
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier: rh6dfm/i5+2PzsPmydX8vFHKiFQFp7BsxkUVxsbiLMc=
Subject key identifier: D7:05:1E:36:CF:BC:D0:5A:C5:74:2C:F2:35:93:93:E8:E0:EB:F3:7D
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 75271CD2DB98A46EB36A727CD69CDC2AE963A1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number: 0265
Signing time: Sat 18 Apr 2026 15:14:54 +0000
Manifest this update: Sat 18 Apr 2026 15:09:54 +0000
Manifest next update: Sun 19 Apr 2026 17:22:54 +0000
Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc=)
2: 34352e36362e36332e302f32342d3234203d3e20313530323933.roa (hash: aG9+XQlh145qdADV5P4V+eZUHaIDM09ABAVqUp5GkL4=)
3: 3134312e39382e34332e302f32342d3234203d3e203633313939.roa (hash: qIvPiXlQ2pg3f/7mhaP/mlEDh5IakbCDbr6yJGTo5+g=)
4: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=)
5: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw=)
6: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=)
7: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=)
8: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk=)
9: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=)
10: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: HQse+omhhYxPvPvkxNaZzK9GNQoFSFVAnbm1N5iSggI=)
11: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:27:1c:d2:db:98:a4:6e:b3:6a:72:7c:d6:9c:dc:2a:e9:63:a1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Apr 18 15:09:54 2026 GMT
Not After : Apr 19 17:22:54 2026 GMT
Subject: CN=D7051E36CFBCD05AC5742CF2359393E8E0EBF37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:f9:6c:96:fb:70:3b:1b:2e:24:6e:e3:9e:
c0:e4:b5:1d:d5:e4:42:19:8e:46:33:0e:75:54:1f:
3a:e3:0c:05:c8:a5:ab:d0:c9:51:ab:c4:7b:94:5d:
4e:ad:95:3a:43:53:8d:56:20:63:e4:40:ee:51:f4:
1a:44:da:f7:ea:7d:da:0e:98:39:88:a4:37:69:76:
9b:a0:13:3c:fc:df:8a:27:a1:49:ff:2b:2e:7a:9f:
d1:dc:3e:e3:62:6b:1a:1e:38:7d:41:9d:c9:10:a5:
27:c2:af:b0:4e:e9:6a:bf:dc:b8:c3:84:9f:60:a1:
d1:a5:4c:ab:f8:ad:61:90:42:4f:5c:1e:5e:f5:e7:
22:d0:09:22:70:40:8d:4e:3f:1c:81:8b:3e:0d:52:
0a:71:0c:0c:b7:3f:9a:f1:6d:1f:4c:ca:10:f2:d6:
9e:b9:eb:52:ac:50:f8:c8:8c:13:b0:d6:dc:0d:e5:
87:15:bf:44:1a:2a:d9:f6:ae:a1:10:c6:d8:53:62:
dc:e8:88:01:bb:bb:3d:c6:dd:65:15:e4:03:e4:e8:
8a:5b:36:e8:7b:7d:23:93:57:0b:8a:bb:49:22:3c:
bb:33:55:3e:ae:ec:7d:a1:33:63:13:d8:30:ab:54:
d9:6e:d6:6e:64:a0:c7:89:f5:53:66:92:74:6f:03:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:1E:36:CF:BC:D0:5A:C5:74:2C:F2:35:93:93:E8:E0:EB:F3:7D
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:76:c3:0e:73:80:7f:24:e8:97:07:6e:29:ca:db:e8:57:80:
0c:05:df:bd:5f:e9:16:f6:c6:bb:75:1c:1f:0d:d4:d7:91:2f:
24:08:a9:21:16:ca:39:b0:1b:bc:fc:cf:66:12:e8:78:3b:d7:
ad:1e:a1:5a:9b:60:19:4f:e6:a6:f5:cb:3b:e1:3c:5d:7c:f6:
8c:c3:fc:f8:fc:61:13:2b:3e:9a:5d:53:0f:39:67:db:11:9d:
5f:82:f5:42:7d:03:6c:e5:a9:36:b4:46:ee:36:e9:ae:77:ae:
65:87:2d:22:2c:e9:76:91:ca:30:7d:19:5f:55:06:80:a3:d2:
98:d4:3f:dc:d3:0d:13:d7:fe:15:bc:ac:5e:b8:90:0a:86:b1:
24:a4:03:76:34:da:ff:3c:65:c6:34:ba:bf:fb:96:59:45:3f:
ed:47:1e:88:d0:58:97:c1:c5:ad:c5:02:3c:8b:02:ef:ef:77:
8f:96:1f:bb:b1:86:b4:de:ee:78:97:df:40:d5:b5:46:42:99:
ea:22:61:e4:b1:cd:6e:cd:b1:99:03:fb:6d:58:30:ac:db:21:
8f:8b:16:17:a9:d8:fb:ab:5e:d4:bd:f3:da:5e:b8:d1:54:04:
cc:39:b7:52:28:c0:a4:2f:e1:bb:f5:8b:99:c7:36:60:bf:15:
83:1f:d4:a4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUdScc0tuYpG6zanJ81pzcKuljob0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw
YjVkNDgxMDAeFw0yNjA0MTgxNTA5NTRaFw0yNjA0MTkxNzIyNTRaMDMxMTAvBgNV
BAMTKEQ3MDUxRTM2Q0ZCQ0QwNUFDNTc0MkNGMjM1OTM5M0U4RTBFQkYzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbn/lslvtwOxsuJG7jnsDktR3V
5EIZjkYzDnVUHzrjDAXIpavQyVGrxHuUXU6tlTpDU41WIGPkQO5R9BpE2vfqfdoO
mDmIpDdpdpugEzz834onoUn/Ky56n9HcPuNiaxoeOH1BnckQpSfCr7BO6Wq/3LjD
hJ9godGlTKv4rWGQQk9cHl715yLQCSJwQI1OPxyBiz4NUgpxDAy3P5rxbR9MyhDy
1p6561KsUPjIjBOw1twN5YcVv0QaKtn2rqEQxthTYtzoiAG7uz3G3WUV5APk6Ipb
Nuh7fSOTVwuKu0kiPLszVT6u7H2hM2MT2DCrVNlu1m5koMeJ9VNmknRvAyn3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1wUeNs+80FrFdCzyNZOT6ODr830wHwYDVR0j
BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi
ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0
ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k
ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC
MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXbDDnOAfyTolwduKcrb
6FeADAXfvV/pFvbGu3UcHw3U15EvJAipIRbKObAbvPzPZhLoeDvXrR6hWptgGU/m
pvXLO+E8XXz2jMP8+PxhEys+ml1TDzln2xGdX4L1Qn0DbOWpNrRG7jbprneuZYct
IizpdpHKMH0ZX1UGgKPSmNQ/3NMNE9f+FbysXriQCoaxJKQDdjTa/zxlxjS6v/uW
WUU/7UceiNBYl8HFrcUCPIsC7+93j5Yfu7GGtN7ueJffQNW1RkKZ6iJh5LHNbs2x
mQP7bVgwrNshj4sWF6nY+6te1L3z2l640VQEzDm3UijApC/hu/WLmcc2YL8Vgx/U
pA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:09 2026 by rpki-client