
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json)
Hash identifier: Ny/Rx8+h//nk3wAhtVXKwMUm0BTHbUKnnKxJoNOUBGQ=
Subject key identifier: 27:45:4F:4C:D2:18:02:78:8F:F2:AE:50:B2:95:D9:13:44:2B:55:B5
Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE
Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
Certificate serial: 39B78EBADA988FE1EDAD6EC60F1A6F77055FF59F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
Manifest number: 0161
Signing time: Tue 28 Jul 2026 19:36:41 +0000
Manifest this update: Tue 28 Jul 2026 19:31:41 +0000
Manifest next update: Wed 29 Jul 2026 20:07:41 +0000
Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=)
2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: 9BmaPyyL/dpHRWaqmjfJ54E95/u6WK6Mvreim04xgOM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl
rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:07:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b7:8e:ba:da:98:8f:e1:ed:ad:6e:c6:0f:1a:6f:77:05:5f:f5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE
Validity
Not Before: Jul 28 19:31:41 2026 GMT
Not After : Jul 29 20:07:41 2026 GMT
Subject: CN=27454F4CD21802788FF2AE50B295D913442B55B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:74:0c:99:d6:d5:2e:9a:df:86:20:56:a8:
69:b0:9b:ba:bf:4f:a3:2d:68:a3:2b:79:f7:b4:ce:
4b:aa:38:6d:c9:6f:49:3c:11:16:24:d7:ab:df:43:
53:61:11:4c:22:17:5b:f7:e8:cc:67:6e:ac:d5:bd:
fb:c1:2d:31:c6:1a:6b:6a:6c:ad:25:4d:f7:6f:53:
29:56:55:4a:51:d8:e4:2b:97:0f:0e:65:80:42:d8:
03:da:ec:b7:d5:56:1b:09:b9:fb:5f:6f:e7:c2:0d:
15:e1:c8:d2:2c:29:08:42:a9:f9:79:f1:a4:5c:34:
a2:b2:4f:ec:62:ee:fc:30:2d:f2:c7:0b:1f:28:ae:
84:e4:b3:29:7e:22:5e:89:ff:19:26:d0:f5:f7:87:
f2:55:10:93:2e:c9:06:fc:ee:07:47:99:4e:28:0b:
8b:27:ce:ad:e3:a9:c2:96:f6:32:9f:6e:89:38:7c:
a7:46:77:7b:75:d2:88:34:ab:97:ea:6c:a7:53:7b:
23:49:2f:5c:d5:b4:c8:6e:95:fc:79:13:f7:a8:fb:
58:ab:29:cd:7b:52:5e:bd:c9:86:15:7d:1a:30:d8:
90:85:62:f2:ea:a0:56:b8:20:26:89:0e:14:01:46:
67:21:1c:03:a7:77:f3:96:ea:03:96:7b:c7:3e:3e:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:45:4F:4C:D2:18:02:78:8F:F2:AE:50:B2:95:D9:13:44:2B:55:B5
X509v3 Authority Key Identifier:
keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:27:ab:d9:07:0d:46:e1:b0:18:eb:e3:dd:5e:c7:84:c4:1d:
45:2c:78:c2:4f:8d:44:1a:c2:e4:b7:8b:55:f1:be:ea:9f:10:
38:69:7e:5f:3e:6d:a8:50:6d:8a:f4:a6:8d:19:2f:d7:1f:dd:
5b:17:a5:45:71:c7:97:37:b6:4c:ac:0b:6a:8b:35:14:f4:4b:
ac:e3:9c:61:1b:72:20:2a:0d:c6:9e:5b:3d:14:10:c1:94:d9:
30:f1:59:73:29:f7:f1:dc:b1:cb:d3:50:d7:32:2d:01:64:b5:
0b:99:ac:1a:2f:84:a6:45:28:45:98:91:69:65:58:c8:5a:ed:
dd:2d:47:48:6a:4d:ec:bc:68:44:24:c1:e7:90:59:6f:3e:33:
fe:c0:b4:fd:eb:2c:a2:b9:e7:c8:30:fb:9e:26:17:aa:de:18:
fc:57:41:52:5d:3e:23:7f:0c:d0:e7:4f:0f:91:8d:9a:e7:ad:
a3:11:e5:d1:a7:e5:3b:b9:ed:8d:78:bb:a2:0c:4a:1c:11:f7:
57:07:c2:a8:01:0e:79:7e:e5:51:b3:3c:76:3c:ea:a5:c1:54:
f5:4e:d6:89:fa:20:09:a8:71:b1:a8:94:7e:da:cc:f9:58:c4:
bf:ae:cc:7b:fb:9c:27:b5:61:0f:11:23:ad:49:53:f4:4b:1b:
bc:5d:fb:bd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUObeOutqYj+HtrW7GDxpvdwVf9Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0
Q0E4MTNGRTAeFw0yNjA3MjgxOTMxNDFaFw0yNjA3MjkyMDA3NDFaMDMxMTAvBgNV
BAMTKDI3NDU0RjRDRDIxODAyNzg4RkYyQUU1MEIyOTVEOTEzNDQyQjU1QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC193QMmdbVLprfhiBWqGmwm7q/
T6MtaKMrefe0zkuqOG3Jb0k8ERYk16vfQ1NhEUwiF1v36MxnbqzVvfvBLTHGGmtq
bK0lTfdvUylWVUpR2OQrlw8OZYBC2APa7LfVVhsJuftfb+fCDRXhyNIsKQhCqfl5
8aRcNKKyT+xi7vwwLfLHCx8oroTksyl+Il6J/xkm0PX3h/JVEJMuyQb87gdHmU4o
C4snzq3jqcKW9jKfbok4fKdGd3t10og0q5fqbKdTeyNJL1zVtMhulfx5E/eo+1ir
Kc17Ul69yYYVfRow2JCFYvLqoFa4ICaJDhQBRmchHAOnd/OW6gOWe8c+PryzAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUJ0VPTNIYAniP8q5QspXZE0QrVbUwHwYDVR0j
BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4
OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4
REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy
OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1J6vZ
Bw1G4bAY6+PdXseExB1FLHjCT41EGsLkt4tV8b7qnxA4aX5fPm2oUG2K9KaNGS/X
H91bF6VFcceXN7ZMrAtqizUU9Eus45xhG3IgKg3Gnls9FBDBlNkw8VlzKffx3LHL
01DXMi0BZLULmawaL4SmRShFmJFpZVjIWu3dLUdIak3svGhEJMHnkFlvPjP+wLT9
6yyiuefIMPueJheq3hj8V0FSXT4jfwzQ508PkY2a562jEeXRp+U7ue2NeLuiDEoc
EfdXB8KoAQ55fuVRszx2POqlwVT1TtaJ+iAJqHGxqJR+2sz5WMS/rsx7+5wntWEP
ESOtSVP0Sxu8Xfu9
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:44 2026 by rpki-client