
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
File: B75F3781BC9C2E7301754988659F92686704E570.mft (raw, json)
Hash identifier: uDFuOqBiuKmjYHCUkZJKfw14hyq855C5YKY0bf8C9hY=
Subject key identifier: 17:1F:9A:72:DB:51:B8:6E:64:3D:C6:A3:09:BF:51:6E:12:D9:7B:73
Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Certificate issuer: /CN=B75F3781BC9C2E7301754988659F92686704E570
Certificate serial: 056A681CF7B9EDAF06165103F4E50D883DCB5928
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
Manifest number: 5A
Signing time: Tue 28 Jul 2026 16:02:08 +0000
Manifest this update: Tue 28 Jul 2026 15:57:08 +0000
Manifest next update: Wed 29 Jul 2026 17:39:08 +0000
Files and hashes: 1: 326131343a373538333a656636303a3a2f34382d3438203d3e20323135383238.roa (hash: jHx3oPogw+alCyId8KrXrlALGQwaM9lw4XrTBhR0WTI=)
2: 326131343a373538333a656635333a3a2f34382d3438203d3e20323139313130.roa (hash: /nUry8et8sxqIBNM4RCPWBpdTl6L1a65u8Inqobujxc=)
3: B75F3781BC9C2E7301754988659F92686704E570.crl (hash: 2pCPEjfcvJDNcuwy8zxU+k71ahSWcTtxOJlouwnooD4=)
4: 326131343a373538333a656635303a3a2f34382d3438203d3e20323135333735.roa (hash: QC+VLR1atMBjLZKqNKRIXRZjoNccmm6wjr6eMvg5Isw=)
5: 326131343a373538333a656635323a3a2f34382d3438203d3e20323135333735.roa (hash: SkNEqHKkgb9xaKNRo3z5v+C960c6kIipwLJBD5hMIP8=)
6: 326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa (hash: FZxMvnN2JvS0E7GRVuAh2S+maz7EiQ9+xRJngz4LUC0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:6a:68:1c:f7:b9:ed:af:06:16:51:03:f4:e5:0d:88:3d:cb:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570
Validity
Not Before: Jul 28 15:57:08 2026 GMT
Not After : Jul 29 17:39:08 2026 GMT
Subject: CN=171F9A72DB51B86E643DC6A309BF516E12D97B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:9b:07:77:63:12:d6:ae:14:9e:0f:34:c6:
32:e9:8f:fc:ab:0f:10:df:68:97:14:18:a0:82:c0:
63:0e:1e:31:af:8a:96:61:77:ed:f9:ec:7c:d0:c9:
68:0f:d6:2b:9c:bb:1a:d4:ed:3f:c9:72:07:3d:8d:
81:14:86:db:5b:81:3b:77:c6:46:fd:29:a7:24:28:
d6:b6:bd:61:6f:88:04:a5:22:de:20:32:79:c7:03:
81:23:c8:19:32:5e:b1:50:88:a8:62:d8:f8:5a:c5:
db:97:3e:31:be:14:3b:8a:ba:83:c2:b1:de:53:0f:
96:2c:1a:7b:94:2e:de:69:fe:14:99:37:49:d4:4e:
8a:ca:8d:7c:55:1e:31:ca:04:33:83:bb:45:d8:ed:
ee:d7:f9:4c:33:39:33:56:5b:de:bb:5a:13:90:2f:
2c:5d:b2:64:7b:3f:1c:eb:96:1a:88:66:d9:4e:4c:
12:4e:0e:91:07:17:8d:0f:65:48:a9:e3:8a:78:9a:
2f:77:dc:0c:dd:9e:09:13:44:84:3d:e9:c3:fd:74:
73:5d:32:bb:2b:da:a9:0d:f1:cc:a1:4e:01:f4:e6:
7b:50:a1:8e:0c:1d:ea:53:1f:14:45:a1:48:9f:83:
19:0e:c4:36:08:ba:b3:1c:21:ec:3b:a5:6a:d9:a0:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:9A:72:DB:51:B8:6E:64:3D:C6:A3:09:BF:51:6E:12:D9:7B:73
