
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier: DOId654pSa00tjC7jffF01CbmYtWNeOC1F/i0e9E/CU=
Subject key identifier: 38:37:2E:CF:1E:39:F1:36:AC:E6:7F:4D:29:61:2C:91:93:3D:13:22
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial: 0335C0C817B3035A9BE8E43CBDD289A1B7828838
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number: 01A2
Signing time: Wed 17 Jun 2026 02:03:56 +0000
Manifest this update: Wed 17 Jun 2026 01:58:56 +0000
Manifest next update: Thu 18 Jun 2026 04:07:56 +0000
Files and hashes: 1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: n5SdaWAXVMqXHAwD9WPoPKD3TikOS0ebQuDzlxK9pmI=)
3: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 22:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:35:c0:c8:17:b3:03:5a:9b:e8:e4:3c:bd:d2:89:a1:b7:82:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Validity
Not Before: Jun 17 01:58:56 2026 GMT
Not After : Jun 18 04:07:56 2026 GMT
Subject: CN=38372ECF1E39F136ACE67F4D29612C91933D1322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:f6:2b:ca:ce:43:21:fa:77:4c:d5:17:a1:
a8:ad:54:b6:8e:e7:ce:e7:92:e1:95:d4:da:f9:b1:
a2:fd:cc:f1:ea:49:cd:0e:ae:e7:e0:bd:5f:b8:da:
eb:d9:dd:c7:00:8e:d3:9d:28:0f:1d:41:7e:e0:7c:
e6:2e:ba:96:07:f7:f8:40:8d:bc:d3:a2:95:cc:da:
84:d9:7a:1e:1a:ac:af:f9:ce:9e:4f:08:7e:f8:43:
87:08:4c:89:b6:fb:c8:3a:1e:d5:6d:a6:fa:80:b0:
5c:92:ec:92:e3:0c:7f:2f:ee:ac:a4:87:66:b4:63:
b8:d3:60:de:e9:13:1e:07:32:d1:d0:e8:8d:78:8a:
34:9b:eb:0a:0e:b6:2c:01:41:44:c8:f8:e2:fd:15:
bd:b2:a9:09:03:0e:48:6f:82:3a:df:10:f9:35:99:
c0:f7:46:83:15:77:62:0b:ca:a1:05:f4:ee:ec:71:
64:50:ba:c2:22:7a:93:08:94:aa:20:18:b5:c7:79:
6c:42:4c:3a:49:da:26:5a:90:c2:4e:7b:b5:4e:20:
64:b5:5a:60:1c:a6:5e:d4:bc:89:f1:68:11:9a:03:
ee:78:da:07:fd:31:79:ea:21:ff:42:42:e9:14:05:
46:e0:93:96:37:91:d8:d6:96:ca:5e:0d:a9:de:c7:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:2E:CF:1E:39:F1:36:AC:E6:7F:4D:29:61:2C:91:93:3D:13:22
X509v3 Authority Key Identifier:
keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:1a:a9:4b:84:d7:52:e6:af:33:5f:34:94:d9:b9:b6:04:
a9:f9:b7:b0:fa:12:96:8e:5f:24:51:be:bd:b1:52:f7:4b:7b:
40:c8:2a:f4:65:45:b8:d1:30:e6:e6:e3:7d:b2:b4:31:91:1d:
e7:bd:17:cd:a9:0a:13:c9:7e:83:97:ed:23:a7:0d:bf:68:c7:
ac:e3:cc:1b:cb:9d:28:51:d9:b7:15:04:22:a4:36:ed:a1:13:
b2:8b:9f:2e:33:ad:4a:9f:64:ad:6e:3f:7d:4b:e6:e6:0f:9a:
da:65:ab:86:d6:62:fb:27:a5:ec:0e:72:6c:e5:4b:2d:98:75:
d0:7c:66:6d:9e:87:14:a4:59:36:9a:c1:cf:d1:25:0e:56:e7:
b5:50:60:6a:2a:c3:54:cf:2f:bd:73:91:eb:b4:81:7a:7a:82:
40:67:b4:a5:7b:38:2a:6c:f0:d2:69:07:d9:7a:0d:42:7c:71:
b6:74:9f:24:f1:a1:ac:8b:c2:d9:6d:f6:31:3e:48:8b:ed:9e:
d8:4a:ce:fd:32:17:40:4d:7e:16:c8:5d:77:f4:9a:e9:47:a0:
b8:36:e7:17:d1:dd:4c:f9:61:04:85:b5:02:79:51:cd:5f:fc:
8d:7a:03:80:a9:d7:cc:6d:84:72:b1:bb:6f:ab:e2:3d:5d:30:
f0:43:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:52 2026 by rpki-client