
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.mft (raw, json)
Hash identifier: Ow9fm5QMnGrus105PNTDONjjIcKLq9QycVFd9SWsHe4=
Subject key identifier: 75:A1:14:DE:16:05:7C:53:83:2B:FF:63:EB:93:F1:DA:76:6A:00:AE
Authority key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Certificate issuer: /CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Certificate serial: 0F684DD79EF2EBF9690B1F06B650D661E9627111
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
Manifest number: C4
Signing time: Thu 23 Jul 2026 23:07:40 +0000
Manifest this update: Thu 23 Jul 2026 23:02:40 +0000
Manifest next update: Sat 25 Jul 2026 01:39:40 +0000
Files and hashes: 1: 326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (hash: l3HYulpvOKCiOuLe10nJcYG8DkTaBY5HNMplHWMB7TA=)
2: 326130363a613030323a3a2f33322d3438203d3e20323135373630.roa (hash: B2caQKU5/hAAuwc57KOaYg2QivgfXC87ZBxhpnuBwec=)
3: 326130363a613030323a313233343a3a2f34382d3438203d3e20323034303835.roa (hash: /ueeiuIrHkj1UebpJT499/7uExjS/xhzsRdxFHL+OLs=)
4: 1DB41D8CB909418AA27BBDED06CFB5857401E676.crl (hash: D4EK78c7jiKia5Kq7iKxNwDxBp0+0ZMtP3cTNTsthPg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:68:4d:d7:9e:f2:eb:f9:69:0b:1f:06:b6:50:d6:61:e9:62:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Validity
Not Before: Jul 23 23:02:40 2026 GMT
Not After : Jul 25 01:39:40 2026 GMT
Subject: CN=75A114DE16057C53832BFF63EB93F1DA766A00AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:13:69:cd:79:57:ab:a3:c2:40:c8:4f:6a:
11:c9:54:aa:fe:6f:47:7e:97:d9:f9:48:10:cd:83:
3f:75:12:58:8a:be:97:40:76:de:58:7d:47:15:05:
27:d8:8a:93:55:58:18:28:5a:6c:54:3b:a0:8c:e5:
41:d7:da:a3:f6:d5:7e:e2:32:8a:b5:7c:7d:60:21:
53:05:73:42:fd:8a:eb:1e:dd:57:1b:b8:56:b8:1b:
f9:8a:fb:16:c6:5a:e4:b0:98:67:c5:4d:74:c0:51:
54:07:b5:da:0a:df:5a:5d:c0:2f:0c:cf:12:15:f7:
4a:c7:44:65:e7:5d:b2:8a:28:69:18:1c:4d:28:4b:
ce:f9:ec:20:07:38:a9:d8:71:ba:3c:0f:61:e9:4a:
4b:1f:27:5e:ce:dc:3c:6c:51:76:e5:5a:30:48:86:
cd:fb:9c:5c:cd:cb:3c:bf:7c:be:97:03:c7:3c:39:
72:2f:71:c1:b2:7f:3e:3c:eb:50:1b:0e:3e:66:40:
ee:a8:2a:87:29:a3:0a:f5:d1:bc:02:5d:09:f4:63:
fe:9d:54:f5:93:51:04:10:65:02:bb:80:6b:3f:ab:
73:e3:ca:cb:d8:78:89:da:e2:89:c4:78:38:1b:e6:
86:cf:c3:64:aa:97:48:1a:f5:b9:52:3f:2d:7a:3e:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:14:DE:16:05:7C:53:83:2B:FF:63:EB:93:F1:DA:76:6A:00:AE
X509v3 Authority Key Identifier:
keyid:1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c5:f0:af:bb:b8:72:2e:1f:ff:e7:ab:f1:7d:cc:2c:83:27:
