
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: jMP26jCZDerYraMlUxGciLw7/CjncN2PX2OLohPEs+c=
Subject key identifier: 3D:66:97:25:26:E0:A6:BA:C2:34:DE:19:C0:15:84:45:F9:E5:C9:2F
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 6D71E9B21DA74CCD71F8789CC34B61C3FFDE8503
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 030B
Signing time: Tue 22 Sep 2026 05:47:48 +0000
Manifest this update: Tue 22 Sep 2026 05:42:48 +0000
Manifest next update: Wed 23 Sep 2026 07:03:48 +0000
Files and hashes: 1: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: /xKGAh2jTpRH+u0cCZ/u0OiHlxVcwD9cbim22Uh6IbY=)
2: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=)
3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:71:e9:b2:1d:a7:4c:cd:71:f8:78:9c:c3:4b:61:c3:ff:de:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Sep 22 05:42:48 2026 GMT
Not After : Sep 23 07:03:48 2026 GMT
Subject: CN=3D66972526E0A6BAC234DE19C0158445F9E5C92F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:f5:51:50:36:81:60:36:de:bc:34:66:dd:
bf:41:a6:e0:9e:4b:24:3a:7c:4b:cc:19:67:bc:fb:
ac:6e:a7:a8:fa:f6:a7:7b:ed:b6:59:38:fe:00:65:
f1:39:56:41:3b:3b:75:51:d0:86:3f:e4:aa:97:a6:
ef:f3:02:5b:6b:3c:b6:32:df:64:da:9b:bb:f2:14:
2e:ec:9f:f9:56:92:6f:67:6e:3a:fd:79:be:df:a2:
ea:db:36:89:26:9a:1e:3d:eb:09:f5:58:d5:ea:87:
99:25:3b:c5:25:c5:e4:1e:80:45:d9:ad:1b:e9:c3:
dd:79:da:d0:a0:00:d0:6d:93:2f:71:7b:49:3b:98:
e9:70:45:27:6e:b6:8e:25:ac:42:53:e6:26:42:4e:
ca:ce:35:95:cd:62:ec:19:90:ee:24:8f:50:3c:04:
f1:a1:0b:32:78:09:cf:b3:73:3b:d3:72:96:b0:a0:
b8:f9:71:b4:6b:7c:95:93:bb:6d:08:ea:67:b7:28:
7c:70:84:e2:69:09:5b:78:5f:2d:4b:9e:d4:da:99:
35:d4:ae:bf:e9:57:0a:d1:74:1e:01:ec:43:2e:ce:
9c:d1:09:f6:c4:e3:3b:11:60:cf:a8:44:df:24:5d:
44:04:5d:01:62:7f:ba:b5:4c:2c:6d:17:c4:60:19:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:97:25:26:E0:A6:BA:C2:34:DE:19:C0:15:84:45:F9:E5:C9:2F
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e6:b9:bc:ce:d1:26:b5:16:f2:45:4f:46:80:aa:7a:45:db:
38:d0:fe:a3:4b:53:90:66:a1:d4:3e:fc:85:e2:4d:20:e1:af:
37:10:29:9e:a1:41:b6:df:25:ab:ed:38:30:06:07:18:b7:a3:
3f:05:b7:22:7c:85:85:19:47:b4:0e:4f:34:40:36:26:66:1b:
3e:45:b1:d5:7f:cc:8f:ce:ca:85:d6:05:eb:6d:b4:1c:07:94:
82:2d:b7:78:41:a3:f3:aa:6a:a7:89:b5:9f:ca:86:6d:16:d0:
fe:90:9f:38:f3:29:9b:8c:aa:65:6e:b5:c9:00:9d:1c:b2:c9:
3c:44:db:e5:36:c5:72:21:6e:52:dd:c6:9e:c9:81:c9:aa:52:
7a:39:0b:1e:54:b9:0b:1f:07:88:c8:b4:e4:37:2b:c1:94:d5:
b6:69:38:fa:8f:5a:ef:85:7c:17:56:92:88:68:eb:b3:9b:28:
83:28:0c:e1:64:f2:2b:78:1b:2f:7e:7c:d5:c4:8f:d8:45:ff:
23:7c:15:e5:9c:b9:78:9c:cf:3b:4a:2c:8b:a3:25:c0:49:8a:
f1:86:8a:df:42:e0:af:cf:94:8d:6c:5e:6b:2a:21:05:7c:82:
65:7d:c7:0c:52:dd:bf:0e:93:69:42:14:33:6e:4c:7d:cd:30:
a3:b8:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:00:25 2026 by rpki-client