
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft
File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft (raw, json)
Hash identifier: vrp1UrqvnfD2QudKs7e6Rk6u0HGx85nUtFsFYVM4z64=
Subject key identifier: 63:7D:1B:C2:93:BD:CB:6C:DD:87:4F:85:57:F2:74:7C:A9:E2:A7:9A
Authority key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF
Certificate issuer: /CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF
Certificate serial: 01FE8D6D4B5AEBD881BDE7F30D64E85AF29DE354
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft
Manifest number: 7B
Signing time: Thu 23 Jul 2026 21:23:31 +0000
Manifest this update: Thu 23 Jul 2026 21:18:31 +0000
Manifest next update: Fri 24 Jul 2026 21:29:31 +0000
Files and hashes: 1: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl (hash: 5xse0FHTwHZ+sO1ZrsH+tWy3jUnvag/Z7cu+WB36Iy4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fe:8d:6d:4b:5a:eb:d8:81:bd:e7:f3:0d:64:e8:5a:f2:9d:e3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF
Validity
Not Before: Jul 23 21:18:31 2026 GMT
Not After : Jul 24 21:29:31 2026 GMT
Subject: CN=637D1BC293BDCB6CDD874F8557F2747CA9E2A79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:f0:79:00:6c:8b:44:bb:3d:b3:88:4b:92:
a0:47:33:aa:a2:12:8a:21:67:d5:15:ae:12:d1:76:
72:60:50:56:c8:c2:02:7f:4e:f1:24:46:16:66:a6:
66:c9:cc:ce:84:b1:0d:49:28:e4:91:84:39:3c:9e:
76:70:b6:73:b2:4d:90:f4:85:bd:33:63:e0:95:40:
2d:2c:a7:c8:b2:b3:a4:6a:30:33:67:8e:95:be:31:
31:92:98:1b:19:a4:eb:57:f0:1f:0a:56:5b:56:b5:
7a:98:f3:0a:47:c6:9b:73:b3:d7:9a:13:79:65:46:
90:c7:37:ca:5d:10:e5:28:c4:4b:5f:41:98:99:d2:
a0:7b:97:67:05:ea:39:29:8b:ef:ae:a7:42:2d:67:
f7:1c:52:8a:d8:cf:2d:ae:e2:c0:70:98:cb:86:ab:
b1:93:96:17:be:3b:4a:fa:a2:db:f7:a2:bb:74:8f:
70:4f:93:a7:15:2e:ed:99:85:6d:21:c1:61:37:39:
28:10:84:20:a1:48:f4:e1:13:64:31:36:d1:1d:96:
be:cd:c4:c1:e8:66:67:a6:5f:3d:ce:b2:7f:d1:5d:
8b:a1:02:87:30:41:8a:61:ad:4e:04:db:14:83:b6:
4e:08:67:83:9f:9b:41:a7:bd:61:02:6e:e3:a2:77:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:1B:C2:93:BD:CB:6C:DD:87:4F:85:57:F2:74:7C:A9:E2:A7:9A
X509v3 Authority Key Identifier:
keyid:B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d4:bf:da:27:7b:e6:ae:47:1c:dc:be:db:9e:62:6c:40:f5:
46:48:16:0b:c6:fc:20:9e:ed:98:7e:cb:cd:f0:02:e7:01:13:
37:37:58:50:37:45:bd:c5:85:2c:36:70:0d:f2:41:4a:40:44:
ec:b2:1e:b7:2e:87:89:81:89:c1:3d:a8:1f:ae:00:a6:65:1b:
9c:3c:b1:c1:fe:4b:17:08:a8:61:2b:65:10:40:65:38:40:f9:
6f:68:29:37:ee:17:41:ac:fa:0c:22:3c:fb:4a:4b:36:fa:92:
f2:09:82:c5:4f:22:df:9f:f8:07:b1:0f:7a:1d:da:a0:7e:aa:
1b:eb:39:b3:7b:61:b3:18:34:f7:43:ac:df:12:37:41:46:84:
13:ac:da:eb:a5:ea:23:e7:83:ba:d3:87:48:64:03:13:5f:c9:
6d:a8:86:af:d6:de:85:5a:da:72:9e:cf:9e:24:bc:63:54:d4:
c0:e0:64:75:71:00:32:42:b6:f6:36:88:2e:14:2f:92:f1:35:
34:a0:29:d4:9e:c1:ce:18:5e:5b:67:88:e6:36:f3:f8:8f:16:
4e:73:5f:bf:ae:1a:9e:3d:43:47:ac:1f:4f:8b:a9:9d:fd:32:
8d:71:41:1b:ae:18:f6:1f:ab:70:ab:5d:cd:b9:df:9f:cf:39:
04:bb:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:57 2026 by rpki-client