
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: R03El2C5p+FpbukYEseoYRx2ytSIDCRs0d9jIVYGCrY=
Subject key identifier: D2:A2:70:95:AC:8A:C7:FF:C9:93:FD:78:E1:18:4E:6C:D6:80:92:C4
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 283BF84C0C74720F52A4A2F47A91271D2323D48D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0188
Signing time: Sun 19 Apr 2026 01:39:39 +0000
Manifest this update: Sun 19 Apr 2026 01:34:39 +0000
Manifest next update: Mon 20 Apr 2026 03:56:39 +0000
Files and hashes: 1: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
2: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
3: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: xpagRA2Vk+vfySiPpdYKmTVVBSsKrjfyKereYWdBk6c=)
4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
6: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3b:f8:4c:0c:74:72:0f:52:a4:a2:f4:7a:91:27:1d:23:23:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Apr 19 01:34:39 2026 GMT
Not After : Apr 20 03:56:39 2026 GMT
Subject: CN=D2A27095AC8AC7FFC993FD78E1184E6CD68092C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:ec:fd:85:03:91:f0:98:3a:2c:b8:79:d8:
8a:95:b0:0f:ab:7d:0d:98:61:5d:4e:a3:d3:b4:a0:
92:60:1b:ec:01:07:e2:a2:2b:c5:1d:5d:d5:b6:f8:
fd:0e:ca:70:fb:75:3d:d7:14:0f:3b:a1:6b:43:78:
74:b5:3f:23:bd:e5:5e:fb:8f:ae:6c:4a:54:50:25:
e9:8f:c8:1a:30:3a:87:88:16:eb:e6:da:95:6a:b1:
33:d3:e0:60:68:d7:2e:ec:6f:a1:6a:fd:19:15:60:
66:60:54:2f:f7:58:74:55:00:1e:5f:36:c8:e6:0f:
54:de:44:04:53:41:c5:4f:92:bb:bd:92:a6:9a:3e:
b4:ea:48:3c:3b:18:e0:fd:f7:72:ec:c3:33:3c:06:
54:a3:ba:b0:27:74:e0:93:77:e9:8a:5f:23:51:a5:
47:c2:b3:da:9d:ac:56:76:37:09:64:2c:f5:46:11:
1e:e9:35:86:4a:9e:0a:f9:ee:4d:db:b2:e9:19:e5:
8e:2e:a4:27:89:6c:04:56:21:da:f7:2c:55:c9:9c:
0f:a4:a1:f3:7c:68:34:05:48:55:67:0e:0b:e9:e5:
78:95:e0:ba:86:cd:d1:fc:b2:74:ec:f7:dd:64:1d:
1f:a2:c1:6e:69:3e:30:af:f4:ee:1b:d0:e7:33:a4:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:70:95:AC:8A:C7:FF:C9:93:FD:78:E1:18:4E:6C:D6:80:92:C4
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:61:e2:10:a8:24:22:69:c4:1d:31:12:c4:90:ba:10:ab:
5d:21:17:07:01:f5:71:5b:ce:f3:66:1f:e7:0e:bc:af:4e:7c:
9d:16:1f:47:0c:36:62:1d:4b:45:47:53:4e:d1:f7:f3:f1:ed:
2b:76:a1:06:16:41:00:11:80:9e:fd:83:70:e5:d2:03:9a:a6:
82:f7:3c:51:cb:69:c2:fe:0a:b1:75:34:0e:0d:52:5c:f6:3b:
28:b5:bc:de:a7:61:4e:bc:b6:99:5f:95:44:4b:d2:35:3e:7e:
65:40:3a:13:4d:4f:71:24:0b:95:0d:c8:8d:85:9d:39:d2:01:
aa:f8:6a:8c:aa:ec:93:fc:fa:94:00:98:ca:f8:7d:dd:96:11:
a4:86:bd:35:ab:73:8f:e8:91:c9:af:6b:cb:30:3f:36:91:28:
e4:34:c1:38:a5:0f:6b:d6:63:76:c8:ca:30:38:87:44:6d:25:
55:b7:62:76:e2:94:21:b5:76:7f:20:a9:37:61:8f:26:9a:e5:
50:4a:61:36:cb:e9:8e:c0:62:2f:6b:da:42:19:9e:b0:88:67:
50:70:e8:2c:24:06:bc:38:07:2f:bd:20:24:44:47:a9:2f:0e:
5a:64:41:d5:f5:4f:78:6f:e0:97:4b:16:b8:50:a3:28:5c:c8:
6f:68:9f:81
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUKDv4TAx0cg9SpKL0epEnHSMj1I0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC
RkQ2OEQ2NTAeFw0yNjA0MTkwMTM0MzlaFw0yNjA0MjAwMzU2MzlaMDMxMTAvBgNV
BAMTKEQyQTI3MDk1QUM4QUM3RkZDOTkzRkQ3OEUxMTg0RTZDRDY4MDkyQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyez9hQOR8Jg6LLh52IqVsA+r
fQ2YYV1Oo9O0oJJgG+wBB+KiK8UdXdW2+P0OynD7dT3XFA87oWtDeHS1PyO95V77
j65sSlRQJemPyBowOoeIFuvm2pVqsTPT4GBo1y7sb6Fq/RkVYGZgVC/3WHRVAB5f
NsjmD1TeRARTQcVPkru9kqaaPrTqSDw7GOD993LswzM8BlSjurAndOCTd+mKXyNR
pUfCs9qdrFZ2NwlkLPVGER7pNYZKngr57k3bsukZ5Y4upCeJbARWIdr3LFXJnA+k
ofN8aDQFSFVnDgvp5XiV4LqGzdH8snTs991kHR+iwW5pPjCv9O4b0OczpF35AgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQU0qJwlayKx//Jk/144RhObNaAksQwHwYDVR0j
BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2
OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx
OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldFh4hCoJCJpxB0xEsSQ
uhCrXSEXBwH1cVvO82Yf5w68r058nRYfRww2Yh1LRUdTTtH38/HtK3ahBhZBABGA
nv2DcOXSA5qmgvc8Uctpwv4KsXU0Dg1SXPY7KLW83qdhTry2mV+VREvSNT5+ZUA6
E01PcSQLlQ3IjYWdOdIBqvhqjKrsk/z6lACYyvh93ZYRpIa9Natzj+iRya9ryzA/
NpEo5DTBOKUPa9ZjdsjKMDiHRG0lVbdiduKUIbV2fyCpN2GPJprlUEphNsvpjsBi
L2vaQhmesIhnUHDoLCQGvDgHL70gJERHqS8OWmRB1fVPeG/gl0sWuFCjKFzIb2if
gQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:13 2026 by rpki-client