
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier: jKpRDi6WOXppIXvPcc4Vcpc27ZsoD2kTmCcnpkHMUdA=
Subject key identifier: 04:A8:CD:D4:8C:C7:A7:8D:16:8F:B2:BB:7D:0D:9B:88:A1:17:6A:A0
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 1E75B5FD8F63D7E055A4D34E8CB6D8B984378F89
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number: 014E
Signing time: Sun 01 Mar 2026 02:39:46 +0000
Manifest this update: Sun 01 Mar 2026 02:34:46 +0000
Manifest next update: Mon 02 Mar 2026 03:08:46 +0000
Files and hashes: 1: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
2: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: nHehWoxWXf1o0dbPZ/QJuze/UCT4m10ZkG52IDHzFmw=)
3: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (hash: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4=)
4: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
5: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
6: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
7: 326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa (hash: OUt+1oKNkT4q09Fbf5w3L2mK025o9AopYE3nSbhRFR0=)
8: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: 1z4wSL7sJDxtkFZxoGDrW2E8lAX7+i/CG9mlVnN0pSA=)
9: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
10: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
11: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
12: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:75:b5:fd:8f:63:d7:e0:55:a4:d3:4e:8c:b6:d8:b9:84:37:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Mar 1 02:34:46 2026 GMT
Not After : Mar 2 03:08:46 2026 GMT
Subject: CN=04A8CDD48CC7A78D168FB2BB7D0D9B88A1176AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:a9:6e:6a:2c:c4:3b:c7:c5:d3:73:ba:fb:
b9:86:55:57:e3:63:f5:c0:06:b7:df:f6:aa:e9:c9:
9c:26:e8:fd:cf:5a:c5:b4:32:b5:a0:2f:f9:05:a8:
ad:bd:ca:ad:94:34:e3:8f:1a:69:81:0c:8b:1a:84:
7c:fd:7f:65:6b:39:57:71:60:2a:9a:93:43:7d:a1:
28:75:b2:f3:8c:60:bc:6b:ed:ac:f3:1b:12:60:0f:
03:6f:03:d1:4f:cf:c0:c5:a3:00:33:02:b7:64:2a:
3a:46:97:aa:ff:00:34:45:33:e5:b0:9e:04:7a:ce:
1c:f4:f8:cf:89:0d:84:4b:70:d1:b7:10:48:ee:50:
5f:c7:a6:d7:31:b8:d7:73:44:69:18:c8:fb:37:0b:
72:5b:7f:0d:da:51:91:7e:e8:28:2f:8c:65:42:b1:
3d:b1:22:a7:c5:34:fe:70:c0:bd:35:d0:f0:3e:cb:
ec:57:3d:d3:c5:50:9e:6c:a2:74:43:58:54:ac:9d:
03:42:57:81:cf:75:05:b5:91:55:0a:5c:b4:d8:15:
16:aa:70:02:ca:c3:8f:18:91:d6:c6:83:5c:e9:56:
7a:1c:09:6e:bb:ae:f5:97:bc:5f:be:00:c5:59:35:
73:7a:45:b3:3f:7b:9a:ad:5c:15:3e:d2:08:5d:16:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:CD:D4:8C:C7:A7:8D:16:8F:B2:BB:7D:0D:9B:88:A1:17:6A:A0
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:52:b4:93:bd:b3:40:21:1e:7e:ff:66:16:f2:03:18:f1:06:
a6:35:fa:79:d6:db:c5:ef:17:61:91:22:40:1a:7e:bb:c1:03:
d6:33:14:38:37:35:4a:4f:2e:ea:ea:0d:01:79:fb:42:cf:4f:
80:74:41:5b:12:dc:b3:17:96:f9:db:23:4d:3c:da:db:e9:38:
96:41:76:6f:99:92:60:0c:a8:f1:63:91:38:8b:a8:a7:1e:e1:
96:62:f5:41:6d:8b:9a:d9:d8:a3:6b:47:5f:fe:f8:53:fa:bb:
5d:d3:07:56:7c:3d:ec:72:5c:57:e8:53:dd:03:b7:49:38:a7:
80:aa:0a:2f:4e:ea:53:d5:28:61:94:d7:f4:a1:f4:3d:a2:f7:
e2:7b:dc:9a:71:c9:a4:19:04:dc:bd:52:7c:f7:48:1e:07:57:
34:e6:74:67:f1:28:57:dd:25:7d:1c:c6:27:b7:80:02:6c:7e:
f7:f0:1a:c4:8f:71:e5:fb:41:e9:ab:a0:88:06:34:cb:73:6d:
c6:80:94:de:63:3f:2f:e0:e6:04:53:24:ad:14:91:87:99:8e:
cd:b7:e2:fb:36:c8:4f:46:cd:47:c8:e4:fd:7a:4f:c8:7b:99:
2b:dd:83:75:61:0c:2c:2a:b2:44:e4:87:fc:89:5f:36:d7:1c:
23:bf:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:31 2026 by rpki-client