
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier: ZdiiSOxC7L3ZMwtnBR3yeZhdS3IkN2d1XhEeyVngnlI=
Subject key identifier: 43:88:89:68:CF:9D:F0:BC:A0:A5:A5:6E:D2:56:0A:5A:5F:B4:16:DF
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial: 5B7F479B48852F5B8CECF6F3669FC8414EFABA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number: 063E
Signing time: Sat 28 Mar 2026 07:27:38 +0000
Manifest this update: Sat 28 Mar 2026 07:22:38 +0000
Manifest next update: Sun 29 Mar 2026 08:45:38 +0000
Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=)
2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=)
3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: S3VzRXdULHYpJW44jbKsvhURZz6k7JwfM3MQ9HOJFto=)
4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:47:9b:48:85:2f:5b:8c:ec:f6:f3:66:9f:c8:41:4e:fa:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
Validity
Not Before: Mar 28 07:22:38 2026 GMT
Not After : Mar 29 08:45:38 2026 GMT
Subject: CN=43888968CF9DF0BCA0A5A56ED2560A5A5FB416DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:e7:a6:0a:75:b1:a0:77:7c:22:a4:eb:6f:
b6:5a:9a:c5:73:29:1c:56:37:a9:e2:47:d6:c1:6e:
c6:b6:39:1d:fe:8c:a4:70:e5:8b:31:25:cd:37:40:
d3:cd:4d:c9:d3:f7:c8:0a:48:7f:91:ac:1b:67:0f:
20:75:7d:36:9f:68:aa:95:89:c6:84:28:9e:9f:70:
3c:00:5e:54:1a:8f:46:9b:9e:e0:bb:06:0b:03:7e:
5d:90:41:e7:1b:1a:27:ad:1d:33:6a:41:ed:aa:93:
f7:1b:bd:84:c1:2a:0f:93:b1:a7:7f:5d:36:a9:b7:
96:96:18:bd:cd:8b:60:12:c5:67:2c:ea:e2:ee:b8:
71:4f:81:2b:63:09:71:02:2d:c1:06:f6:5c:dc:0a:
d5:c7:6d:fd:ef:c4:0f:46:e0:da:4c:c5:59:9d:2a:
c2:78:1b:76:ad:20:ae:54:6d:29:b7:aa:c3:94:0b:
d0:98:62:62:05:71:6f:00:89:17:28:13:d1:77:44:
7d:82:ef:69:5d:02:ab:c2:9d:27:8e:bc:45:62:86:
48:27:0c:d0:63:b2:c7:36:54:52:72:c8:e5:93:b5:
cb:c2:df:c3:a1:10:0c:b1:c6:46:88:d6:23:c5:19:
9e:23:40:4d:49:0a:ee:e6:16:3f:29:78:31:10:e8:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:89:68:CF:9D:F0:BC:A0:A5:A5:6E:D2:56:0A:5A:5F:B4:16:DF
X509v3 Authority Key Identifier:
keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:ad:55:f3:09:8a:a0:8d:c4:46:82:47:ff:5f:a0:1d:bc:
3d:b6:93:cd:af:7e:f1:80:fe:02:80:ee:c3:a9:4b:bb:64:d6:
d1:4a:d1:04:6a:70:7b:f6:82:39:df:45:fb:48:5d:ae:8a:f7:
27:80:02:8d:20:d5:62:08:39:0c:64:7a:88:2a:4b:f6:16:7c:
4c:0e:f8:f2:6f:92:81:2e:21:0f:09:6a:18:a0:2d:df:4f:e0:
ff:aa:c3:e5:d8:53:0c:6d:29:6d:e6:87:12:b0:1e:b5:5b:cd:
db:f0:04:83:c3:25:c8:57:7d:41:77:15:ff:b9:57:39:3f:8b:
68:a0:f6:c7:06:78:8c:f1:1a:ec:f4:f2:87:2e:0a:94:60:48:
b0:a4:d6:aa:4b:57:fb:89:3b:31:9a:44:b6:65:52:f0:7e:dd:
72:e1:a1:7b:c5:82:5a:89:0b:d4:50:c4:e7:89:90:96:85:5b:
07:fd:20:23:47:94:d6:4b:1c:21:84:ef:65:38:ef:af:db:f2:
c2:65:47:b8:50:50:47:a8:dd:4b:c2:ed:72:36:09:fa:52:e1:
9c:b5:a2:18:3d:2e:31:74:91:fc:5b:9b:22:5e:75:16:87:47:
29:45:17:4f:34:2b:18:0f:7e:9d:2a:13:fb:20:6b:04:88:f3:
df:ec:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client