
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier: une/fmC8R0b6PoGVUVW1kQQ5LO9H8jKc8cV3bVWfpdo=
Subject key identifier: 7E:AA:DB:AF:A1:3A:48:E9:03:48:A5:26:B1:EE:5E:B5:27:55:BA:74
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer: /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial: 51C7C646E7262C517D52F2F98588F695492F8F7D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number: B7
Signing time: Fri 17 Apr 2026 12:05:57 +0000
Manifest this update: Fri 17 Apr 2026 12:00:57 +0000
Manifest next update: Sat 18 Apr 2026 15:36:57 +0000
Files and hashes: 1: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
3: 326131343a373538313a393930303a3a2f34382d3438203d3e20323134333434.roa (hash: kGAxqipewjTBEOV3BSA8JRTiGthe14AWzEgdY5VhMKs=)
4: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
5: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
6: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
7: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
8: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
9: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
10: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
11: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
12: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: HltaDPgBDE9XILfm0HcIxTE2fz64531kbwQAD+ZNnPU=)
13: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c7:c6:46:e7:26:2c:51:7d:52:f2:f9:85:88:f6:95:49:2f:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Validity
Not Before: Apr 17 12:00:57 2026 GMT
Not After : Apr 18 15:36:57 2026 GMT
Subject: CN=7EAADBAFA13A48E90348A526B1EE5EB52755BA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:57:1a:8d:09:be:94:9d:3e:c0:ef:31:c7:
80:25:6c:fe:b1:71:c4:52:29:59:ff:a2:40:f0:06:
12:7e:c9:d2:ea:c2:7c:01:26:5a:66:f7:1e:5d:6c:
d3:49:c7:3a:47:88:c4:d1:42:29:e2:05:b7:1c:b1:
21:d0:1d:06:ef:38:31:1e:64:14:75:a2:e9:f0:9b:
9b:95:9c:7e:e6:f3:9c:de:b2:88:ba:8c:c8:3e:06:
49:89:52:a0:ed:75:5a:42:45:24:e1:81:b9:83:5e:
6d:79:ca:dd:24:8c:b6:87:dd:74:a7:70:07:b5:7e:
52:e8:5a:19:6b:ec:29:cf:f9:9e:6c:b7:84:ba:63:
c4:1a:e9:08:9d:f3:8e:33:dc:bb:37:b1:13:e0:67:
68:1d:50:90:94:dd:9e:4c:be:75:ea:e9:43:91:2d:
d6:58:4d:25:de:49:cd:e0:62:69:3e:f0:1d:95:e2:
9e:89:fb:22:e8:1e:f7:bb:e1:22:9a:f4:23:2b:9f:
f3:9a:61:66:4b:35:86:3c:41:e3:43:8a:ef:ba:75:
20:fd:6b:2d:6a:65:e8:b3:65:e5:59:20:7f:3e:c8:
01:bb:0c:30:1c:e6:52:e0:7e:e9:7d:58:08:8e:10:
80:f5:34:b2:bc:71:1f:4f:cf:ef:96:a1:25:91:ee:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:DB:AF:A1:3A:48:E9:03:48:A5:26:B1:EE:5E:B5:27:55:BA:74
X509v3 Authority Key Identifier:
keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b6:4c:7f:a9:bb:af:7c:d3:63:7b:c4:97:84:48:79:7f:d9:
f8:12:bb:89:80:01:a3:dc:2d:7b:1c:83:71:77:80:39:25:e1:
59:a7:db:cf:72:45:aa:4b:15:b3:6b:42:d2:aa:de:77:c2:38:
ed:3e:63:6b:53:b4:7f:0e:c5:25:2e:f8:85:17:4a:c3:07:d8:
ff:a8:cf:70:96:2e:38:2f:41:dd:fe:83:bb:01:34:c8:6d:1d:
6f:27:4a:0d:6a:6d:a0:78:c1:52:b3:31:aa:a8:64:2d:d7:49:
ae:8a:d7:05:00:de:fd:99:b4:af:70:12:61:24:41:5d:06:39:
79:65:b7:c9:10:40:7b:68:cc:f1:57:38:6e:6d:b7:c5:b4:82:
dc:b4:16:8b:5e:ed:12:4a:51:21:90:39:28:0c:8e:1a:db:90:
1b:74:1e:50:5e:80:9e:d6:3f:3a:d7:5d:ab:e3:d3:f7:bb:86:
50:c1:e1:a7:de:60:ab:5d:ca:e2:c1:17:b4:c5:18:01:94:ac:
d9:e4:a7:2b:d4:d9:44:87:ee:7e:e2:8f:e8:9b:d7:03:a8:28:
02:84:60:6a:f4:39:e1:23:20:9c:23:6e:0a:03:ce:fc:1c:71:
38:0c:33:84:17:f0:14:9a:c0:7b:86:c7:60:d5:a1:8f:6b:e0:
74:fc:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:34:58 2026 by rpki-client