
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier: Gd+y5VZ3CgXKfxqPJLXBSq1BB8UO9tDvlFQg1AAIdSw=
Subject key identifier: 5E:9E:2F:1C:F3:AE:3A:94:F0:7D:2B:41:BE:11:6F:27:5D:E7:92:7B
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 6B6D08A287F1B09A4173BD6B02BEB55821E097FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number: 03D7
Signing time: Fri 12 Jun 2026 09:19:26 +0000
Manifest this update: Fri 12 Jun 2026 09:14:26 +0000
Manifest next update: Sat 13 Jun 2026 13:12:26 +0000
Files and hashes: 1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: gWl0ULINNa/H5KA/eUXCOrnOpGD+Og4x8VLTalmaCGs=)
2: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
3: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
4: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
5: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
6: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
7: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
8: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
9: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 13:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6d:08:a2:87:f1:b0:9a:41:73:bd:6b:02:be:b5:58:21:e0:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Jun 12 09:14:26 2026 GMT
Not After : Jun 13 13:12:26 2026 GMT
Subject: CN=5E9E2F1CF3AE3A94F07D2B41BE116F275DE7927B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:10:f5:65:5f:77:db:fa:6e:5b:cf:57:42:
06:75:2c:cf:f3:22:89:b7:34:f6:af:53:1a:59:56:
6e:b5:1c:0a:1a:dc:90:5a:3f:f8:18:ad:73:39:ef:
83:97:37:f7:bc:b6:d5:38:e7:78:21:58:1a:c8:2f:
89:df:6b:2d:02:2d:a7:34:3d:25:0d:5a:70:1f:fa:
f4:45:85:9e:2c:b1:48:14:d0:02:d8:0f:0b:c1:78:
26:0d:a7:61:8a:56:a6:19:c3:39:a9:38:b6:76:fa:
30:36:11:3f:73:ce:86:ff:16:e1:23:4a:75:10:04:
44:19:ad:04:91:3b:54:09:54:38:9e:3a:d9:36:e2:
cb:b2:a8:de:69:2a:e9:8b:3c:55:41:f1:12:f4:d8:
fc:10:66:e3:c1:71:ac:66:df:89:5b:b7:dc:36:d4:
67:8f:08:2b:26:ba:16:32:b5:f3:40:3a:63:e9:d1:
b0:9c:52:d5:0d:87:b0:60:74:e4:af:5b:11:21:4c:
49:c6:d5:a7:d7:bf:fb:30:26:64:08:3e:ad:37:a2:
03:8a:05:f9:25:02:74:e8:ea:1e:16:4f:0b:57:9a:
93:2c:57:07:96:f9:17:91:fd:d6:79:92:74:d3:f1:
ff:0d:47:e3:21:b1:9d:81:f3:54:ad:15:79:b4:a5:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:2F:1C:F3:AE:3A:94:F0:7D:2B:41:BE:11:6F:27:5D:E7:92:7B
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:07:6c:ad:66:a4:58:70:65:64:b8:4f:c3:35:71:8a:94:d3:
53:e0:26:ec:2f:a8:6a:e5:33:a6:20:bb:af:d5:87:72:83:7f:
8e:06:c8:f1:2a:3a:17:28:64:d0:92:8c:57:35:40:f9:65:98:
64:ec:30:d0:04:b3:82:ad:30:d1:ee:93:2b:18:91:06:af:d7:
b0:05:72:8e:f4:3a:a0:43:1f:0a:1a:3b:db:9f:a8:ba:9b:f8:
f4:03:fe:24:85:b4:a3:66:af:bb:45:5b:ba:e0:86:7e:ee:e4:
9b:92:4d:d5:49:10:d6:75:17:10:57:f9:19:b0:f7:a0:92:91:
a7:17:93:c4:19:92:32:c8:4e:ed:ee:4d:7f:e9:8f:49:46:6b:
0b:15:9d:f4:9c:a1:f4:62:e9:ea:eb:71:1e:b0:71:33:18:a4:
c2:26:ee:8d:c4:3b:ff:1f:2f:96:31:8e:0b:d6:5d:72:f8:c0:
53:dc:33:86:87:ef:2d:af:01:0f:3b:6a:63:5e:ec:6f:84:48:
b6:7c:a3:0f:bc:96:83:d6:d0:92:90:39:6e:21:c6:40:0e:a3:
8e:ee:ee:61:a7:e1:e2:95:66:17:60:30:ee:38:6f:95:61:e1:
44:99:76:fc:ba:9b:1f:a9:b2:f6:ee:1b:fa:8e:5d:b9:b1:22:
7c:c1:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:51 2026 by rpki-client