
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: o07KPUBzDGICU4BYPOE3j3u1IXg3BNy+VvqiFtlvTNQ=
Subject key identifier: 3B:37:F5:F1:B1:D8:76:5A:49:01:8F:06:6C:DC:FE:EB:4C:18:F7:E4
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 21EB9FED485E8FEF8C478DC10E6FC2EA7E8CE283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: 01CC
Signing time: Tue 28 Jul 2026 04:22:10 +0000
Manifest this update: Tue 28 Jul 2026 04:17:10 +0000
Manifest next update: Wed 29 Jul 2026 06:38:10 +0000
Files and hashes: 1: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
2: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
3: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
4: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: rl9WKPkkmuGQG/U5o0zrKS0ThZN6PmJc6EVOjMbpHy4=)
5: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=)
6: 3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa (hash: sSjQo0gwcaB1VwvZuBlzZHXLcXQx3UMY0dQE8gGvjAA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:eb:9f:ed:48:5e:8f:ef:8c:47:8d:c1:0e:6f:c2:ea:7e:8c:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jul 28 04:17:10 2026 GMT
Not After : Jul 29 06:38:10 2026 GMT
Subject: CN=3B37F5F1B1D8765A49018F066CDCFEEB4C18F7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:33:8a:7d:b0:20:16:23:9a:32:5d:3e:1c:
a1:95:eb:0e:65:1b:e8:d6:c1:8a:3b:bf:34:bd:5f:
e7:27:4f:00:5a:58:5e:fb:02:7e:45:2e:85:bc:c6:
cc:1d:14:43:93:68:f4:56:e1:a3:6a:7f:ca:be:79:
ab:f6:f3:6e:93:e5:20:dd:62:e7:63:5d:02:b1:21:
d0:4f:68:08:48:ad:8c:d2:d1:2a:7e:44:1c:8e:5d:
e9:81:82:2a:e6:89:8b:b2:e1:5f:5a:e3:e6:83:d7:
34:47:18:15:07:59:96:a3:46:24:c1:e5:5c:ae:95:
06:2c:fb:58:e3:9d:74:c0:47:4b:dd:e8:2a:11:f8:
e4:55:8a:3f:2a:83:82:9e:ac:41:13:37:d7:70:02:
48:81:e1:c6:70:a4:e3:28:09:54:31:2a:17:4b:8f:
89:70:2c:53:3c:6f:21:e4:ed:5d:96:1d:5a:91:f6:
1f:92:0f:95:ba:f5:46:a7:a8:a5:a3:9a:c4:01:2a:
9f:76:91:90:7b:2e:18:1a:5d:ea:c9:3d:7e:47:15:
94:16:58:86:de:a2:0a:b0:28:0e:69:e5:1e:57:00:
3a:50:cd:f3:fd:32:ec:28:31:1f:e0:e4:c8:e1:c0:
07:0f:58:9f:ad:c2:74:b7:84:37:16:fd:63:11:9a:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:F5:F1:B1:D8:76:5A:49:01:8F:06:6C:DC:FE:EB:4C:18:F7:E4
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c6:54:b7:a5:a0:a5:8f:fc:ba:15:f9:02:5e:a1:a7:9e:d2:
b0:58:6e:51:4d:1d:18:b8:62:7e:5e:1d:0a:3b:39:f1:25:89:
05:a2:7e:d2:49:f4:0c:12:81:64:80:d2:7d:96:a2:19:b6:ae:
cd:db:5a:b6:fa:e5:d3:07:bf:23:db:00:34:40:b3:53:a5:78:
96:a5:14:12:2c:17:91:26:a0:40:58:b1:17:86:7d:3f:ff:4f:
3a:fc:d1:66:e8:ee:67:70:02:ad:3f:8f:ea:49:18:bc:1c:45:
e7:a2:63:23:c3:00:fa:3f:4b:f1:ec:eb:c1:36:42:83:83:a2:
d1:69:80:6f:ad:bb:82:55:a2:54:be:44:7e:3e:aa:75:c8:4c:
c5:c8:de:4c:8a:64:7c:19:02:6a:6e:50:e3:50:54:f4:36:7f:
50:92:8f:49:10:e7:d4:bb:3c:52:70:88:5e:46:bd:5c:68:c4:
ec:c7:df:41:14:31:88:c6:3f:6f:b6:5c:ec:3b:42:2f:33:32:
4e:90:80:e7:97:52:1e:35:2d:e6:d4:2c:63:65:7b:22:42:99:
e8:cc:c7:d5:17:18:a9:ae:ff:7a:bb:e4:79:30:89:d7:dd:b1:
07:6f:d8:7f:b0:d2:ea:b5:ac:2b:f5:ae:57:bb:3b:f7:9d:19:
8a:d7:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:09:50 2026 by rpki-client