X509v3 Authority Key Identifier:
keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:3f:eb:ab:e4:c3:a3:e2:96:b3:cc:00:eb:0f:cf:55:21:
cf:eb:94:93:d9:c8:e9:cf:72:ee:b8:96:5d:ed:ec:5d:3d:47:
c8:e6:cc:67:78:97:01:ef:3d:1b:fb:a6:c8:27:45:8e:76:fa:
76:33:e0:ef:15:d0:8b:e5:7c:77:82:24:b5:1f:21:16:3c:39:
9c:49:89:24:87:f7:00:19:94:e8:36:28:04:e6:dd:11:9b:7c:
1a:ff:15:fb:cd:6f:ec:ff:cc:f9:c6:96:8d:ba:57:e1:61:65:
68:ef:e2:ee:52:1a:af:9b:ad:cb:bf:e0:53:44:b8:32:d1:e2:
e4:b4:13:78:08:7c:d3:89:48:8c:18:ed:ea:0f:5c:43:6b:d2:
d7:ea:49:fe:12:9e:67:a8:3b:7e:b8:2d:69:cd:72:4c:85:15:
76:e3:aa:66:7f:7e:2f:dd:81:60:24:01:20:d0:a5:9d:0b:23:
74:4a:ff:1d:1b:d1:12:db:2d:54:11:4d:09:1e:96:30:af:30:
eb:fa:24:04:db:a0:bc:63:54:7a:6e:23:7c:fb:10:61:44:a7:
58:11:c4:a6:7a:fc:da:73:b6:86:78:6b:52:ce:a5:95:05:39:
f5:73:9d:f3:46:8d:1b:ae:8b:f8:26:c5:22:3d:4b:01:50:fd:
8b:f7:45:f7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBWpoHPe57a8GFlED9OUNiD3LWSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2
NzA0RTU3MDAeFw0yNjA3MjgxNTU3MDhaFw0yNjA3MjkxNzM5MDhaMDMxMTAvBgNV
BAMTKDE3MUY5QTcyREI1MUI4NkU2NDNEQzZBMzA5QkY1MTZFMTJEOTdCNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcJsHd2MS1q4Ung80xjLpj/yr
DxDfaJcUGKCCwGMOHjGvipZhd+357HzQyWgP1iucuxrU7T/Jcgc9jYEUhttbgTt3
xkb9KackKNa2vWFviASlIt4gMnnHA4EjyBkyXrFQiKhi2PhaxduXPjG+FDuKuoPC
sd5TD5YsGnuULt5p/hSZN0nUTorKjXxVHjHKBDODu0XY7e7X+UwzOTNWW967WhOQ
LyxdsmR7PxzrlhqIZtlOTBJODpEHF40PZUip44p4mi933AzdngkTRIQ96cP9dHNd
Mrsr2qkN8cyhTgH05ntQoY4MHepTHxRFoUifgxkOxDYIurMcIew7pWrZoEaTAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUFx+acttRuG5kPcajCb9RbhLZe3MwHwYDVR0j
BBgwFoAUt183gbycLnMBdUmIZZ+SaGcE5XAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0NjA1MjktNjk5Mi00ZmM1LThhMTctNTI1YjZiMjc1
NTU2LzEvQjc1RjM3ODFCQzlDMkU3MzAxNzU0OTg4NjU5RjkyNjg2NzA0RTU3MC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CNzVGMzc4MUJDOUMyRTczMDE3NTQ5ODg2
NTlGOTI2ODY3MDRFNTcwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzM3NDYwNTI5LTY5OTItNGZjNS04YTE3LTUyNWI2YjI3NTU1Ni8xL0I3NUYzNzgx
QkM5QzJFNzMwMTc1NDk4ODY1OUY5MjY4NjcwNEU1NzAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOrz/r
q+TDo+KWs8wA6w/PVSHP65ST2cjpz3LuuJZd7exdPUfI5sxneJcB7z0b+6bIJ0WO
dvp2M+DvFdCL5Xx3giS1HyEWPDmcSYkkh/cAGZToNigE5t0Rm3wa/xX7zW/s/8z5
xpaNulfhYWVo7+LuUhqvm63Lv+BTRLgy0eLktBN4CHzTiUiMGO3qD1xDa9LX6kn+
Ep5nqDt+uC1pzXJMhRV246pmf34v3YFgJAEg0KWdCyN0Sv8dG9ES2y1UEU0JHpYw
rzDr+iQE26C8Y1R6biN8+xBhRKdYEcSmevzac7aGeGtSzqWVBTn1c53zRo0brov4
JsUiPUsBUP2L90X3
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:41 2026 by rpki-client