
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: al2UoYZdjVkX9qYTWU/2MM2a1ttS7bnTVHcyIod9U4U=
Subject key identifier: 05:B9:2D:43:0E:74:22:10:2A:46:AE:10:37:AD:AF:E5:AB:ED:E3:A7
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 50D56D70A36CA5BF9AFFF8C4A6894FF364658CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: 0215
Signing time: Sun 20 Sep 2026 09:05:43 +0000
Manifest this update: Sun 20 Sep 2026 09:00:43 +0000
Manifest next update: Mon 21 Sep 2026 10:11:43 +0000
Files and hashes: 1: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: KVWuiBn3WdIFk0Ki8L7Xx4KAetToHOsmBwTImn9dzPk=)
2: 3138352e3139302e3232382e302f32332d3234203d3e203230343733.roa (hash: sSjQo0gwcaB1VwvZuBlzZHXLcXQx3UMY0dQE8gGvjAA=)
3: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: KSRZt1DwB9bxNmKSPK6BxOjex5dyK6FY9yIPPnRxY/U=)
4: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: kWLECgVV1VftZUfr9I58+oOD7uIghr725IwWATJehFU=)
5: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=)
6: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: S6zvsTSnybC5v19XM+wBc97Rf5SG4IRKmCl8ae093X0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d5:6d:70:a3:6c:a5:bf:9a:ff:f8:c4:a6:89:4f:f3:64:65:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Sep 20 09:00:43 2026 GMT
Not After : Sep 21 10:11:43 2026 GMT
Subject: CN=05B92D430E7422102A46AE1037ADAFE5ABEDE3A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:15:22:40:2a:0b:05:2d:97:37:3d:19:17:
dc:39:4c:d9:35:7e:39:22:68:2d:d4:57:81:cd:60:
eb:97:62:e5:34:cd:5b:2a:1d:e3:79:f6:2a:13:91:
ac:57:2a:f4:6c:8b:c4:74:11:03:54:cc:e6:79:38:
fa:3d:8f:27:bf:19:b4:50:99:93:f9:0b:8b:7a:2a:
b5:a2:df:c0:e1:bc:5f:d3:26:a3:08:34:1b:0d:f8:
4e:92:db:b7:b3:8b:99:a8:44:c4:75:61:53:7f:5f:
61:0e:75:c4:a7:91:4d:20:a4:99:e8:ce:6f:0d:54:
e2:21:45:ad:3a:dc:45:6d:3c:b7:ea:1f:65:a2:bf:
c9:6e:80:bc:fa:47:97:93:46:43:16:83:b9:53:58:
c8:a2:c7:35:57:77:76:d7:6a:ef:f4:f9:a9:f4:e4:
41:7f:5e:8e:2f:39:e4:86:c9:07:03:34:d6:f3:68:
7b:00:a1:05:96:94:1c:7b:e2:7a:38:d1:c6:8f:57:
ce:e6:56:e9:df:3a:3f:d8:be:29:62:96:c0:43:95:
ac:d2:ff:be:7e:62:e0:e9:50:f4:4c:c7:31:7b:c8:
04:9e:62:0f:2d:c4:a3:5f:0f:7c:65:6d:96:e8:86:
8c:f4:1e:f5:29:81:24:33:35:a4:e9:a9:10:ef:cd:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B9:2D:43:0E:74:22:10:2A:46:AE:10:37:AD:AF:E5:AB:ED:E3:A7
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cf:23:e6:d5:03:d7:ff:1e:d1:72:bc:19:7f:2b:bf:37:cc:
f3:65:f9:66:fa:b3:1e:22:97:0d:b1:84:75:66:db:96:6c:b0:
20:e6:87:76:59:5a:53:17:0a:38:5a:51:dd:ad:f3:8b:1d:28:
c2:91:15:83:bc:da:7f:fa:68:03:4d:49:ae:40:40:53:0d:4c:
bd:21:1a:65:0d:a5:a0:8e:cf:13:72:80:33:78:b2:20:92:40:
9a:f5:96:8f:35:74:e3:f9:94:68:4f:cf:34:0d:28:4a:43:c4:
c6:21:1f:32:21:34:1d:ef:35:51:c8:f8:a7:8b:96:10:8d:da:
94:f0:b1:35:28:17:8a:93:98:a8:7e:c5:21:6a:4d:12:5e:6f:
74:da:0a:08:04:33:1d:bf:43:0a:a9:29:3a:9d:2e:bd:2a:4c:
c5:74:cd:9e:a5:b3:cb:e8:b5:2e:c2:6b:c8:45:38:54:f6:be:
88:ad:88:09:47:fb:26:ae:6e:ab:85:a4:88:9b:04:11:57:2f:
3e:11:48:87:97:51:55:ae:88:55:8c:89:aa:9a:50:41:ae:64:
2b:7a:d8:4b:fd:29:32:15:0e:d4:66:89:78:11:3f:54:27:1f:
18:1f:5d:4f:65:f4:fc:01:22:da:43:18:88:ee:78:7b:50:01:
41:52:2c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:18:49 2026 by rpki-client