
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
File: 315EC08E540BCBC870FEB38832274E048E2E1F80.mft (raw, json)
Hash identifier: uMMLegBCv02ndb4bT0339ZEq71MrEwVv865oABjmVUU=
Subject key identifier: 8A:53:29:65:19:28:91:B4:5D:E7:A0:14:AF:C5:78:0B:21:0C:9A:7C
Authority key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80
Certificate issuer: /CN=315EC08E540BCBC870FEB38832274E048E2E1F80
Certificate serial: 732CF3CCBEA27E133CCEB89612D188E844ADF7DE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
Manifest number: 95
Signing time: Thu 24 Sep 2026 03:40:01 +0000
Manifest this update: Thu 24 Sep 2026 03:35:01 +0000
Manifest next update: Fri 25 Sep 2026 05:08:01 +0000
Files and hashes: 1: 315EC08E540BCBC870FEB38832274E048E2E1F80.crl (hash: IhceenkFOSRgApX9CmTQlfAmBi6Fy6wJnWYObLEBf4A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl
rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2c:f3:cc:be:a2:7e:13:3c:ce:b8:96:12:d1:88:e8:44:ad:f7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315EC08E540BCBC870FEB38832274E048E2E1F80
Validity
Not Before: Sep 24 03:35:01 2026 GMT
Not After : Sep 25 05:08:01 2026 GMT
Subject: CN=8A532965192891B45DE7A014AFC5780B210C9A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:13:c0:96:e9:3f:8a:74:4e:1c:c8:4d:79:
3e:18:f6:6b:24:f0:ba:18:43:bd:f8:ea:af:4e:2e:
fb:81:37:b4:4f:15:92:a6:9b:10:40:5a:d7:b3:3b:
50:76:31:e4:4b:91:fb:27:51:62:5c:1a:e6:9d:5a:
e8:df:83:99:a1:a8:76:c2:e9:e5:46:bd:16:80:69:
bb:10:cd:f1:ed:fc:b8:b0:40:71:26:d1:0c:8b:61:
04:a2:ec:8d:2b:eb:04:01:20:cc:30:aa:8b:e8:f9:
9f:76:88:60:b1:ce:8c:b7:2c:49:46:7f:f6:1b:3e:
29:05:91:29:4b:72:15:7a:38:1d:65:e0:38:e5:2d:
a3:89:6f:79:16:0c:4f:7e:41:ff:e8:a5:45:20:0b:
2f:a3:44:40:1c:8a:d2:60:b3:65:83:a9:fe:06:8e:
0a:22:19:65:af:7c:d3:d7:99:97:fc:a4:01:95:ba:
c8:56:bd:bb:5a:9d:89:42:85:ae:a9:df:ea:9f:06:
34:cf:d4:1a:23:ff:9e:43:92:bc:77:67:b5:38:bd:
98:06:36:29:1d:0f:f1:8e:b5:c4:e3:ef:4b:81:c4:
a6:5f:22:26:dd:3c:a2:a1:fb:9a:5d:e4:7b:fd:7b:
33:8e:a8:09:90:cb:bc:0f:da:4d:52:a9:4a:7a:46:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:29:65:19:28:91:B4:5D:E7:A0:14:AF:C5:78:0B:21:0C:9A:7C
X509v3 Authority Key Identifier:
keyid:31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c7:c6:3a:85:86:37:11:ed:0e:d7:b0:61:7d:ce:7a:8e:33:
f0:ea:ab:1f:3c:6f:71:66:6b:c0:c8:16:c1:b1:bf:0f:e7:d6:
66:8b:35:63:5f:00:aa:4d:03:93:49:5f:6a:cb:ad:e1:64:91:
e3:82:ba:78:f8:e0:0d:c7:4a:77:d2:da:c4:48:00:9e:0d:26:
28:06:d3:5e:b2:3a:03:7a:60:f7:4f:a0:83:58:71:94:62:24:
10:11:1c:33:3d:be:67:bb:c6:46:34:1d:5f:5a:ea:74:a0:04:
e5:2d:b0:05:b8:3b:8d:5e:2f:9d:d8:51:f6:21:47:ce:dd:c8:
d4:4a:d2:99:59:13:73:07:9f:2e:34:d9:69:6e:c6:d1:68:88:
3b:9e:56:5f:3d:ea:e2:94:21:d3:37:c3:b0:96:fe:a9:f5:d7:
9a:5c:36:4f:fb:c5:33:d6:99:95:3d:6d:26:f9:84:63:b8:e6:
33:c9:ed:55:5a:37:c6:da:b8:a9:74:2c:cb:4f:20:13:12:67:
ec:29:a4:48:64:14:75:a3:e8:20:18:16:fe:c5:31:de:ea:e2:
c4:a0:6e:44:2e:83:6a:cd:49:a6:0d:e5:c5:8b:ab:97:de:04:
1d:3a:29:77:04:36:29:d0:f4:8d:6c:61:58:d2:76:62:f0:28:
49:c9:72:f2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUcyzzzL6ifhM8zriWEtGI6ESt994wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4
RTJFMUY4MDAeFw0yNjA5MjQwMzM1MDFaFw0yNjA5MjUwNTA4MDFaMDMxMTAvBgNV
BAMTKDhBNTMyOTY1MTkyODkxQjQ1REU3QTAxNEFGQzU3ODBCMjEwQzlBN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeBPAluk/inROHMhNeT4Y9msk
8LoYQ7346q9OLvuBN7RPFZKmmxBAWtezO1B2MeRLkfsnUWJcGuadWujfg5mhqHbC
6eVGvRaAabsQzfHt/LiwQHEm0QyLYQSi7I0r6wQBIMwwqovo+Z92iGCxzoy3LElG
f/YbPikFkSlLchV6OB1l4DjlLaOJb3kWDE9+Qf/opUUgCy+jREAcitJgs2WDqf4G
jgoiGWWvfNPXmZf8pAGVushWvbtanYlCha6p3+qfBjTP1Boj/55Dkrx3Z7U4vZgG
NikdD/GOtcTj70uBxKZfIibdPKKh+5pd5Hv9ezOOqAmQy7wP2k1SqUp6Rt+VAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUilMpZRkokbRd56AUr8V4CyEMmnwwHwYDVR0j
BBgwFoAUMV7AjlQLy8hw/rOIMidOBI4uH4AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1
N2JiLzIvMzE1RUMwOEU1NDBCQ0JDODcwRkVCMzg4MzIyNzRFMDQ4RTJFMUY4MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4
NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8zMTVFQzA4RTU0MEJDQkM4NzBGRUIzODgz
MjI3NEUwNDhFMkUxRjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8yLzMxNUVDMDhF
NTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIx8Y6
hYY3Ee0O17Bhfc56jjPw6qsfPG9xZmvAyBbBsb8P59ZmizVjXwCqTQOTSV9qy63h
ZJHjgrp4+OANx0p30trESACeDSYoBtNesjoDemD3T6CDWHGUYiQQERwzPb5nu8ZG
NB1fWup0oATlLbAFuDuNXi+d2FH2IUfO3cjUStKZWRNzB58uNNlpbsbRaIg7nlZf
PerilCHTN8Owlv6p9deaXDZP+8Uz1pmVPW0m+YRjuOYzye1VWjfG2ripdCzLTyAT
EmfsKaRIZBR1o+ggGBb+xTHe6uLEoG5ELoNqzUmmDeXFi6uX3gQdOil3BDYp0PSN
bGFY0nZi8ChJyXLy
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:37 2026 by rpki-client