
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: IeciXd5dc6QbHj9cQ/sZHzYFduME1B3KkPUxwJaOJrw=
Subject key identifier: 77:47:89:05:A8:35:FE:25:FE:29:A0:E5:76:DE:89:E2:4A:7B:F2:DB
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 123FD84930067FEF4F58D4D839E9DFC09E045137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0373
Signing time: Sat 26 Sep 2026 13:18:54 +0000
Manifest this update: Sat 26 Sep 2026 13:13:54 +0000
Manifest next update: Sun 27 Sep 2026 17:17:54 +0000
Files and hashes: 1: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
2: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
3: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
4: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
5: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=)
6: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
7: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
8: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
9: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
10: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=)
11: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
12: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
13: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: B/WOiwCG0ARzZ8cYjxk/6xgbyrVxl/AWB+GUYqhNiss=)
14: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
15: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
16: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
17: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
18: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
19: AS215248.asa (hash: Ks58Ctz2hRVGrTaVNMmyrZzvbMUZa4toHgyrb8iY6Wc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3f:d8:49:30:06:7f:ef:4f:58:d4:d8:39:e9:df:c0:9e:04:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Sep 26 13:13:54 2026 GMT
Not After : Sep 27 17:17:54 2026 GMT
Subject: CN=77478905A835FE25FE29A0E576DE89E24A7BF2DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:d2:37:cf:b7:08:eb:2a:a4:9b:40:de:0c:
34:70:7f:8e:a9:15:c1:a9:41:32:f9:1b:e8:8a:38:
b7:63:c4:3c:2f:ed:e3:82:18:cb:d1:f3:97:e3:bc:
41:e3:88:59:39:f4:cb:f2:6a:f7:1e:4b:c2:63:47:
27:ac:a7:d1:aa:40:bb:9c:02:0c:28:6a:91:3d:6c:
a7:a7:7d:c9:0e:ad:18:0b:85:7e:8b:c6:33:66:92:
38:31:2a:1b:4c:b1:d8:44:51:3f:ec:da:f1:87:c5:
4e:3c:0f:8e:50:e3:34:af:7f:5f:8f:5d:3b:0f:6f:
1b:c5:97:b6:ad:61:86:c1:43:20:dd:ca:d2:94:f4:
cd:e2:82:46:82:6c:70:cb:31:4e:26:c9:87:63:5b:
6c:6c:db:9d:82:93:c0:46:53:10:91:b7:87:cc:2f:
69:17:79:c9:1f:9f:77:5b:42:83:39:9b:f5:a8:d8:
9a:9f:52:f9:ab:fc:44:16:38:3e:83:97:a1:95:15:
2e:26:fe:f9:86:e4:52:b3:be:dd:61:c9:46:35:32:
6a:d2:09:d7:f1:d1:8e:57:a9:c3:6c:85:31:93:7d:
47:4f:dc:e8:92:26:d7:bb:d3:a2:99:10:3f:96:f7:
cd:0e:12:fe:c6:d6:58:13:46:1b:2f:a5:0b:2f:e8:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:89:05:A8:35:FE:25:FE:29:A0:E5:76:DE:89:E2:4A:7B:F2:DB
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:ef:88:74:af:63:c6:24:c4:23:10:47:dc:5a:e3:ee:2c:
bd:e0:30:73:99:ae:17:75:e4:d1:03:e2:88:b3:83:2f:42:91:
2c:06:2d:04:dd:c8:46:bd:06:a7:5a:a1:ee:4b:81:ce:c4:b7:
6b:c0:6f:bb:4d:5d:c0:c6:dc:c5:09:60:ff:55:bc:11:c1:51:
0e:ab:dd:16:3c:11:41:ff:4c:b6:23:18:71:18:62:06:f9:1f:
a1:62:b6:58:a7:8b:9b:7d:26:23:7b:62:88:81:7b:3a:3c:44:
72:ba:01:ee:97:d6:92:34:b7:77:33:25:0f:53:c9:6e:1c:8b:
25:d6:93:bf:08:57:ac:4d:10:cd:ce:46:70:e0:8f:a3:02:83:
f5:37:f7:44:42:bf:24:86:f3:16:9a:b5:d9:2b:f9:44:81:90:
dd:58:b4:17:e3:d8:3a:2a:a6:e6:52:33:6f:f8:2c:15:84:f4:
bc:35:27:53:84:8a:b5:d4:d5:24:ee:e2:23:9a:2b:08:32:2a:
cb:cf:71:65:47:b6:75:4f:5e:04:f8:b3:f3:03:c9:08:13:39:
b0:2d:a7:9f:c0:7e:fa:f0:de:d6:44:48:97:19:bf:b0:92:43:
6b:01:6d:21:ea:4a:a4:d9:5e:64:3b:ed:ef:cc:42:b7:4e:d7:
41:a4:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:51:06 2026 by rpki-client