
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: 3TB0Yx/FamxJ31gVGKaDPYlW+MOPReaP+o/rZ7egyAE=
Subject key identifier: AE:E9:CC:D7:5B:4A:4F:26:0D:CD:E5:5E:B0:4D:A5:B4:66:AD:2C:F2
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 4C05370BC51F34F422F4EB8A83CEF3C0F4B5864C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 01F3
Signing time: Sun 01 Mar 2026 14:18:04 +0000
Manifest this update: Sun 01 Mar 2026 14:13:04 +0000
Manifest next update: Mon 02 Mar 2026 14:40:04 +0000
Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=)
2: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=)
3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: Ukr2zLPS7rYKrPf873CqpxppJj/tASpxw6lg4g+G47Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:05:37:0b:c5:1f:34:f4:22:f4:eb:8a:83:ce:f3:c0:f4:b5:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Mar 1 14:13:04 2026 GMT
Not After : Mar 2 14:40:04 2026 GMT
Subject: CN=AEE9CCD75B4A4F260DCDE55EB04DA5B466AD2CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:91:95:1d:34:90:b6:1d:a9:e8:cf:d5:68:
c5:8b:03:4d:aa:51:fd:c1:f5:85:e4:22:3a:77:a1:
19:33:59:73:02:3b:e9:a8:62:10:e0:58:14:19:68:
f6:fa:0b:68:da:2b:b4:32:31:99:4f:76:3a:ae:28:
72:f8:15:72:02:c7:2c:00:a3:63:ed:d1:c6:03:e7:
51:17:2a:75:d7:eb:e3:d5:c1:89:05:46:01:64:6c:
cf:ce:13:20:4b:ef:de:54:02:12:59:cc:f0:83:c5:
44:9f:0c:83:92:34:7b:e8:26:c3:97:44:04:53:2a:
4a:2c:93:56:25:3c:e7:80:de:d6:f8:b6:fe:de:38:
de:73:e6:a7:b0:63:fd:6f:5e:3b:dc:42:5c:47:e5:
a0:22:dc:d8:8f:f5:f1:37:45:16:03:a4:8d:93:8a:
28:47:44:ea:b0:2f:93:54:26:85:47:78:e5:c1:b3:
93:d3:6e:c2:98:90:e2:a8:9e:bf:d1:ee:eb:b9:2f:
e7:77:5d:cb:53:7f:18:b8:83:e0:d0:08:7c:73:f7:
94:c8:24:82:3f:4f:42:b5:c9:c4:e9:c0:43:0e:cd:
38:33:4e:c1:9b:db:35:b5:9b:2d:bf:4b:09:b9:89:
b2:4c:bc:61:d2:df:3a:f1:7c:0d:24:83:e1:36:a0:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:CC:D7:5B:4A:4F:26:0D:CD:E5:5E:B0:4D:A5:B4:66:AD:2C:F2
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4c:27:5b:de:29:18:96:4e:e8:94:2f:8d:3e:79:13:6b:77:
dd:81:bd:fa:d1:23:8f:0b:e5:b5:02:dd:f9:a1:38:ad:40:0f:
cf:b5:4d:5f:7c:65:c0:68:2d:f3:b3:f7:ae:f4:3e:76:91:07:
c7:78:ee:0a:b6:67:33:bf:04:05:b5:44:f6:30:91:51:9c:f2:
2b:81:51:9a:09:ae:5d:be:0d:df:b4:92:66:f2:08:12:00:0e:
d9:91:2e:9f:38:7d:e0:35:a0:0b:a9:ce:6c:80:67:4a:69:7a:
c7:7c:59:2a:1f:d6:42:2f:86:56:8e:d2:54:48:bd:f1:92:85:
92:11:1a:2d:b7:a1:eb:35:42:90:51:af:b6:ab:aa:88:41:e3:
61:32:3f:38:17:9e:c2:cf:43:25:51:b0:7e:de:db:7e:40:e2:
20:e3:fa:14:69:d7:03:2f:7e:32:f5:9f:fd:96:ff:05:a9:52:
16:12:c8:b3:5e:d1:03:33:a3:ba:53:9c:dc:9e:0a:43:cd:d2:
61:18:48:2a:9e:c8:b7:9f:63:31:34:57:13:59:24:22:37:f1:
a3:0d:b2:7f:78:0f:63:d4:54:40:e8:88:eb:dd:65:85:ff:0c:
8a:dc:7b:c7:e3:66:9a:6e:cc:75:4f:c2:51:e9:e9:9d:72:a0:
09:a0:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:42 2026 by rpki-client