
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier: Vm2J6iCc1chVy6WGXX+vNQ4Lr/WnK4Z3L9CN7/Z7l84=
Subject key identifier: 2C:CB:2E:A0:FD:28:7E:C2:5C:3A:34:59:E0:B2:20:25:50:48:39:A2
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 595B1819841B38280D911D5731B99C2E3E0D8947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number: 03D8
Signing time: Sat 13 Jun 2026 05:14:26 +0000
Manifest this update: Sat 13 Jun 2026 05:09:26 +0000
Manifest next update: Sun 14 Jun 2026 08:36:26 +0000
Files and hashes: 1: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: e4XOmt3lMpKCNw/G0HH6htSEqIrQiNEUv9San8fBBVc=)
2: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
3: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: NlN3fbd4xPs8oXDjI1+pTaPhc7vLifacDO0nMI7gkYc=)
4: AS207487.asa (hash: s3p6b4UEGWgtzDLFmXDHf89hF7XtnQxEviO1lAFHwO4=)
5: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
6: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
7: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
8: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: dHA6HLPOR3IQCPs+KBxka5EoTXTVzS3+Rk/fPIxN15o=)
9: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5b:18:19:84:1b:38:28:0d:91:1d:57:31:b9:9c:2e:3e:0d:89:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Jun 13 05:09:26 2026 GMT
Not After : Jun 14 08:36:26 2026 GMT
Subject: CN=2CCB2EA0FD287EC25C3A3459E0B22025504839A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:3e:f3:90:20:7f:f5:c3:b6:5c:5a:3e:4f:
50:df:b5:c3:d4:86:78:dd:54:ec:f9:d0:0e:e6:eb:
97:2c:4f:5c:c3:3c:2c:28:b5:d1:e8:2c:3d:6e:18:
9c:1b:a8:51:9b:6b:9c:72:27:68:9d:8b:10:eb:43:
f4:e9:30:e1:23:72:ae:c6:fd:ae:a7:f3:f2:24:c4:
cd:ab:3d:fb:d6:38:dd:aa:f6:12:dd:e5:2a:37:2f:
df:e5:ec:2f:29:70:f4:e5:6d:d8:89:7c:13:12:76:
47:7a:6c:58:61:6e:40:83:19:22:f0:5f:da:37:f0:
8a:d3:c9:cd:93:30:66:38:76:96:be:41:e4:30:80:
66:92:61:e1:33:ff:14:08:29:f7:73:f4:bb:78:eb:
b2:86:27:75:ce:bb:c9:18:a7:31:84:36:fc:f7:50:
5b:ca:44:f1:3b:44:79:f1:3a:17:13:82:64:e5:53:
c9:8e:8b:92:45:cd:51:5c:3b:9b:4d:c9:a0:07:24:
75:2a:20:a3:6d:0a:70:ad:a4:e1:b0:9e:7d:cb:94:
77:a1:9a:08:fb:88:91:6e:5b:fb:2d:a5:23:bb:30:
9a:34:e4:5b:24:2e:28:e7:25:c2:24:ed:36:24:ca:
51:b8:aa:01:f2:39:4d:63:0d:90:32:05:d5:9d:2a:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:2E:A0:FD:28:7E:C2:5C:3A:34:59:E0:B2:20:25:50:48:39:A2
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:27:a1:c7:c5:e6:35:00:e9:84:c0:cd:2c:67:eb:69:db:
21:5b:2d:60:df:31:c0:fb:45:b0:9a:87:f2:24:4e:a6:09:ac:
08:cb:56:db:54:2a:7f:33:0d:19:6c:f9:54:be:8a:46:0c:53:
9e:12:87:6d:05:ba:a1:fb:21:1c:51:a7:76:26:b1:ea:bd:08:
bc:8c:61:cc:ff:e7:93:51:e0:ea:7b:00:64:6f:9c:a7:3b:34:
9a:44:30:12:a8:eb:2b:7a:41:c3:b0:76:91:ad:3d:47:c8:50:
0c:5e:9e:b1:cc:54:55:6e:97:a2:e7:41:65:a8:76:9a:ae:27:
05:df:80:08:ae:a8:56:3f:12:ca:73:2d:28:9d:fb:79:58:46:
dc:3b:58:38:6a:dd:be:62:b5:a0:17:97:38:51:9e:19:29:1f:
da:4e:0d:3f:0c:84:bd:01:89:9c:b7:cf:73:6b:0f:8d:c9:78:
a1:e8:6f:4c:ae:b3:a3:1e:88:bd:aa:e1:fd:bb:a0:50:32:b1:
9f:14:a8:8d:b0:50:d0:fc:02:8d:60:49:94:d3:b4:5d:b0:5c:
fb:59:6c:70:49:e8:97:7c:ae:6d:85:7a:ef:d4:39:62:c0:66:
27:ac:81:ed:8c:af:76:2b:18:ad:38:12:57:ae:95:ca:bc:20:
2b:aa:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:40 2026 by rpki-client