
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier: QSn13XwPeS0q2C5SNXjk5aFiRf10hc2HowWpUeSFRNw=
Subject key identifier: C7:04:04:5C:87:71:43:4D:2E:BF:95:D3:A3:F7:44:C8:3B:E4:CB:71
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial: 2A365911A69B9931C8DCC06A61DA0F4BEC3EA76A
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number: 63
Signing time: Tue 12 May 2026 11:43:32 +0000
Manifest this update: Tue 12 May 2026 11:38:32 +0000
Manifest next update: Wed 13 May 2026 14:30:32 +0000
Files and hashes: 1: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
2: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
3: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: uQY4pyIKFVe2jvg8xThuOcFw1ODfGOs7ENkBACWzeqk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:36:59:11:a6:9b:99:31:c8:dc:c0:6a:61:da:0f:4b:ec:3e:a7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Validity
Not Before: May 12 11:38:32 2026 GMT
Not After : May 13 14:30:32 2026 GMT
Subject: CN=C704045C8771434D2EBF95D3A3F744C83BE4CB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:95:45:0f:b9:ad:54:57:fc:60:1e:0b:c0:
6b:ee:b8:de:6e:5b:cd:60:e9:d5:8a:c3:96:3a:a3:
e0:dd:a8:70:45:65:00:7b:93:b5:c7:1e:fc:13:85:
69:3c:03:04:ce:4b:95:d7:b2:16:0c:55:51:85:1f:
82:31:85:2b:2d:ce:d6:d0:2f:70:34:b1:12:8c:9f:
1b:7b:05:60:26:fc:6a:3b:d8:f5:d4:74:73:5a:28:
f3:40:3a:7e:29:07:2f:77:e3:4c:2f:c5:f9:93:88:
bd:43:fc:b2:59:2a:74:df:2b:b7:2e:51:40:41:56:
b3:eb:2d:09:2b:34:8f:4b:53:6b:d6:31:ea:c1:ba:
fe:44:16:0a:b3:59:14:9e:81:a9:91:65:dd:fb:bf:
ac:d1:7c:ad:46:73:73:0b:7f:75:d1:ec:9e:b8:3e:
41:9a:f8:83:6a:b3:f3:e0:ac:0c:87:36:68:6e:b2:
94:5e:1c:e0:ce:d5:e9:67:3a:29:49:49:22:3b:5d:
cb:dc:13:3d:e6:92:06:06:f0:4a:a4:0b:b6:1c:e1:
d9:18:13:d9:6b:16:17:16:20:5c:02:c9:7d:d8:72:
ad:8d:3a:8e:5b:5f:6f:33:9e:e0:88:ed:bc:f3:28:
fc:f6:18:d0:28:b3:b1:31:77:9e:71:ec:61:d1:7f:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:04:5C:87:71:43:4D:2E:BF:95:D3:A3:F7:44:C8:3B:E4:CB:71
X509v3 Authority Key Identifier:
keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:ef:ff:d5:26:3c:84:76:e7:2b:2f:59:c0:d6:3e:e6:37:
1f:67:dc:e9:20:70:da:dc:b3:76:16:78:bd:20:2e:67:e3:a4:
83:19:f9:d0:bb:a3:39:cf:18:ae:d9:17:da:91:c4:25:d4:81:
1c:b6:02:7a:db:87:60:4b:99:5d:ea:a9:4b:09:9f:29:a5:00:
06:ce:5d:9a:6e:57:07:90:65:35:f9:ad:b9:9c:05:7f:6c:4a:
61:c4:02:65:08:10:98:39:c0:53:43:44:9d:9c:2c:c9:32:0e:
4e:2c:13:ad:5c:93:ed:6c:72:bd:e3:96:22:82:ac:9c:11:a0:
24:fd:58:4b:64:fe:95:9d:d5:38:d5:a5:0e:64:38:9d:e4:d4:
a1:61:87:97:89:b0:e1:d0:c9:3c:cb:c3:b6:d0:08:7d:34:05:
53:3c:7d:00:02:21:ec:e1:e3:48:21:dc:af:c7:1e:3d:c3:35:
47:91:47:2a:e4:1d:81:e6:89:db:66:0d:ef:c9:8f:cb:da:9d:
44:80:38:f0:4e:49:96:94:dc:e8:69:e8:c8:33:a9:dd:0d:2a:
b5:df:0c:fc:dd:59:50:7a:98:e2:65:e5:2d:8d:c3:0a:eb:6f:
ec:ba:4c:34:97:b5:09:45:79:67:85:1d:be:20:71:58:2a:46:
84:f9:9d:57
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUKjZZEaabmTHI3MBqYdoPS+w+p2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3
NDAxRTY3NjAeFw0yNjA1MTIxMTM4MzJaFw0yNjA1MTMxNDMwMzJaMDMxMTAvBgNV
BAMTKEM3MDQwNDVDODc3MTQzNEQyRUJGOTVEM0EzRjc0NEM4M0JFNENCNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2q5VFD7mtVFf8YB4LwGvuuN5u
W81g6dWKw5Y6o+DdqHBFZQB7k7XHHvwThWk8AwTOS5XXshYMVVGFH4IxhSstztbQ
L3A0sRKMnxt7BWAm/Go72PXUdHNaKPNAOn4pBy9340wvxfmTiL1D/LJZKnTfK7cu
UUBBVrPrLQkrNI9LU2vWMerBuv5EFgqzWRSegamRZd37v6zRfK1Gc3MLf3XR7J64
PkGa+INqs/PgrAyHNmhuspReHODO1elnOilJSSI7XcvcEz3mkgYG8EqkC7Yc4dkY
E9lrFhcWIFwCyX3Ycq2NOo5bX28znuCI7bzzKPz2GNAos7Exd55x7GHRf4A7AgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUxwQEXIdxQ00uv5XTo/dEyDvky3EwHwYDVR0j
BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2
ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx
RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y
NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3
QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJDv/9UmPIR25ysvWcDW
PuY3H2fc6SBw2tyzdhZ4vSAuZ+Okgxn50LujOc8YrtkX2pHEJdSBHLYCetuHYEuZ
XeqpSwmfKaUABs5dmm5XB5BlNfmtuZwFf2xKYcQCZQgQmDnAU0NEnZwsyTIOTiwT
rVyT7WxyveOWIoKsnBGgJP1YS2T+lZ3VONWlDmQ4neTUoWGHl4mw4dDJPMvDttAI
fTQFUzx9AAIh7OHjSCHcr8cePcM1R5FHKuQdgeaJ22YN78mPy9qdRIA48E5JlpTc
6GnoyDOp3Q0qtd8M/N1ZUHqY4mXlLY3DCutv7LpMNJe1CUV5Z4UdviBxWCpGhPmd
Vw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:28:19 2026 by rpki-client