
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier: FczlludlASvY3jyN5DhCHnQEYwJMznyZBYg8eLLZodk=
Subject key identifier: 49:17:42:03:36:51:3C:E1:A9:41:96:94:90:84:FA:E1:03:84:3E:4E
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial: 7DC9C494CFD9083F4FDF8996341A1C3D397C48D3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number: 0144
Signing time: Fri 12 Jun 2026 17:54:20 +0000
Manifest this update: Fri 12 Jun 2026 17:49:20 +0000
Manifest next update: Sat 13 Jun 2026 21:51:20 +0000
Files and hashes: 1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: +WbC2AS2vxVRo8nKL6M/2V4FLdORHN+t1Np9PaRwuEk=)
2: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=)
3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: VPCifaYotKDxeBBkkXW6HF/0neQ4fTWKc9o0aOWVmJ8=)
4: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: OI8GOe2+TkBj9rSGei3QzDvWunB1dmRCogAxQNNMVi8=)
5: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=)
6: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c9:c4:94:cf:d9:08:3f:4f:df:89:96:34:1a:1c:3d:39:7c:48:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Validity
Not Before: Jun 12 17:49:20 2026 GMT
Not After : Jun 13 21:51:20 2026 GMT
Subject: CN=4917420336513CE1A94196949084FAE103843E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:8a:0e:90:10:a3:74:fc:84:7d:cd:13:19:
f6:a6:15:6d:14:c1:69:07:01:cd:a5:66:a8:54:39:
7d:d7:9c:86:4d:83:8f:df:8f:58:6d:c2:26:17:57:
58:fc:ad:72:c2:d9:ae:68:f1:f3:cc:72:d4:7c:91:
ba:32:17:15:6f:8e:6e:14:93:61:0c:33:8c:26:3c:
47:06:c1:7d:dd:37:03:4e:10:9e:ec:6c:b4:6d:d2:
77:e1:ef:7b:65:83:87:b7:14:51:e3:f7:e0:50:54:
d6:d3:67:a9:1a:12:3e:7a:72:b9:7f:8b:99:9f:3c:
a6:2e:5e:d0:14:f1:65:22:24:57:79:64:ac:3f:26:
08:eb:93:4b:45:7a:3e:f1:2c:bc:a6:45:6b:98:6a:
9b:69:da:aa:eb:c2:8c:17:9d:59:9e:42:99:0e:1e:
9a:41:25:5a:0f:04:d3:97:af:cf:39:56:54:25:d1:
d8:a7:aa:43:76:8b:2c:6a:b6:bc:d8:1f:ad:89:e2:
4f:23:54:47:24:1c:07:02:4f:38:49:b0:8e:29:48:
31:85:1e:f7:f5:fc:62:c3:4c:b2:9b:4f:4f:be:2a:
76:df:25:eb:55:2a:76:2b:72:e5:ea:cf:27:d7:3c:
cf:b7:b7:53:48:53:18:e4:90:66:c0:31:61:44:55:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:17:42:03:36:51:3C:E1:A9:41:96:94:90:84:FA:E1:03:84:3E:4E
X509v3 Authority Key Identifier:
keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:62:cb:4d:c3:6e:65:ed:43:69:5d:65:4c:97:43:6a:2f:f8:
0b:74:25:14:f9:ac:12:ba:e9:9e:db:5c:1d:44:53:a5:01:03:
03:68:c3:59:d1:07:e1:80:8f:eb:67:52:cd:04:0d:41:77:2b:
cb:40:d6:30:55:15:3f:21:d8:e5:28:b1:bb:cf:82:05:32:8c:
13:0f:8b:f7:83:fd:1c:dd:21:92:9e:11:52:a8:bc:32:ad:9a:
56:e1:f7:0b:7a:52:5a:a7:b7:8c:83:e8:0b:15:d2:b7:84:94:
94:62:af:14:4d:37:5e:c4:f0:86:a0:ed:e7:6a:ec:d3:02:6b:
ab:2e:9b:f6:0a:00:07:3e:61:c6:96:38:99:98:40:d5:35:af:
13:aa:6d:6c:31:9c:dc:7c:66:42:ec:3c:b0:f1:93:e7:54:c7:
6e:9d:58:35:6c:e6:ec:6f:a8:68:e1:ad:87:10:85:8d:b6:82:
7c:d4:7a:42:3d:fc:10:15:01:ef:73:d8:a1:e6:6c:53:e0:18:
65:7b:4d:f3:dc:03:c4:de:40:7c:0a:98:6e:cd:cc:e1:fe:b1:
80:f6:82:84:c6:03:4c:e9:93:10:0a:b2:44:51:a5:86:73:79:
47:1e:b1:fc:57:fe:9f:63:f9:5d:2d:b2:f3:a6:be:16:9a:a2:
92:fc:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:11 2026 by rpki-client