
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: In79kKWDKqQ41ErorjBACxMiGvawKLXT/7FPnxI6Rl0=
Subject key identifier: 6A:E2:9B:96:D3:0C:88:2F:DA:70:FE:66:1E:49:5E:6A:20:5C:1F:1E
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 2E9455F57DCE5B7B8D2421916B6BDB88828F8FBE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 03AB
Signing time: Wed 25 Mar 2026 18:51:10 +0000
Manifest this update: Wed 25 Mar 2026 18:46:10 +0000
Manifest next update: Thu 26 Mar 2026 21:33:10 +0000
Files and hashes: 1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
5: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
6: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
7: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: qHW35izhoeqg2pMbr7ey3eUV/ZGq8T1kXNRPim5fJjc=)
8: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
9: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=)
12: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
14: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
15: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
16: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
17: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:94:55:f5:7d:ce:5b:7b:8d:24:21:91:6b:6b:db:88:82:8f:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Mar 25 18:46:10 2026 GMT
Not After : Mar 26 21:33:10 2026 GMT
Subject: CN=6AE29B96D30C882FDA70FE661E495E6A205C1F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:1f:fc:a5:74:8c:cf:03:19:5b:00:17:6c:
8a:08:49:03:d9:3a:16:32:fd:ee:c9:4e:c4:3a:f3:
35:14:fe:de:db:31:af:a5:72:d1:39:b6:50:4b:c2:
29:f7:7d:35:8c:2c:d3:d9:7b:77:35:71:6c:da:e3:
9d:5f:6a:3f:47:0c:fb:66:18:ce:05:82:44:34:17:
5d:56:ab:75:be:55:3b:1d:bf:c8:eb:0f:47:d1:ea:
4e:cf:52:27:b4:87:df:cc:34:bd:1e:58:28:e4:8d:
3c:9d:c3:70:46:fe:a3:05:50:3d:eb:01:40:f1:2f:
1a:b3:43:94:5c:44:23:ef:15:5e:a9:f2:43:1d:b9:
d8:43:8f:9f:d8:0e:fe:b9:4b:0f:25:3c:36:9b:98:
ab:ca:ab:95:21:e9:a6:a4:b3:d3:00:43:75:71:9c:
68:0e:52:99:74:2a:99:00:46:c7:19:66:a2:98:3d:
85:e3:07:52:f0:ac:e1:f3:98:3f:ea:8c:da:d9:a2:
7d:e7:ec:40:84:be:04:fa:3d:b3:ac:d2:1f:71:3e:
f9:ed:ee:8f:6e:85:4c:75:a8:e7:8f:4e:93:68:c3:
f5:97:70:ca:92:56:7e:1f:16:47:ff:86:bb:08:9b:
1f:7f:4f:a3:0b:e9:76:68:d0:20:44:c6:ec:0b:cd:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:9B:96:D3:0C:88:2F:DA:70:FE:66:1E:49:5E:6A:20:5C:1F:1E
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e9:86:3e:cf:1f:9e:97:0c:4f:58:c8:6f:e6:3c:0b:57:4f:
a1:87:84:83:d7:82:6c:f0:80:9e:2e:90:24:e2:96:85:19:82:
27:d2:4b:0f:a0:fc:ad:6e:a0:1f:71:f9:db:66:79:fa:70:fe:
74:a3:ad:28:bd:8d:5a:20:80:98:ae:60:31:9b:d9:0c:33:bd:
4c:5d:a2:7b:87:a7:f4:2e:c2:e5:33:4c:29:49:68:81:be:26:
ba:cf:ca:4f:f3:6b:1e:22:b5:47:1f:2e:4b:32:55:f4:24:3d:
de:3d:35:9a:f8:ad:4d:65:07:66:74:21:5b:48:d6:a3:6c:66:
7c:4d:a1:90:fa:57:01:fa:14:12:b8:2a:ab:4f:c6:1c:50:30:
24:92:37:f4:75:e1:fa:01:a9:f8:aa:9f:3c:16:02:c2:22:5b:
d0:46:9e:6f:54:b7:89:85:19:ac:9a:1a:fa:27:9f:ef:ca:8e:
f5:3d:6d:8f:db:90:5d:a1:39:ca:56:a9:0e:64:96:03:1b:ff:
69:20:48:f5:fd:d8:dc:6e:50:7a:02:e5:bc:94:8b:c1:72:f4:
62:28:90:76:7f:81:bc:22:7f:aa:5a:fc:c5:d3:3c:4a:ab:06:
6b:7f:64:be:90:01:23:f6:1a:e4:f7:a2:a8:f8:c4:3b:9f:94:
a5:37:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:26:54 2026 by rpki-client