f5:18:f0:0d:65:c3:ce:76:b6:80:9d:2f:8f:ee:dc:b7:92:63:
4b:91:97:6b:ee:39:ab:3f:dc:07:16:d7:2b:62:ef:93:1c:ed:
41:fc:eb:48:13:85:bd:af:da:24:86:b2:a0:93:94:0c:fd:00:
90:03:bd:b7:9a:86:8d:c4:1e:00:2f:ca:3f:0f:26:86:db:07:
c5:04:7d:d6:3b:59:2e:46:ae:b9:57:1c:c7:a6:83:8c:44:29:
c9:1d:26:3b:9a:b9:24:ab:eb:bf:10:56:34:61:16:7e:37:4d:
1e:92:c8:34:8e:fb:d7:68:13:0c:0e:64:fa:75:cc:56:5e:b7:
59:ab:c4:ea:04:4c:f7:6e:1c:27:6f:28:67:d9:80:ad:23:b0:
6a:c4:4b:d6:3e:63:16:9b:2a:b8:9c:ef:9c:ce:2b:ca:ac:3b:
4a:4f:40:7b:3e:71:59:ef:cf:7c:a2:31:05:21:4d:26:f0:1e:
a8:1c:dd:87:a9:6b:3d:63:38:76:ae:ef:0d:02:4b:31:16:e1:
1b:4e:f2:2a:18:e3:a3:9b:88:5c:95:0d:cd:02:ee:1d:a9:81:
c2:6a:a7:05:21:00:e6:fe:44:db:84:eb:76:69:9e:77:48:bc:
6c:f7:3f:21
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUD2hN157y6/lpCx8GtlDWYelicREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3
NDAxRTY3NjAeFw0yNjA3MjMyMzAyNDBaFw0yNjA3MjUwMTM5NDBaMDMxMTAvBgNV
BAMTKDc1QTExNERFMTYwNTdDNTM4MzJCRkY2M0VCOTNGMURBNzY2QTAwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SRNpzXlXq6PCQMhPahHJVKr+
b0d+l9n5SBDNgz91EliKvpdAdt5YfUcVBSfYipNVWBgoWmxUO6CM5UHX2qP21X7i
Moq1fH1gIVMFc0L9iuse3VcbuFa4G/mK+xbGWuSwmGfFTXTAUVQHtdoK31pdwC8M
zxIV90rHRGXnXbKKKGkYHE0oS8757CAHOKnYcbo8D2HpSksfJ17O3DxsUXblWjBI
hs37nFzNyzy/fL6XA8c8OXIvccGyfz4861AbDj5mQO6oKocpowr10bwCXQn0Y/6d
VPWTUQQQZQK7gGs/q3PjysvYeIna4onEeDgb5obPw2Sql0ga9blSPy16PsupAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUdaEU3hYFfFODK/9j65Px2nZqAK4wHwYDVR0j
BBgwFoAUHbQdjLkJQYqie73tBs+1hXQB5nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2
ZDAzLzMvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAxRTY3Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMURCNDFEOENCOTA5NDE4QUEyN0JCREVEMDZDRkI1ODU3NDAx
RTY3Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y
NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMy8xREI0MUQ4Q0I5MDk0MThBQTI3
QkJERUQwNkNGQjU4NTc0MDFFNjc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8Xwr7u4ci4f/+er8X3M
LIMn9RjwDWXDzna2gJ0vj+7ct5JjS5GXa+45qz/cBxbXK2LvkxztQfzrSBOFva/a
JIayoJOUDP0AkAO9t5qGjcQeAC/KPw8mhtsHxQR91jtZLkauuVccx6aDjEQpyR0m
O5q5JKvrvxBWNGEWfjdNHpLINI7712gTDA5k+nXMVl63WavE6gRM924cJ28oZ9mA
rSOwasRL1j5jFpsquJzvnM4ryqw7Sk9Aez5xWe/PfKIxBSFNJvAeqBzdh6lrPWM4
dq7vDQJLMRbhG07yKhjjo5uIXJUNzQLuHamBwmqnBSEA5v5E24Trdmmed0i8bPc/
IQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:41 2026 by rpki-client