203632303832.roa (hash: iWTNH7HFu3qX6yQvSB2dWbrepXMWTItPVH8yTFaEnVE=)
9: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (hash: hccha8AKtVyQcbSAnDX8P2RW49RRKPpiXx52OSiKEoE=)
10: 3138352e322e35312e302f32342d3234203d3e203137353631.roa (hash: 35sh4qa6md8PSSqaFmFo8K1ywirF77Kr0DSJ4bj3Ok0=)
11: 3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa (hash: DODPiqmKWn4fEQV41JgzryXPssmZ8/IlY16gySvomeE=)
12: 3137382e3233362e3232352e302f32342d3234203d3e203136353039.roa (hash: bVv/8FZz1Mo+LMMAfRoMNi+St0h3DR5SK9VVKl37ktc=)
13: 3137382e3233362e3232382e302f32322d3232203d3e203335393136.roa (hash: A62qyB1loeqHPOgqTh+NyCLJ9k3Q15qAZyXGth/Mn84=)
14: 3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa (hash: Kzu9AijEtaMDzMw/4Xk47K37j84ocZpz0R373WBe8UU=)
15: 3137382e3233362e3232372e302f32342d3234203d3e203136353039.roa (hash: VnGJ5//x+EFhKJMb3ZAld7d7CF6EreU1gC/ATQCq4mA=)
16: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (hash: SpkY2STCdZ8E+lbDkkhjRWISKq958FvzWPMjUz7dAgc=)
17: 3138352e322e34392e302f32342d3234203d3e203136323736.roa (hash: LIh0DIx2IImYPrbtKl5UIaWrpsZNhrwgJffZtWjbQqI=)
18: 3138352e322e34382e302f32342d3234203d3e203136323736.roa (hash: My8k+OlTa0xhkcLsUsLQSsLVzn3l1jbc6y5Wrco7eqk=)
19: 3137382e3233362e3233392e302f32342d3234203d3e203136353039.roa (hash: cMFFY6a6WGGwVpE9OONltKLNaqlkFqqAE9xOwe8uKmY=)
20: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (hash: fHBBYbGG2NzQNQY3fmD8FeYtYam6rWl3rBV+v3fAJU4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:84:38:9c:b3:86:41:c6:d1:aa:5c:6f:cc:a8:50:38:c7:ef:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: May 12 16:25:43 2026 GMT
Not After : May 13 19:13:43 2026 GMT
Subject: CN=E35CEF50DA2FB5EE07C37501165E6B084046A398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:bb:96:94:4a:1f:18:33:b4:3f:6e:8a:eb:
e0:bd:5c:42:10:d9:17:98:18:53:d3:8c:5f:54:b5:
af:fd:05:4f:f5:b5:93:e5:bd:34:d3:61:f6:14:b3:
21:91:be:c1:84:e7:9c:74:78:cf:ea:22:c0:41:19:
78:ac:dd:b8:79:00:3a:57:6f:97:c5:5d:dc:1b:39:
ef:c7:03:4d:e6:76:7d:53:6b:05:c1:f1:44:04:63:
8c:c4:5d:c6:58:6c:c8:89:76:0c:11:a4:b4:df:ba:
3b:d6:ca:b6:b4:1b:ed:e2:07:0e:62:41:69:3a:13:
20:78:29:76:b7:9a:40:87:0d:c6:70:42:f8:ad:01:
86:eb:14:c2:3f:8a:24:db:70:1f:6d:93:ff:ef:a6:
5e:2f:42:4a:2b:db:28:83:9a:48:e6:ab:4c:ae:ba:
57:29:df:44:fb:b9:28:f9:14:56:84:88:4e:16:c7:
f8:57:75:6e:68:03:a5:09:81:d2:fc:4c:90:ab:8c:
7d:6e:a7:c8:78:50:82:e1:07:1d:c8:af:78:b6:45:
df:5b:eb:c0:ee:75:00:8c:d2:8d:b9:86:b6:b4:bd:
55:87:a1:fe:e1:69:ec:a2:17:ad:22:5b:ff:1c:43:
cd:33:d9:a2:a3:8c:08:9e:ae:2d:2e:5b:81:ed:fd:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:EF:50:DA:2F:B5:EE:07:C3:75:01:16:5E:6B:08:40:46:A3:98
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:c7:c9:e5:93:62:b7:4d:2a:f7:ce:71:bb:b3:96:76:1d:
16:3e:23:b2:6f:f8:9b:da:a3:0b:c5:c8:28:eb:6b:e6:44:11:
b7:72:ff:f7:3d:94:e5:4c:3e:d9:55:b5:5a:8b:7f:e8:bd:ba:
27:6a:6e:7a:f0:07:eb:e2:b7:01:b2:1b:1e:4f:81:58:a1:63:
c3:cf:6a:68:57:55:43:0c:85:a0:bc:d3:9a:6e:ff:ec:3c:39:
35:54:61:3e:6b:e9:6d:f1:a1:04:3e:d2:99:b3:46:fc:53:5a:
29:75:20:8d:8f:1a:df:ea:87:1a:58:b6:fb:1e:30:84:8a:43:
d8:65:03:4d:23:f3:5b:81:f6:12:fa:d2:45:56:a0:6e:a7:90:
6b:59:e8:82:e1:ee:eb:c7:ba:24:c5:65:14:33:65:17:2c:ce:
5c:7a:a6:c2:06:55:13:23:e9:6a:4c:88:d6:2c:33:9d:b1:ce:
1a:dd:c6:eb:61:03:61:c1:f6:11:84:0e:26:0b:60:63:fa:97:
65:0a:27:60:e4:6f:3c:53:0d:6f:d2:ab:06:2a:8c:b3:56:ab:
2d:b3:46:97:8d:6f:1c:4b:84:1b:31:86:3b:25:21:35:d9:d1:
65:cd:0b:88:90:de:6a:bc:04:da:23:00:ce:ef:fa:cc:ed:cb:
ba:d5:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:16 2026 by rpki-client