
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier: CrhIFZWLKhpBuGrVAL27n0Y69Mbu94gty3F961Mxm9w=
Subject key identifier: 57:C2:38:6E:AB:7D:AF:94:44:36:9C:39:75:19:58:A7:0D:DE:F3:57
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 2D5ED79A8F67E30FBC3A9E6578E919AC4D3B79F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number: 02CD
Signing time: Fri 25 Sep 2026 08:45:34 +0000
Manifest this update: Fri 25 Sep 2026 08:40:34 +0000
Manifest next update: Sat 26 Sep 2026 10:56:34 +0000
Files and hashes: 1: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: 7cx3PmNL2bx7p3TSn+B5wruk2DH5oi/qrUGQZZobhk0=)
2: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: h9UpEYcBJQPvnmmvG2hq4aqmuYuGKBso5cycO357wTk=)
3: 3138352e3132332e3135372e302f32342d3234203d3e2030.roa (hash: o42YpQZUjoMNkotGQiZKBMYweuIaG2G8/ed/FG137WI=)
4: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: a1awRu5W+j/OpVvgzZ2y3kpbavrV8XlF/TCtgRFx9ok=)
5: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: V4JNlPHt9GYe6uHPs4b02Df/splFF1TrehGP4K2WsXQ=)
6: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: qOwOklOJIQDQ3iXtKHsvIrT4nC9DB9yL2jjN1btBvD8=)
7: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: LQqWRc5RiRnrFMSHCeqJMpc6vcXWST3+o1UDPgKt7+k=)
8: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: etX7ciNZNs5174vWdmDtkQTBFeC2wxz0cAkyidyNAqI=)
9: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Dq65MGgP/jvbx/fRolu32u44f/9NuGsxFlxiMiQcK+Q=)
10: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
11: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: 1zceVbNoNbGigb739DKGH12Lz3EUL5EUuGLD5sTpqIs=)
12: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: StvUkxWAE+cFieU3uToD4GXXDDAlKXKMH9/0h+2uU3s=)
13: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
14: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: KKez0Khb6IZPJMlNfqEbtFW6uvUHl2oV9Icm6KoeU2I=)
15: 39312e3233312e3135362e302f32342d3234203d3e203230363438.roa (hash: wgnwOREk/SS3AgEpm0DrSplNXucfBzpB5qxDojvDuuo=)
16: 39312e3233322e39392e302f32342d3234203d3e20313734.roa (hash: vw6CF6gn9sbz+AB9WKlGqawV53NNSKPBFf5sty8TfWc=)
17: 38392e3135302e34392e302f32342d3234203d3e20323135313134.roa (hash: 8+3QXBkWfKHqJrin574kCECO066l0OpHPCh7UyKJaQw=)
18: 3138352e3136322e3137362e302f32342d3234203d3e2030.roa (hash: 1xpHVE+hvybDZ1Qd86cVFMv8ZQw1DXK+2NZjCVwq/Pk=)
19: 39312e3233322e3130332e302f32342d3234203d3e2030.roa (hash: hp0BD10ScYnMtcHuhlTB0I41ZHOp3SxXjpbuadrcoQM=)
20: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
21: 3139332e31372e39352e302f32342d3234203d3e203537303433.roa (hash: ZlGZ8zDu+Ph5bj7QSByoEcMl2ulTvvWRFvbekfqhnas=)
22: 3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa (hash: glvI8KA5Mlz1qugjW7p3hT+2BSoQqvSz/4XgBMswo28=)
23: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: oKlOYt/ivogY03DODAeqT+usA/kmhETdr3gop9LZK2c=)
24: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: /keadxHEKLIlJdZn+7/QJ582hR4EPNEsV/ta7yXGjKc=)
25: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: xjsWJi7kPOLzt21/EkxCC7+P88/lr/dhcswPbkcq3sY=)
26: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5e:d7:9a:8f:67:e3:0f:bc:3a:9e:65:78:e9:19:ac:4d:3b:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 25 08:40:34 2026 GMT
Not After : Sep 26 10:56:34 2026 GMT
Subject: CN=57C2386EAB7DAF9444369C39751958A70DDEF357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:8f:b3:e1:0e:5c:58:00:69:bf:41:8b:68:
c3:71:43:42:66:8f:45:47:fb:c8:82:be:a5:65:5d:
b0:d5:07:43:24:7f:13:49:a1:40:2a:85:ec:96:0f:
36:c0:00:0b:7b:11:ec:3c:18:94:94:fa:ff:5e:53:
df:ab:c2:2f:25:ac:9f:95:e8:8e:da:53:bb:7b:e9:
0b:09:67:be:df:6f:f0:81:e9:91:f6:6d:43:47:28:
5b:0d:cc:d0:33:00:ea:44:7b:70:e7:f2:54:94:cd:
1c:03:be:a2:a2:9b:42:62:6b:f8:24:85:92:9b:41:
4d:41:c8:16:43:d4:86:6f:ca:46:f4:e7:60:1f:bf:
bf:76:de:a1:5a:11:a9:3e:79:2e:10:6f:2c:63:55:
56:b2:a6:60:62:0d:18:c2:ca:1f:83:6c:d1:83:ae:
a9:81:81:ba:b4:b4:32:83:c3:9f:f3:1b:06:f6:df:
45:4c:23:b3:aa:ab:ed:6d:2d:3e:c2:33:95:cd:b6:
5f:45:90:88:c8:ea:50:10:bf:63:99:40:85:6b:77:
62:66:60:fc:24:6a:03:10:e9:b7:2e:9c:c5:dc:4c:
f4:fa:5f:30:7f:00:47:15:99:c2:24:db:9d:25:9d:
30:d8:28:c9:79:58:c6:47:e7:37:51:e8:54:0d:aa:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:38:6E:AB:7D:AF:94:44:36:9C:39:75:19:58:A7:0D:DE:F3:57
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:5f:cd:ba:5b:96:fb:11:be:04:0e:ef:ed:84:a3:79:b4:
fe:c6:17:5d:32:df:d2:05:11:0b:a6:ec:8f:78:dc:ce:78:87:
f1:0a:b8:7f:78:0e:0e:66:d9:d3:ad:24:b1:a3:b0:60:56:cb:
f9:ec:ad:d1:14:53:ba:8b:c6:5e:b2:ca:8a:b3:77:5c:f8:4f:
83:b1:6b:40:3d:1c:21:3b:2f:cd:88:57:f3:03:a9:ea:38:38:
e0:6b:e6:38:7b:86:a6:f2:65:60:4c:80:1a:85:89:c0:7f:d7:
27:df:14:0a:63:39:d4:27:04:a6:77:0f:89:fc:d5:a4:6c:23:
00:f2:86:fa:1f:2e:f1:f2:bc:c3:36:53:77:73:df:c4:d1:5b:
35:da:70:ee:71:bc:3a:10:a4:47:05:ef:77:58:0d:42:74:1a:
01:16:50:15:09:29:b7:04:af:02:a7:ba:86:db:06:5b:23:74:
bf:11:19:9d:9b:7a:15:ab:b4:cb:1f:45:ec:87:c3:09:5d:eb:
c3:6d:95:87:44:c5:8b:68:ea:93:73:03:28:86:7c:c6:67:26:
dc:a9:d2:4a:03:74:4b:c1:15:39:40:5f:07:d3:40:84:88:f1:
a9:d7:40:13:44:f5:01:96:59:af:59:91:8a:c2:60:88:e8:ec:
a0:fe:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:45 2026 by rpki-client