
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: EtMlt+cUGIfFLaIW/PHLtEIGbpLSp6RjV0SUh5St1Fg=
Subject key identifier: 37:25:84:4C:85:3C:ED:DD:FB:4B:15:73:0E:5B:BE:54:52:AB:B3:C1
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 446BC98EBB1BE513CCBA417EECC762C0BB4BB1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: 0105
Signing time: Mon 02 Mar 2026 05:58:35 +0000
Manifest this update: Mon 02 Mar 2026 05:53:35 +0000
Manifest next update: Tue 03 Mar 2026 06:19:35 +0000
Files and hashes: 1: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=)
2: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: YHI48+4AbkTZR9jnN8H4l/BrXQSToU57RJXaBsUC+zI=)
3: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
4: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=)
5: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=)
6: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
7: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
8: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6b:c9:8e:bb:1b:e5:13:cc:ba:41:7e:ec:c7:62:c0:bb:4b:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Mar 2 05:53:35 2026 GMT
Not After : Mar 3 06:19:35 2026 GMT
Subject: CN=3725844C853CEDDDFB4B15730E5BBE5452ABB3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:8f:82:60:aa:0a:3c:a5:39:d1:da:6c:75:
81:5a:07:be:f4:82:b3:3b:7b:59:c1:f9:ea:40:9d:
d8:56:79:a8:f6:7a:be:37:80:8e:85:62:33:aa:3f:
32:6f:34:44:5e:68:e3:a7:dc:76:5b:be:df:ef:f2:
d7:1c:aa:e0:43:f4:62:82:85:5b:4a:bf:08:64:9b:
4e:4b:99:17:ca:fb:d3:b9:99:68:9a:95:32:7b:58:
b1:a3:2b:dd:d3:12:1b:37:72:a0:b4:2c:0c:c6:f6:
b9:2b:a9:f6:71:a4:02:67:3c:65:52:46:e1:70:4d:
41:ff:ee:75:63:ba:40:64:92:2d:94:d0:a5:f9:e6:
85:70:44:a4:bb:56:11:5d:53:0e:89:3e:0e:05:29:
63:78:58:95:ce:05:54:b9:c5:f9:97:59:a6:f2:35:
8c:47:66:12:29:31:73:45:1c:b8:5c:d2:76:9e:70:
03:66:74:73:a5:9f:c0:7e:90:5b:95:1d:6f:02:1e:
36:a0:bb:12:19:1e:82:2e:18:49:18:8c:a2:1f:93:
df:b7:fa:2b:e0:1d:1c:25:a8:01:59:c5:56:69:32:
a4:a2:26:be:55:02:8c:90:be:1d:8d:0d:35:59:b8:
9c:34:63:0c:5e:00:69:a3:65:e5:60:21:09:27:27:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:84:4C:85:3C:ED:DD:FB:4B:15:73:0E:5B:BE:54:52:AB:B3:C1
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:04:b6:47:5c:6a:a9:ae:1e:12:4d:58:55:b6:c6:ad:a4:
6e:2d:15:de:ca:b8:e2:2e:6b:f0:9c:73:5e:42:ba:95:d7:4f:
dc:5c:f2:dc:61:6b:22:e0:be:58:6b:79:54:07:71:88:4e:17:
4f:00:09:06:e3:91:50:30:9c:66:f7:77:ee:a6:24:35:2b:a5:
a2:e2:fc:60:91:34:b8:f4:f0:db:f3:19:fc:ed:cf:70:ca:78:
ca:01:15:a1:ce:c1:ef:21:cd:cc:23:9a:cf:91:6f:53:cb:f4:
d8:54:7f:45:47:fa:7d:51:0c:62:10:93:0b:20:19:9e:dc:0d:
93:0e:00:25:84:e6:6b:1d:61:67:75:ff:0d:60:e8:6d:48:6b:
32:2c:3d:79:01:f9:6e:e2:74:4f:4d:54:e0:e7:53:b9:45:e4:
2b:d5:05:bf:6e:5f:82:6c:6e:ca:0f:d7:dc:eb:d0:ba:44:97:
e6:6c:99:1b:58:88:94:7f:82:6d:e1:e9:c8:5b:da:18:b2:7a:
d1:b3:70:67:4b:02:db:b4:0c:f8:81:2f:e5:2b:86:9e:4e:32:
5d:ab:64:1b:12:7d:02:3d:1e:62:f5:3e:56:02:5a:ee:ea:4d:
21:96:4e:98:1f:59:48:82:3a:fd:a3:9f:0e:08:1c:59:02:36:
40:d7:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:31 2026 by rpki-client