
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier: 7+vZYCgwtwv1O07cjTV+zIzpIbRyW7Nz854boR+4o7s=
Subject key identifier: B6:BC:90:B3:3B:09:C9:1B:E2:C6:BD:0B:05:E2:B9:34:DF:F6:E7:5F
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial: 3C91A60D53103E40E7E3E20524947D40CD22BC5A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number: 7B
Signing time: Thu 16 Apr 2026 22:16:59 +0000
Manifest this update: Thu 16 Apr 2026 22:11:59 +0000
Manifest next update: Fri 17 Apr 2026 23:41:59 +0000
Files and hashes: 1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
2: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
3: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
4: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: YGyTDcx9do8A407rA1yct9qq6ZbjfwmZMhKX235r0VQ=)
5: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
6: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:91:a6:0d:53:10:3e:40:e7:e3:e2:05:24:94:7d:40:cd:22:bc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Validity
Not Before: Apr 16 22:11:59 2026 GMT
Not After : Apr 17 23:41:59 2026 GMT
Subject: CN=B6BC90B33B09C91BE2C6BD0B05E2B934DFF6E75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:8d:7b:e8:de:87:43:a2:37:59:ac:f3:a3:
16:37:a6:1f:5c:3b:a9:dc:0a:30:a7:97:bd:6d:e6:
dd:e8:39:5e:58:db:eb:62:02:41:40:1c:e6:b6:cb:
a9:3e:db:31:e4:48:87:2c:1d:2f:69:8b:9f:40:65:
4e:80:2f:bb:8d:65:f5:8a:d8:61:04:20:bc:7a:64:
c7:e8:d4:b5:78:73:61:af:79:4c:18:29:57:20:4a:
a8:eb:31:3c:2b:ba:b3:40:0b:a6:9d:ad:5b:13:0b:
64:dc:28:d6:78:74:fe:4f:95:79:38:6c:55:e8:8e:
86:43:a3:68:80:75:43:5c:25:ce:7d:0b:e6:e7:cc:
aa:25:dd:89:cf:a4:89:ba:ea:14:ac:f7:d7:fc:e7:
c2:9d:62:5a:5d:46:6f:54:84:4e:11:f4:d4:ba:5c:
52:30:4e:2f:43:13:7a:b3:ff:74:43:97:0a:fe:80:
f2:26:2e:24:4d:ff:b9:86:42:86:33:0a:60:6c:0f:
7f:83:ba:95:85:dd:f1:50:d1:9d:82:2a:06:4f:9c:
98:9f:2e:f5:3d:35:49:d9:8b:05:be:24:f8:c3:dc:
ef:88:ec:2b:d4:63:a1:04:7b:69:0d:b0:09:08:f8:
9d:d1:5d:b1:e0:1f:45:76:5a:f5:5a:f9:91:65:b5:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BC:90:B3:3B:09:C9:1B:E2:C6:BD:0B:05:E2:B9:34:DF:F6:E7:5F
X509v3 Authority Key Identifier:
keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:75:40:c0:60:11:91:fe:b2:28:cb:79:9e:77:37:8d:f7:45:
49:82:f9:09:cc:84:e0:7a:d2:b9:8e:70:fd:65:d2:68:79:e2:
f8:88:be:f3:80:59:e2:2b:af:7a:2d:28:9c:f7:c6:50:b9:d3:
99:28:75:55:1e:dd:4b:25:11:08:50:21:f5:cd:2c:36:67:c1:
1c:9e:60:9c:34:e0:cc:54:20:ff:c5:19:c1:4e:55:79:18:b5:
b3:da:9e:1d:5e:86:37:4d:56:3c:a2:e4:18:3a:6e:e5:08:5b:
e2:1a:7e:29:ed:d3:99:c1:3f:c8:88:00:b1:34:0a:88:63:14:
93:42:86:6c:92:1a:cf:c1:a8:93:2c:71:73:97:61:a4:9f:10:
3a:9d:4a:59:61:a1:5d:ad:d5:ce:31:5f:bd:9c:9b:22:9e:b5:
a5:66:a1:cf:95:54:fc:e5:ed:6a:2b:39:66:ad:82:86:88:57:
5a:84:83:0b:68:54:2f:43:70:aa:39:23:9c:80:a9:ab:34:c7:
4c:b2:d7:99:82:54:26:86:29:85:d8:14:c9:97:56:df:92:97:
2c:ba:a0:25:0c:3c:c8:0b:fa:e5:b8:6b:9b:94:22:b5:52:f7:
d4:4f:53:43:8b:31:8d:55:0b:8e:7a:ce:26:1c:59:94:03:12:
10:85:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:43 2026 by rpki-client