
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
File: 6E57E27AC23C8932C53853BF557B28CD590488AC.mft (raw, json)
Hash identifier: 6SdzGE8bpEJMPwnzJmx/Su39+gTnTMkT/E32VQsxMz0=
Subject key identifier: E3:5E:37:B9:37:0A:D1:5D:91:52:F2:22:A3:E5:4F:F4:6F:44:9E:1D
Authority key identifier: 6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
Certificate issuer: /CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Certificate serial: 579CA67434233BC36B1D32D8822DC4BAF0A020E9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
Manifest number: 0228
Signing time: Mon 12 Oct 2026 20:39:37 +0000
Manifest this update: Mon 12 Oct 2026 20:34:37 +0000
Manifest next update: Tue 13 Oct 2026 22:23:37 +0000
Files and hashes: 1: 6E57E27AC23C8932C53853BF557B28CD590488AC.crl (hash: 1jDC0zHmHH6Za025/4MTeKRx56EMP4zNxy86GeoJYCg=)
2: 326131343a373538333a663330303a3a2f34302d3438203d3e20323035303038.roa (hash: uVoIN03AGEpRiwfW9ipOTJBOZfjNzfUt5bFPbgTp3oE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 17:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9c:a6:74:34:23:3b:c3:6b:1d:32:d8:82:2d:c4:ba:f0:a0:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E57E27AC23C8932C53853BF557B28CD590488AC
Validity
Not Before: Oct 12 20:34:37 2026 GMT
Not After : Oct 13 22:23:37 2026 GMT
Subject: CN=E35E37B9370AD15D9152F222A3E54FF46F449E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:25:8c:b6:a2:4f:5b:81:69:c7:0a:42:dc:
8b:0b:53:c0:b0:59:d6:6d:bd:ae:42:c7:be:48:1a:
66:88:bf:74:8b:d0:4b:fc:1a:6f:45:fd:06:ce:4f:
eb:b8:a6:79:44:ff:63:19:cf:57:18:8f:a2:7c:85:
be:db:e8:51:bb:33:8d:19:09:b1:35:41:79:ab:8a:
6a:6a:d7:23:e4:af:31:e4:f6:8f:b4:93:93:cb:88:
69:c9:45:c1:fb:2b:d8:c9:60:a2:14:0d:c8:77:37:
f7:19:e0:d8:4c:f5:64:8f:cc:94:43:f0:0d:c5:55:
a0:84:5a:22:4e:c4:c2:2c:da:01:b6:45:d6:f3:e4:
aa:5a:04:e8:9c:d1:ac:4f:1a:cc:ee:d6:ba:18:7c:
cd:b4:a2:5e:8b:e4:f5:85:59:f2:4b:99:a5:bf:60:
73:67:88:61:22:42:ff:f4:45:c8:e1:15:02:4b:68:
88:06:f1:2e:9b:8d:70:e3:11:eb:6a:76:30:fc:5e:
73:33:52:12:29:0d:33:60:29:f0:15:26:0f:6c:db:
ba:16:3a:fb:07:de:f7:5b:ce:b5:6c:9f:03:6b:ac:
96:a5:80:cb:2a:63:d2:4f:7e:e0:aa:2b:59:79:45:
36:69:b9:ed:75:55:2c:ca:60:9e:73:aa:42:5c:53:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:37:B9:37:0A:D1:5D:91:52:F2:22:A3:E5:4F:F4:6F:44:9E:1D
X509v3 Authority Key Identifier:
keyid:6E:57:E2:7A:C2:3C:89:32:C5:38:53:BF:55:7B:28:CD:59:04:88:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6E57E27AC23C8932C53853BF557B28CD590488AC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/1/6E57E27AC23C8932C53853BF557B28CD590488AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:90:3e:76:5c:68:72:df:c0:3a:74:a6:2a:3a:a4:53:90:
3c:7b:59:63:bd:3e:34:0c:29:f2:c2:d6:ec:e8:52:b6:b5:a2:
3e:fc:5c:fa:69:4b:22:af:27:20:f9:9b:dd:bc:a1:79:08:12:
0c:ac:c5:2c:3d:74:ef:f5:cc:4c:d2:6d:cf:f4:89:c3:d7:62:
51:ce:c8:da:05:33:e0:58:47:2e:58:19:04:7d:69:11:d3:b8:
2d:b4:c4:87:2d:cd:35:60:d6:6b:d5:9b:b9:7a:75:8e:c4:7d:
3f:1d:97:cd:7a:6f:bf:63:f5:d5:cf:ae:03:c9:f9:69:58:88:
15:bc:ea:ed:ee:59:ef:66:6a:d9:0b:85:67:7c:59:75:51:27:
07:93:12:c9:62:9e:1f:bf:c9:dd:be:d0:2d:61:1c:5a:ac:94:
3a:b5:5c:44:4c:3b:f5:e5:13:3a:a5:66:22:23:48:1e:a1:22:
2e:60:38:7e:23:15:87:08:0c:a5:2b:f8:13:86:2a:ae:e3:84:
06:4e:f4:dc:98:f4:bc:a0:2a:22:a3:30:af:2d:40:24:4b:03:
8e:4b:d3:37:82:9c:cb:94:85:8b:e2:bd:06:cf:c9:d6:06:54:
1f:57:b2:0d:03:25:e0:db:92:89:a0:dd:11:ca:43:31:b3:e9:
5d:ee:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:24:34 2026 by rpki-client