
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: EmgXSNJhYb4oDoSFRj1r/t46TsSPpZ7CruyEcaH4u+Y=
Subject key identifier: 55:6F:8A:5A:D7:3C:1A:37:41:DB:0A:D1:E4:77:96:72:DD:7C:37:6D
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 49C59B00155B5FED160756E254037F80282305C3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0214
Signing time: Wed 29 Jul 2026 00:11:45 +0000
Manifest this update: Wed 29 Jul 2026 00:06:45 +0000
Manifest next update: Thu 30 Jul 2026 03:06:45 +0000
Files and hashes: 1: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=)
2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs=)
3: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: KqmNMtzFP+wuX2G7prvcuQ7LIqCu0NpRnJZqa+JLNHs=)
4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=)
5: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
6: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c5:9b:00:15:5b:5f:ed:16:07:56:e2:54:03:7f:80:28:23:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Jul 29 00:06:45 2026 GMT
Not After : Jul 30 03:06:45 2026 GMT
Subject: CN=556F8A5AD73C1A3741DB0AD1E4779672DD7C376D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:2c:78:cb:89:a4:d9:4b:ba:32:8d:73:c0:
0f:6c:5f:e3:8a:4d:33:ed:22:d5:20:2f:bc:b6:16:
89:c3:6a:d7:28:7c:46:d5:c2:04:98:d8:18:dc:c6:
90:42:33:ac:65:7c:db:22:82:f3:15:2c:d7:8e:f9:
54:33:c0:be:02:64:c8:87:3c:c2:6c:7b:dc:14:a1:
10:2a:60:36:29:13:7e:cd:fb:f7:cb:c2:50:bd:d6:
73:0b:b0:fe:83:a1:3a:5d:fe:61:e5:36:1d:ef:ed:
c0:8d:b0:bd:4c:09:fe:18:ef:ab:e2:77:88:b7:9e:
3a:b5:63:52:c6:16:c3:e1:69:8c:3a:7c:9d:12:15:
79:7d:ad:b4:66:83:01:6a:b5:90:ad:aa:ea:00:aa:
e6:1f:62:89:41:8b:6b:75:a3:2f:90:83:88:33:44:
69:24:6e:a2:d6:50:81:a8:97:b0:e5:fb:cd:f2:d8:
03:b4:20:1d:ea:8d:0c:6e:f0:6a:b9:22:fb:7e:02:
44:9c:2d:b2:36:4b:33:87:03:1b:90:46:b7:ff:d1:
62:98:f8:d3:1f:77:df:ce:ee:24:b0:22:3b:7b:72:
d2:bf:bf:77:c0:67:05:e6:35:00:bb:1a:74:0d:90:
e6:20:07:cf:6f:e1:b2:7b:24:00:36:f9:56:33:fd:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6F:8A:5A:D7:3C:1A:37:41:DB:0A:D1:E4:77:96:72:DD:7C:37:6D
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:17:fd:5a:ec:7a:09:f4:79:ec:c6:bb:a2:7a:94:59:2a:
41:2a:c3:09:d5:fa:c0:88:71:4d:e2:d4:2e:93:b0:18:55:4d:
f5:d1:d4:7f:a4:a9:b3:3d:0b:b3:d9:aa:65:01:fe:24:2a:b8:
2b:c6:26:f5:93:11:e9:5c:e4:fd:4e:72:fd:a5:c8:68:7d:b5:
48:7c:4b:19:02:58:0b:92:dc:76:a3:7c:6a:c0:9c:71:c8:d3:
19:46:79:ed:1b:ee:b3:7c:a5:c8:11:1a:ec:ae:81:0a:c6:4e:
07:8c:7b:96:6e:65:ac:46:80:e4:06:41:4a:55:9d:c1:ec:85:
f0:3d:45:81:2a:7a:9c:86:1a:c7:6b:cb:3a:e2:9f:67:01:34:
d7:99:94:b6:4a:f9:23:52:29:20:ab:05:4c:d5:f7:88:6a:81:
63:a0:dd:98:4d:dc:d4:48:1a:90:4c:33:a9:f5:ef:c5:26:99:
28:ef:dc:86:f0:db:18:56:de:ab:67:b1:e8:9c:75:ef:a6:27:
8d:d9:31:44:92:09:b6:7a:39:35:02:08:43:58:18:7e:20:e7:
21:6b:40:44:35:24:51:3f:ef:2e:24:fb:09:bb:be:28:2d:99:
60:a1:a8:09:a5:44:1e:1c:75:81:b5:25:13:10:04:88:a6:20:
0c:36:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:29 2026 by rpki-client