
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: UIOw/4ZOy+GdF0hK7zbtI63U0c3jJsNfwrveeUFAlOs=
Subject key identifier: 59:4C:64:4E:97:B4:9C:DC:F4:8A:AB:E6:25:4D:CF:5B:F8:E4:E6:B2
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 48C0EC4613AD4819E34E0F9F0BE1EF135C243923
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0261
Signing time: Tue 22 Sep 2026 12:33:01 +0000
Manifest this update: Tue 22 Sep 2026 12:28:01 +0000
Manifest next update: Wed 23 Sep 2026 15:57:01 +0000
Files and hashes: 1: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: 7XJqt7y7KTC9q99srcZtQA8QrdWqQ8OsumtsPu69EPg=)
2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs=)
3: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=)
5: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=)
6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:ec:46:13:ad:48:19:e3:4e:0f:9f:0b:e1:ef:13:5c:24:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Sep 22 12:28:01 2026 GMT
Not After : Sep 23 15:57:01 2026 GMT
Subject: CN=594C644E97B49CDCF48AABE6254DCF5BF8E4E6B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:0c:f3:a8:01:1f:72:18:c8:d2:98:06:0e:
7a:94:4d:20:53:41:e9:39:9d:e8:03:1b:50:55:4c:
24:75:64:fe:0e:ae:9d:5a:d7:fc:b3:46:0b:98:ad:
5e:1c:90:6a:96:d5:8f:2a:aa:e7:19:4e:f6:99:d3:
6f:a2:45:9a:df:80:c7:f9:16:88:0c:ff:04:15:bd:
f5:70:2e:fe:e6:6f:0e:31:c0:8f:e8:53:c8:89:17:
5a:9e:10:03:3a:94:7a:01:47:6e:b7:0d:d1:f2:3f:
ed:2b:1c:1b:a5:df:7f:ec:33:e5:ed:dd:78:13:de:
1c:03:29:3a:28:5c:63:70:de:16:d8:8d:cf:ce:13:
aa:8b:dd:ff:51:79:bf:0f:e9:0d:78:75:a9:cb:98:
52:02:4a:fa:d9:8f:9c:c1:f6:62:ec:8b:e6:f1:cc:
71:19:be:0b:57:56:88:95:fe:50:78:1d:17:82:af:
62:e3:25:25:d7:d9:b2:17:1c:f0:70:d5:79:2d:d4:
da:45:20:11:30:99:53:db:75:3a:7c:31:43:8f:9e:
4b:39:de:1b:4b:fd:ec:a7:10:2f:8a:dc:e1:c9:46:
1c:66:67:a6:8b:35:c1:72:6c:15:4a:ed:78:fa:b0:
37:e1:e4:e2:75:d0:62:c0:d2:d2:b3:d3:94:5e:ce:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:64:4E:97:B4:9C:DC:F4:8A:AB:E6:25:4D:CF:5B:F8:E4:E6:B2
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:b3:25:6f:9b:15:68:fb:ac:70:22:13:e4:3b:c0:6a:d4:
f0:ee:5b:32:0a:49:08:7e:92:96:7a:51:20:5c:12:74:32:90:
ce:d1:25:c7:55:ca:02:54:96:21:9a:d1:e6:56:bb:3c:c3:5f:
48:b8:b7:5f:f8:2c:99:03:19:a1:49:50:64:2e:5a:9b:26:80:
93:e2:f6:31:b7:c1:28:5c:74:bc:c4:44:25:e0:00:fc:3e:24:
6c:8b:70:0f:f2:2f:7b:64:f8:95:04:b7:66:73:77:06:34:8e:
d2:89:98:25:e3:64:f8:78:c4:c4:01:17:cf:bb:8e:bd:32:23:
85:5a:5d:8f:67:ea:78:62:e6:c0:ed:cc:3f:20:8d:09:d0:e0:
85:38:0c:9b:48:49:a4:59:c1:2f:53:db:63:c0:7d:74:d9:d6:
63:b8:2c:09:0d:62:f8:4d:fc:75:0d:22:2d:62:a8:82:ea:da:
da:cb:01:d1:de:cb:f6:9a:23:58:69:7e:c6:d6:5b:40:55:a8:
db:64:ea:89:66:cc:3b:1f:c1:1e:c8:75:23:3c:6a:0f:45:a7:
21:2f:86:fa:14:b9:06:a8:f1:9e:99:a7:e4:00:79:3c:07:ae:
8a:6f:f7:7b:73:e0:52:ca:da:10:ae:e1:09:6c:8f:a1:e5:7b:
d0:3b:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:53 2026 by rpki-client