
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: +hGGMK1KFg3iA8WdiAijIb3nUPrNtesowbXBZmzKAec=
Subject key identifier: 64:AC:6C:91:F4:62:1B:12:CE:65:EF:11:58:19:39:BA:FF:D6:B6:47
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 1D2AC31C2AC1C16A47775711915C8F5952AA2135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0319
Signing time: Thu 23 Jul 2026 17:26:43 +0000
Manifest this update: Thu 23 Jul 2026 17:21:43 +0000
Manifest next update: Fri 24 Jul 2026 20:28:43 +0000
Files and hashes: 1: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
2: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
3: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
4: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
5: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
6: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
7: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
8: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
9: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
10: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
11: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
12: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
13: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
14: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
15: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
16: AS215248.asa (hash: Eg99jLezI40BElbDL434GmBRT28XySCdWz+4KExnZUU=)
17: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
18: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: QJS1PU0mUEBHSi+9/Ntf253JKt0BDr0wjcTGZ0HMA8Q=)
19: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2a:c3:1c:2a:c1:c1:6a:47:77:57:11:91:5c:8f:59:52:aa:21:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 23 17:21:43 2026 GMT
Not After : Jul 24 20:28:43 2026 GMT
Subject: CN=64AC6C91F4621B12CE65EF11581939BAFFD6B647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:fe:1d:ad:d8:b1:50:f8:8a:a1:23:fe:04:
ed:67:be:bc:2a:9e:74:bc:b3:8e:87:f2:c2:cf:80:
c2:40:15:d0:4a:ac:76:77:75:72:e2:11:55:c1:26:
a7:e5:22:62:3c:08:a5:90:68:35:d7:f0:30:1a:8c:
6d:4a:9b:9a:e2:f6:27:25:53:04:d6:a3:7d:d8:78:
74:95:f5:e4:8f:8e:84:0c:70:29:e4:72:8a:67:53:
f6:32:dc:eb:78:36:0a:e5:3a:65:b1:10:30:e7:a9:
0e:0d:03:b5:a4:e7:f7:71:e5:57:f0:75:16:b9:cc:
b4:5a:d8:2c:bb:c3:5d:81:d9:01:95:42:dd:ff:d8:
74:1b:ad:fd:53:e5:42:bd:ff:01:04:17:fa:6c:bd:
cc:78:5b:ed:30:ea:21:60:7c:ce:af:d7:e3:b4:39:
d3:77:43:7b:61:4d:11:4d:ae:aa:2c:f0:92:c1:84:
60:11:d3:c0:16:f0:50:41:58:06:08:34:a0:7e:5c:
b3:17:9c:97:19:fe:c0:a4:2f:f3:6d:3b:5d:2f:cc:
d0:70:b1:8b:17:20:88:91:93:11:ea:e9:60:8e:4a:
77:fd:c5:d1:74:65:95:f9:49:8c:d3:d8:87:82:57:
d9:09:6e:5c:34:b0:72:83:a9:8b:10:bf:1c:9f:be:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:6C:91:F4:62:1B:12:CE:65:EF:11:58:19:39:BA:FF:D6:B6:47
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:99:bb:1c:c5:1c:88:14:ec:1a:e1:b8:62:2c:71:d3:6c:c8:
59:96:77:e0:6b:5c:b1:b3:46:4c:ba:6f:3c:51:18:fc:74:f0:
20:c3:ef:06:18:61:a0:9c:1c:60:b8:10:60:9b:92:82:b9:e3:
4f:9d:0e:9d:59:65:8e:6d:e6:fe:da:81:9d:d9:28:a3:e9:cd:
85:1f:fb:10:9f:30:62:21:ec:2d:34:86:44:1c:1a:52:13:5c:
40:d3:97:3b:51:f7:97:d6:a7:79:6d:9d:ca:83:ba:b9:ec:e4:
ac:96:0d:d5:5c:eb:0f:03:fe:f7:2a:45:08:a2:c9:2c:03:be:
c7:51:0c:8d:59:de:4a:78:1a:9f:41:72:b4:72:2e:65:d9:31:
80:24:db:ad:ea:57:7f:57:55:1f:1b:cc:36:cb:b2:46:55:76:
fc:40:91:fb:c1:d6:07:18:a4:e9:5c:ad:fa:e4:0e:f3:39:e9:
91:6f:fb:86:4f:b2:2a:db:bd:33:4d:88:3b:f8:85:7f:eb:de:
f1:cb:69:7f:62:40:76:59:7f:b5:c9:70:d4:ea:c4:c6:47:37:
28:f4:e5:f6:97:a9:98:bd:c1:dd:8e:9b:c6:e1:40:48:37:71:
a3:9e:2e:70:16:d3:db:8d:8b:92:ae:eb:ba:0a:e4:3c:61:5d:
de:e9:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:46 2026 by rpki-client