
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier: zWqRgrkTeVC14OaOO/QAzg5C92oSYPLHMX7eWatjq5o=
Subject key identifier: DA:6C:71:18:E1:E0:D5:85:B1:D5:8B:18:C2:2E:86:68:54:15:C1:00
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial: 6A01EA2024D36E5B0504B9B9E25E8B6646343337
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number: 0566
Signing time: Mon 02 Mar 2026 06:19:44 +0000
Manifest this update: Mon 02 Mar 2026 06:14:44 +0000
Manifest next update: Tue 03 Mar 2026 07:45:44 +0000
Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: YEP5cPYiAqyHuKW8vSIDWeQyf2qZ6M4Sao91Mig8jAk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:01:ea:20:24:d3:6e:5b:05:04:b9:b9:e2:5e:8b:66:46:34:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Validity
Not Before: Mar 2 06:14:44 2026 GMT
Not After : Mar 3 07:45:44 2026 GMT
Subject: CN=DA6C7118E1E0D585B1D58B18C22E86685415C100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:9c:ef:2a:41:f1:21:53:5e:49:c2:a5:cb:
00:b3:1d:70:fb:21:f5:2a:b9:a2:7d:26:b6:b8:68:
e9:d1:8b:6d:ba:e2:55:e1:fe:c1:92:15:6e:51:8d:
8a:67:81:36:45:ab:fd:43:f0:55:3f:98:53:ea:53:
c8:b7:25:6a:4d:16:39:45:3a:4a:79:a3:ba:4e:4f:
72:89:b1:32:13:e5:a6:17:08:b3:d8:15:27:7d:83:
43:a4:f5:82:1b:6f:80:c3:58:0f:ef:d6:76:65:64:
16:1f:5b:eb:f5:ba:03:fb:2d:fa:57:55:ee:82:dc:
19:e6:c9:9a:48:c8:8a:18:2a:70:6d:b8:dc:02:66:
df:35:d3:1d:c8:37:3e:4b:96:d9:28:88:4c:eb:e9:
5a:63:b4:38:3a:2b:4b:18:e2:5a:af:a5:29:ef:40:
77:3c:04:23:d2:b9:92:0b:22:9e:0b:76:fe:45:ac:
13:33:a0:3e:65:f2:3c:a5:b3:58:2c:ab:64:97:2f:
98:a8:2d:ee:64:22:43:b6:be:22:d0:3e:a1:e2:dd:
34:34:c4:da:cf:7e:c1:fb:c2:47:4a:24:dd:2f:ae:
cd:01:15:83:f6:29:1c:1b:76:65:a2:f2:ed:ca:e6:
6d:8e:f4:2f:12:60:e3:f2:f1:7e:c2:63:d8:e2:43:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:71:18:E1:E0:D5:85:B1:D5:8B:18:C2:2E:86:68:54:15:C1:00
X509v3 Authority Key Identifier:
keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:79:12:34:ce:a6:3f:d5:73:f0:93:3d:2f:bd:0f:91:b3:22:
b3:dd:82:ac:2c:8c:aa:c9:07:4d:b6:e9:05:77:50:99:99:16:
2b:c7:c3:02:28:d3:97:3f:28:ac:a7:bc:09:69:e7:f5:15:8d:
ef:4c:93:0f:61:30:f9:8a:de:10:42:ee:39:9c:54:01:7e:d3:
82:0b:90:8a:7c:ff:85:e7:9e:aa:16:cd:e1:c5:93:25:84:a1:
8e:81:44:30:d7:fa:a1:49:e2:49:e1:6d:8a:ae:79:10:e1:6f:
43:2e:cf:f9:5e:94:67:db:aa:86:08:95:20:1d:fb:db:12:01:
a6:04:f2:4b:4a:29:e3:ce:c8:c6:b2:cd:af:a3:98:1f:e4:df:
af:df:14:fb:f9:9f:91:13:1e:5f:cd:4f:16:3c:51:bc:12:b7:
3f:2d:3c:83:81:7a:c4:2e:e3:dd:32:2c:c5:a3:d7:71:aa:b4:
79:6a:23:14:4b:54:e2:a1:37:53:55:b5:d6:02:51:63:88:ad:
ff:4c:a9:1c:a4:df:58:89:04:20:dc:2f:cb:b3:8f:e2:d9:a4:
4a:7e:2f:14:66:7f:74:25:06:3e:84:3c:08:52:67:c1:b0:47:
90:42:ed:2d:81:18:29:02:a3:0c:4a:88:f7:a7:2d:d3:a0:98:
97:83:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:56 2026 by rpki-client