
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier: l363xCbAIAqc6Am8tpgh1/ghd0z4+y/lNXmjqa+QyWg=
Subject key identifier: DE:DB:F9:D1:C2:D2:3A:6D:82:78:8F:D9:27:DB:90:0F:5F:1F:61:57
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 5978B78D074DA768926857613057AEE084E3AF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number: 0223
Signing time: Sun 01 Mar 2026 15:52:09 +0000
Manifest this update: Sun 01 Mar 2026 15:47:09 +0000
Manifest next update: Mon 02 Mar 2026 16:47:09 +0000
Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (hash: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc=)
2: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=)
3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY=)
4: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (hash: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw=)
5: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: E5Fprm7Oqo/0Dutsfnw+xGR1piZV7ARiXYpvHYLEPYI=)
6: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (hash: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk=)
7: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: wjpAZt14FrpPjx2SDLR8ZCB6hU5OaXzj33ptd93t8oE=)
8: 3134312e39382e34332e302f32342d3234203d3e2039333034.roa (hash: EUrjF0PmxgD6k8/uJk6czg5XM/CvfFtfbWFt5avYo9A=)
9: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=)
10: 3134312e39382e34302e302f32342d3234203d3e20383334.roa (hash: 1TukN0pM0sLV0WOTh4i1NM+3ZCa+53jVC714ffS/R84=)
11: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:78:b7:8d:07:4d:a7:68:92:68:57:61:30:57:ae:e0:84:e3:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Mar 1 15:47:09 2026 GMT
Not After : Mar 2 16:47:09 2026 GMT
Subject: CN=DEDBF9D1C2D23A6D82788FD927DB900F5F1F6157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:c4:00:97:16:cc:26:21:01:30:3a:7c:8c:
3f:22:29:f7:49:2b:22:55:07:4b:62:64:cb:c6:1d:
84:c2:08:0d:17:16:49:23:42:cd:ac:db:4d:d4:c8:
e5:cc:ba:b7:df:b0:83:8e:16:c8:8a:f2:14:af:06:
34:80:ae:63:8c:20:97:a1:4a:2d:35:e2:43:2d:36:
61:9f:b4:ec:36:b9:2c:2f:4f:b0:9b:ee:1c:da:ee:
d6:b2:df:16:8e:b7:11:71:a1:ff:15:58:24:88:2a:
31:c2:79:bb:7e:63:4e:d6:71:8e:ac:9a:db:5b:30:
bb:9e:ae:01:15:b0:65:04:6c:a4:e9:33:55:70:ed:
29:c1:93:4b:42:38:25:53:01:d0:09:03:4d:fc:c8:
23:e7:13:83:6a:08:ee:79:fd:57:18:54:d8:53:e1:
05:94:8d:e0:1d:31:68:7b:43:94:b4:51:2d:3c:c7:
2d:7b:68:05:f1:36:53:ce:cf:37:80:cf:2f:88:51:
48:21:17:63:d2:5a:c7:aa:2b:c5:33:fd:bf:5d:e9:
97:7b:70:69:83:15:0e:2d:5d:bb:c7:73:ae:eb:5a:
d9:8b:dd:87:a9:85:d9:79:71:68:cf:f1:a4:07:bb:
4f:d0:6a:36:90:00:04:77:0f:b3:04:a0:ab:45:1e:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:F9:D1:C2:D2:3A:6D:82:78:8F:D9:27:DB:90:0F:5F:1F:61:57
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2e:2f:31:63:d5:db:59:f4:7b:63:a4:94:f0:30:35:3b:3b:
2a:56:5d:07:29:3a:b8:e2:5a:6d:42:d7:64:df:9a:2b:15:8f:
fe:37:f0:4c:68:17:d8:a0:02:93:4d:41:1e:c2:e2:28:09:8f:
5e:e4:82:56:9f:97:05:6d:13:6e:56:03:7f:99:61:28:d6:4a:
64:ea:7f:fa:67:6c:a8:73:e6:7e:a7:df:3f:e5:51:87:e9:cd:
58:d9:70:84:96:62:4e:91:5a:ed:f8:55:d5:08:42:43:0b:20:
32:78:ed:4b:ad:a6:95:a7:d1:d6:54:1d:80:55:06:60:ab:42:
8a:92:c1:3c:9b:50:2a:e0:0f:b4:3b:27:b0:07:e5:97:c2:fb:
ce:03:1e:74:3a:58:33:41:86:03:39:82:6e:bc:18:73:2b:a4:
06:0a:4a:52:85:9b:a1:06:60:69:66:f7:0a:4d:f0:5c:a3:61:
ee:03:14:f2:70:53:46:fa:7a:65:77:c9:59:20:2e:b2:dd:d9:
07:fb:db:13:6e:ce:3e:e8:df:a8:75:51:f0:c3:4c:1a:98:ed:
b4:fc:22:fe:43:a4:3b:dc:66:84:d2:bd:5a:75:30:d6:c0:c0:
d2:93:f2:ab:4e:9c:af:3a:5c:f9:57:a0:75:b6:fc:9c:28:c5:
b3:80:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:51 2026 by rpki-client