
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: qm/7R7miQMKOHLtTMjgnkUFUfXwly92eIl6fNUhiLvg=
Subject key identifier: 60:D8:8A:C1:B7:66:95:E8:B2:7B:CD:38:14:58:AE:CE:00:10:15:E5
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 34B2543D952E779631874EE0D0EA82772E27C42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0377
Signing time: Tue 29 Sep 2026 16:03:54 +0000
Manifest this update: Tue 29 Sep 2026 15:58:54 +0000
Manifest next update: Wed 30 Sep 2026 18:54:54 +0000
Files and hashes: 1: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
2: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
3: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=)
4: AS215248.asa (hash: Ks58Ctz2hRVGrTaVNMmyrZzvbMUZa4toHgyrb8iY6Wc=)
5: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: pi+1SOzO7ZaD+LrQnfQoRcCpxrjkBTanxdroo8xpNIY=)
6: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
7: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
8: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
9: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
10: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
11: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
12: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
13: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
14: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
15: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
16: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
17: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
18: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
19: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b2:54:3d:95:2e:77:96:31:87:4e:e0:d0:ea:82:77:2e:27:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Sep 29 15:58:54 2026 GMT
Not After : Sep 30 18:54:54 2026 GMT
Subject: CN=60D88AC1B76695E8B27BCD381458AECE001015E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:59:30:b1:6e:99:da:cc:b9:17:bd:3b:bf:
42:93:d8:a6:4f:db:56:72:59:39:e8:93:fc:ad:52:
bf:3d:d2:14:75:67:2d:85:48:39:c2:f1:f8:ff:0f:
2b:02:f8:f8:d0:87:a5:fb:11:b1:e1:de:97:f9:74:
d1:6f:b9:7b:72:8b:89:19:ab:56:8d:d2:28:6b:80:
ef:2c:34:42:f1:38:1c:8b:53:92:6b:e5:07:e1:ae:
b4:c2:40:74:3b:42:9a:8d:22:c1:0c:ed:0e:03:f5:
4e:3c:c4:ed:36:54:43:ee:ee:c6:40:8d:77:73:90:
92:5d:37:ba:e3:3d:a2:ab:ce:f9:c8:dd:71:65:bd:
2b:37:f6:86:ba:da:d3:d1:11:12:4b:87:26:1f:be:
85:11:81:69:80:e6:66:90:08:62:63:73:65:63:a9:
be:f3:12:93:28:b6:10:d0:f5:06:b5:33:bb:6a:08:
a9:4a:53:f0:97:8f:bc:f3:d5:fb:d0:2c:5a:4a:b0:
2e:24:09:67:4b:f1:24:94:ff:64:e3:d7:2d:4f:7f:
6d:38:47:46:10:24:b2:67:e0:ba:53:23:4d:01:43:
42:96:10:30:f6:0b:2e:84:33:e2:a4:30:28:a3:d9:
0a:cf:3b:33:59:da:60:53:b2:3e:81:bc:14:63:dd:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:8A:C1:B7:66:95:E8:B2:7B:CD:38:14:58:AE:CE:00:10:15:E5
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:4a:4e:d2:59:65:f3:f9:75:6f:c3:77:b1:15:56:58:f7:
d3:c4:35:7c:0d:13:e9:b1:f8:9f:21:29:8a:21:8b:43:a9:64:
4d:af:04:a6:9c:f6:e9:0e:38:64:17:af:ac:1e:7e:82:5c:17:
43:77:62:4f:11:cc:61:a0:5a:77:eb:82:e2:2d:b2:f4:80:d5:
6f:69:45:7e:e9:5e:6b:ba:30:cf:0e:10:7f:ea:66:8f:2c:46:
40:c4:41:24:9b:3d:cd:b4:25:31:63:93:d1:26:5e:12:7b:dd:
3f:65:d8:dd:1d:be:04:05:27:d6:81:80:ee:f7:d8:41:fa:5a:
f8:1a:b0:94:06:e2:aa:05:c8:1e:35:d0:ab:5c:00:45:01:f4:
63:4c:3c:fe:2b:30:1f:ad:9d:3b:f1:57:89:a0:a2:35:fa:3c:
70:0c:70:b7:bc:cb:be:cf:06:b8:cb:ee:b2:72:90:15:5e:f9:
7f:22:e3:37:f8:97:7e:45:01:01:dd:9b:a4:e2:8e:fd:ea:fd:
ed:9b:22:1b:b0:1f:28:7b:19:45:94:9a:c1:1f:ad:ba:2d:cc:
65:76:c7:eb:6b:3c:03:11:81:4d:cc:6f:05:01:37:51:c6:7e:
07:93:33:d3:a8:eb:93:41:64:c3:ab:e4:51:00:06:de:ed:f4:
c7:3f:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:04:25 2026 by rpki-client