
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier: 3uK0d+xvT50Sscaa2Y0ajYcU9sVW9mofOuMSGiWql9M=
Subject key identifier: 8C:46:D0:75:55:9A:19:24:99:82:61:FF:9A:0C:58:9D:B9:53:1A:79
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial: 264B519885438C44A9FAA74E66E449F92B9A0793
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number: 3B
Signing time: Sat 28 Feb 2026 23:28:24 +0000
Manifest this update: Sat 28 Feb 2026 23:23:24 +0000
Manifest next update: Mon 02 Mar 2026 00:21:24 +0000
Files and hashes: 1: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
2: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: so9jzJsDz7i7rmdaxL7OqOwQic266EImW4DkDK22A1E=)
3: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
4: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
5: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
6: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 23:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4b:51:98:85:43:8c:44:a9:fa:a7:4e:66:e4:49:f9:2b:9a:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Validity
Not Before: Feb 28 23:23:24 2026 GMT
Not After : Mar 2 00:21:24 2026 GMT
Subject: CN=8C46D075559A1924998261FF9A0C589DB9531A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:f2:c1:f9:84:79:b5:f7:da:7b:26:48:2b:
d6:61:65:58:8b:d8:88:c1:e9:9c:95:e7:c6:d8:5c:
ee:8e:db:da:15:b3:b7:85:8f:47:3b:97:00:35:b3:
07:36:a6:d7:e8:ea:01:06:72:97:87:b6:82:5d:16:
9c:a9:3d:01:e1:ce:99:89:e9:a6:f2:56:1c:9e:7f:
f0:21:fc:ea:c8:c5:e3:8b:f5:90:43:c5:a2:11:a6:
aa:43:28:88:a1:86:b6:86:5a:47:cd:52:20:27:52:
d2:47:06:fa:90:8f:c7:a8:d1:04:00:3a:bb:e4:ea:
06:83:df:b0:56:17:fc:65:1d:52:b7:3c:a9:b9:e4:
7c:05:89:e9:2a:6a:31:42:4d:f8:b8:8b:17:46:45:
54:d8:c1:a5:1e:00:e3:ab:fd:bd:fd:4b:ea:12:97:
24:c5:90:13:c2:b8:6b:82:f3:df:b8:0d:76:11:57:
3f:66:55:09:f2:e6:7f:ff:95:af:63:9d:cd:78:6c:
81:c1:db:5e:79:6d:8b:71:e9:bc:c0:a7:8f:cb:04:
76:5b:9f:32:15:bf:7b:0a:2b:43:74:56:16:6d:bb:
90:1b:9c:52:6d:db:2f:39:4f:74:d8:82:65:e5:eb:
ca:87:97:ca:9d:97:45:90:c8:46:47:bc:68:41:3c:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:46:D0:75:55:9A:19:24:99:82:61:FF:9A:0C:58:9D:B9:53:1A:79
X509v3 Authority Key Identifier:
keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:16:13:b3:a8:3e:c3:d3:39:e9:72:11:fb:97:df:3b:10:
4f:db:8d:bb:3f:9c:f6:20:8b:c3:7f:91:a7:e9:ad:93:16:e7:
1f:f6:ff:bc:f0:7f:dc:c8:8f:ef:e4:25:38:b3:f4:d8:f1:9b:
cf:a6:7d:45:67:c6:50:ba:f3:33:23:55:12:ad:ca:59:99:94:
57:1e:80:b1:56:50:91:bb:4e:f5:76:fe:d0:a7:5b:45:6f:10:
8d:5c:3d:63:f9:73:49:6b:a3:c0:a7:d5:81:89:f2:50:28:4b:
c8:a6:7b:01:4c:39:4b:59:d9:84:c9:09:1c:47:54:f4:78:49:
ed:43:a8:d9:40:12:3b:0e:f0:bd:a4:13:05:ac:b5:1b:83:b2:
7e:fa:ef:81:d3:ca:91:bb:06:d5:4b:b3:97:00:56:b2:09:f6:
c1:13:33:1d:70:58:05:40:01:02:d3:d8:35:7c:97:57:25:1c:
c0:ba:69:5e:05:1d:51:7d:e3:1d:ae:2c:06:f5:99:6d:44:5d:
e3:99:70:19:9f:ad:55:44:af:f5:af:b0:ed:78:74:9c:7a:f0:
e5:25:bb:12:b0:d7:55:c6:fb:45:b6:92:42:9b:b1:83:11:14:
4f:93:a0:45:14:cd:78:37:56:0f:a6:f7:53:36:97:9b:3e:d8:
00:31:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:34:52 2026 by rpki-client