
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier: zQzwOLZyT3I1aiuXiE87z9t3pvOgIkPhY4Q7GH4yTVA=
Subject key identifier: F1:A8:C8:AA:33:15:12:C3:1A:34:E9:0B:13:21:35:89:93:B4:AE:9D
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial: 5BAA8E16A5F339A02E94CB88A560E91D830CF13E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number: 0150
Signing time: Fri 17 Apr 2026 00:07:02 +0000
Manifest this update: Fri 17 Apr 2026 00:02:02 +0000
Manifest next update: Sat 18 Apr 2026 03:57:02 +0000
Files and hashes: 1: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: BMhPvzN76o/kliLzuHnypn6oUkPzyQGRxwJYnbszhVs=)
3: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
4: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: iXnMc+V769vdVg0NEzGcTcO7c12YMN36cAwaBoXuTwg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:aa:8e:16:a5:f3:39:a0:2e:94:cb:88:a5:60:e9:1d:83:0c:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Validity
Not Before: Apr 17 00:02:02 2026 GMT
Not After : Apr 18 03:57:02 2026 GMT
Subject: CN=F1A8C8AA331512C31A34E90B1321358993B4AE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:5d:48:1a:ab:7e:76:c2:60:60:fe:5d:72:
9b:23:52:73:7e:95:41:06:ea:54:2b:29:40:33:5c:
8d:55:30:b4:9d:32:91:ee:ae:40:20:92:3e:d5:35:
7c:ab:40:da:ec:33:00:f5:07:fd:f3:90:5e:8d:57:
c2:f8:aa:bc:13:39:59:08:f4:b8:98:d3:1a:f9:2e:
e3:75:c4:15:d7:5e:56:4b:39:b5:35:f0:ac:67:61:
d8:f5:37:b2:b6:b7:7c:bf:6b:1e:21:4b:a3:72:3a:
bf:4c:8f:d9:18:45:a6:02:7c:5b:55:9d:66:c8:22:
3b:7b:f2:a7:19:cd:c1:22:92:bd:3a:93:2b:12:e3:
ab:60:51:d3:98:29:9d:9c:d6:b5:8a:7d:95:dd:be:
4c:03:a8:de:8c:7d:44:1a:f9:9e:16:b8:d7:36:95:
a8:00:69:05:99:6a:48:a1:06:a6:75:0e:2e:81:ca:
83:05:5d:bf:ac:d7:46:46:83:08:d6:48:70:cc:3a:
99:27:5f:8b:c5:cc:7c:4e:b1:30:97:1a:95:90:3c:
ee:e9:0e:79:f1:ef:b0:a8:2e:4f:cb:08:70:2e:29:
ed:b7:66:58:21:f0:c3:ed:54:67:9a:21:63:ce:32:
21:03:a3:e6:be:e9:da:7a:85:cd:8a:06:7d:a4:d2:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:C8:AA:33:15:12:C3:1A:34:E9:0B:13:21:35:89:93:B4:AE:9D
X509v3 Authority Key Identifier:
keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c4:09:5c:ae:4d:a2:81:99:28:f9:f0:49:e9:f9:77:fc:06:
44:d1:d8:d5:4e:58:df:f7:45:4d:4a:1c:40:19:df:83:7a:85:
9f:2f:df:f2:90:6d:1d:28:77:86:71:ed:91:5a:90:c4:08:1d:
da:ac:93:7a:78:54:a7:26:86:3e:fa:7f:21:06:73:e4:6c:2e:
32:d1:35:c6:f8:b8:28:f0:96:83:cd:6e:bd:3f:53:20:7d:d8:
ae:af:18:91:3a:83:7a:2e:b2:42:ba:14:e7:21:b3:71:b4:58:
56:fe:57:52:67:e3:2d:dc:fc:6d:4e:35:6d:5e:26:c7:17:b5:
5d:d6:41:ad:f7:0d:08:4f:ad:0a:26:c0:bd:24:24:90:98:0b:
8b:84:28:22:52:28:79:ef:86:42:c3:5c:99:34:2a:69:a3:23:
06:db:2e:d8:a5:97:99:d2:b3:ec:7c:a3:23:d2:29:c3:3c:3c:
00:17:1c:77:7f:e4:02:d1:71:0b:55:0b:28:fa:af:35:fc:6f:
cf:2a:b6:b5:39:c1:eb:63:49:8c:bb:21:8d:16:7f:be:28:08:
fc:92:ad:53:5f:13:99:9a:18:35:13:be:71:dc:4e:90:6c:9e:
49:35:a1:f0:56:b5:fc:09:7e:c3:3b:19:89:c4:99:c2:4a:47:
42:50:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:14:41 2026 by rpki-client