
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier: McVFifx9GAFAyGG1FBTK5oZbTgBgUAZY2k79nyhTPRo=
Subject key identifier: 0E:2A:F8:18:A0:19:B9:1A:AE:25:E1:98:EE:5D:0B:E2:BB:55:1F:0F
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 3141A2021BB656DEC39BA0F504534DDF2514384D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number: 047A
Signing time: Tue 13 Oct 2026 18:36:05 +0000
Manifest this update: Tue 13 Oct 2026 18:31:05 +0000
Manifest next update: Wed 14 Oct 2026 19:02:05 +0000
Files and hashes: 1: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
2: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
3: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
4: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
5: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: GCZBa8Q0I/FVfCtxsIbtD99MmVi2LkFzoX6rN7jCUY8=)
6: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
7: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
8: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
9: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: b2vN+3qPM1Kt77HuQ8RzenF0xuc+QJpvrF7GjBac7y0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:41:a2:02:1b:b6:56:de:c3:9b:a0:f5:04:53:4d:df:25:14:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Oct 13 18:31:05 2026 GMT
Not After : Oct 14 19:02:05 2026 GMT
Subject: CN=0E2AF818A019B91AAE25E198EE5D0BE2BB551F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:9e:99:c3:e6:6e:73:53:10:c2:24:71:9e:
b4:b7:57:1c:d8:f3:3e:44:49:09:b2:2d:c3:b3:db:
1e:c1:e4:e2:2d:7b:0f:9e:04:91:61:54:31:ef:9f:
d3:19:16:d3:a7:db:6a:25:dd:70:57:80:4a:f0:d0:
fb:9a:3b:13:e6:cf:bd:3c:f1:14:b0:22:b3:f8:6c:
15:d4:69:9d:3a:7e:0d:ba:60:ef:be:1f:ff:cc:12:
c7:2c:f1:d1:30:93:92:96:a9:eb:96:3e:08:2d:4c:
52:47:60:dd:5b:89:5c:c7:5a:ba:89:b0:ee:22:f1:
22:f6:12:8b:be:15:4b:4a:c0:b7:82:b9:ed:ff:8c:
0b:dc:25:fb:7f:7a:c8:c9:2a:63:70:a3:a1:5e:8d:
13:2d:9b:ef:7e:2d:08:d0:d6:43:e0:4a:2c:13:ec:
b0:8f:ae:42:8e:de:e6:ca:e4:01:85:27:28:52:73:
f3:e4:3f:e0:af:2e:38:5a:24:2c:c3:65:4c:16:47:
86:2d:4d:e1:d5:b9:96:13:4f:2f:65:01:1d:bb:34:
bd:a9:8b:07:e6:39:e5:de:f3:ef:7a:8d:96:4d:cf:
78:6d:67:7e:46:eb:bc:af:9c:3f:f2:b2:fc:cf:4f:
19:6e:19:49:89:cf:8b:34:06:1a:39:a0:13:93:37:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:F8:18:A0:19:B9:1A:AE:25:E1:98:EE:5D:0B:E2:BB:55:1F:0F
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:ea:a8:de:ae:24:d0:84:0c:af:05:9f:96:87:aa:4d:8d:
7f:ed:96:cf:7a:44:6a:1e:43:65:20:a7:10:33:d3:7a:c5:4e:
c5:87:91:ec:fd:f8:fe:e4:64:d1:04:2f:03:ac:2c:27:93:20:
84:b8:19:21:fe:c0:d0:d6:a8:e8:d5:40:93:cf:f6:01:f9:a2:
35:46:d5:de:9f:ec:06:35:2d:bc:b0:af:d7:51:d3:64:a0:94:
4c:7a:0c:36:39:7c:bf:a5:d5:ac:8c:8f:a7:e6:bc:d7:e8:3b:
45:0e:66:32:f8:b6:c9:13:00:4c:c2:79:91:74:98:f3:8a:57:
90:ce:38:68:ae:35:78:62:5c:93:5f:69:c7:64:ae:3e:6e:c3:
9e:af:8a:5a:81:f7:a3:b1:a5:0c:99:67:bb:43:05:8f:12:87:
38:a4:38:d3:2d:9d:ae:ba:64:a1:db:92:e3:02:c5:6e:29:c3:
1e:27:16:ce:cc:63:85:fe:5c:65:c8:24:5d:26:ad:1f:39:95:
d3:09:12:a1:2f:90:bf:65:97:d9:42:9f:bb:71:45:91:97:19:
91:05:cf:c8:81:25:5e:6d:65:60:05:48:e2:12:04:a0:73:02:
ed:f3:81:9d:ca:63:c9:be:65:a4:6f:4b:93:0a:b3:22:aa:56:
97:13:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:10:29 2026 by rpki-client