
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier: a80lcA0JyXDEfFWXmQ0zDSdqiZuy6dP2JzpRBcX6U4c=
Subject key identifier: 63:90:23:71:5A:96:D6:4D:76:45:91:0B:33:04:90:C3:12:7D:38:EB
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 2A13C3435EC5824C34BED5C72BDAA7F8F459C12F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number: 0373
Signing time: Tue 28 Jul 2026 08:49:39 +0000
Manifest this update: Tue 28 Jul 2026 08:44:39 +0000
Manifest next update: Wed 29 Jul 2026 10:55:39 +0000
Files and hashes: 1: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
2: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: 8KHKZ6yYYM4r4ctRfPeSiTlSU7jaEuT/g972q+E+CDU=)
3: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
4: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: zjVPAhp6+Y0ZXGnryErowWqTSn3vt1Dl/+J+eHpGuAk=)
5: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
6: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
7: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
8: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: v5viufJUSKWuwj+d/Y1XFSYcf+6nXu4aUZj9tnF4HUs=)
9: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
10: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: 4pHWpyVZFpmDYYnCP3t+rPQ/bvOYzNkXDNdwOaC6vs0=)
11: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: bwfrDPKCw9WS3zXzH58QUxPZFXlGLk8lRsYYU7rYFis=)
12: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
13: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
14: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: OHOa8pdQ/+cUDWoy8JYEhdO3yt3e1qfHEUXnAM/72Is=)
15: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
16: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
17: B113B31E9F01A2F41870E8C77492B18EBA830E07.cer (hash: dY9YO6OBP4MP/E8JLnAQ8jLu99Fqa8+yWttAesQ43o0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:13:c3:43:5e:c5:82:4c:34:be:d5:c7:2b:da:a7:f8:f4:59:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Jul 28 08:44:39 2026 GMT
Not After : Jul 29 10:55:39 2026 GMT
Subject: CN=639023715A96D64D7645910B330490C3127D38EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:2d:9d:ca:41:b1:cf:f0:9e:55:af:73:f4:
87:05:fa:c1:cf:6b:82:9e:4a:52:6c:3a:75:7e:10:
8c:fd:54:f2:2a:b0:b9:f9:9a:92:92:bc:b4:a0:9e:
27:f2:74:fa:a4:cc:81:3c:7f:d3:30:5b:66:46:a1:
4d:1b:bb:7a:f6:9b:78:23:49:b1:81:8d:27:5a:04:
82:3c:b5:dc:99:c5:75:04:e0:6c:e4:4c:b1:d0:8d:
62:52:57:dd:c4:8a:8d:dc:e9:1d:c9:33:bb:2f:0f:
6c:e1:0d:05:1f:4c:4e:cd:11:6b:77:e8:15:b4:84:
74:cc:b0:49:31:cf:ae:fe:cd:d8:8b:ce:0a:4a:79:
d0:c7:de:70:47:8e:d9:0b:61:49:e7:c7:a0:16:9f:
f8:45:5e:a6:fc:5d:5f:8f:1d:c4:58:5e:66:52:9a:
ff:f5:2f:1a:eb:8f:b4:e0:0c:e7:7b:58:b5:13:e9:
63:80:f4:9f:f7:c4:c5:53:4d:73:32:18:d1:94:70:
77:89:70:e4:0d:e4:f1:22:cf:20:be:c3:45:62:24:
e3:3a:16:ce:f8:7c:de:5e:2a:a8:aa:e6:b5:e3:63:
95:74:af:05:90:cd:58:4d:65:70:bd:42:14:9d:21:
8b:b7:e7:15:f5:5c:00:6d:78:16:a9:39:f7:74:ec:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:23:71:5A:96:D6:4D:76:45:91:0B:33:04:90:C3:12:7D:38:EB
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:e3:32:ac:01:e6:7b:5f:c6:07:30:58:15:6b:a9:24:7b:
f5:2c:76:72:95:80:7d:44:5e:6a:02:5b:1a:d4:3a:af:e1:85:
89:3c:c9:9e:fd:e8:eb:9c:ef:8d:74:86:a1:00:69:ff:9d:42:
b6:33:5e:40:69:12:af:59:a0:ca:e6:e5:5f:a5:5a:9d:19:8d:
1c:a5:21:f3:c8:7a:72:31:8d:d0:00:d5:f4:09:09:c3:16:ca:
01:80:8d:1a:d3:0e:26:33:e3:f2:d1:9d:fb:8d:d6:58:a5:98:
67:2a:86:79:9b:3d:f5:95:9c:af:76:ce:d0:0f:d5:ea:86:40:
ea:7b:d6:64:48:f2:9a:a2:7c:44:1f:e4:dd:21:a3:51:bf:a7:
29:41:f6:bc:84:67:54:3e:9b:fd:cc:79:d1:e0:e1:88:fe:f3:
35:e6:83:b3:92:68:db:c7:c5:26:3a:6c:a5:84:a9:4e:e5:ca:
ca:7e:80:69:75:ee:c3:b8:54:fa:69:42:b6:85:79:60:ce:7b:
83:25:67:89:1c:5c:45:20:7e:11:97:cb:2f:94:6f:3b:0b:19:
e2:cb:65:10:4d:2a:f7:5e:84:7f:10:be:bb:cd:93:d2:22:30:
ef:14:72:9a:aa:1f:8f:eb:0d:3c:83:83:7a:ba:bd:2b:32:3d:
fe:89:ef:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:59 2026 by rpki-client