
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json)
Hash identifier: NrtF73bJwL7x5iia4qc+a1fAA+q1EAXSdGLovL67qww=
Subject key identifier: 16:0C:FA:A1:8E:FB:C1:96:D5:3D:45:31:B0:13:47:98:BE:1C:C2:E1
Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Certificate serial: 4B5661187FF6FD98F0F5F8C6234CC98EF6FCE903
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
Manifest number: AA
Signing time: Sat 13 Jun 2026 04:20:22 +0000
Manifest this update: Sat 13 Jun 2026 04:15:22 +0000
Manifest next update: Sun 14 Jun 2026 07:38:22 +0000
Files and hashes: 1: 326130623a346530373a363130343a3a2f34382d3438203d3e20323130363332.roa (hash: zvjx/yTCTWO3kCoZu0S8S/X09AzIBk5JMwyuFagXb+o=)
2: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: JKOGo/72ckSmDQEFinby6Oqh1rIM1yE7og8Slq9r7q4=)
3: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=)
4: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=)
5: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=)
6: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:56:61:18:7f:f6:fd:98:f0:f5:f8:c6:23:4c:c9:8e:f6:fc:e9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Validity
Not Before: Jun 13 04:15:22 2026 GMT
Not After : Jun 14 07:38:22 2026 GMT
Subject: CN=160CFAA18EFBC196D53D4531B0134798BE1CC2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:b2:27:2d:8f:be:2d:d6:2c:08:18:4c:57:
76:7c:0d:7a:da:dc:60:6f:29:14:ca:95:db:4f:a7:
93:36:d9:3a:3f:57:74:e1:66:1c:ba:a6:03:75:f4:
42:05:91:82:a9:96:3b:78:4a:4f:f6:56:fa:d4:41:
23:76:27:54:a9:17:6e:17:30:47:19:07:80:45:70:
7e:e7:75:0b:d9:22:2e:6b:55:b0:ff:a8:b6:17:fb:
68:d2:2e:d3:91:d6:e5:54:56:fe:5e:aa:b4:ce:27:
07:e2:8a:7b:2e:67:50:b7:02:c8:87:5a:08:97:46:
41:56:82:07:38:58:ca:31:9e:54:c8:48:27:b5:82:
1e:98:04:e5:33:1d:f3:f2:b3:78:c2:1f:a4:05:3e:
1e:77:de:11:0b:83:ad:6c:2b:24:1b:36:8b:a0:5f:
0e:cd:7a:f0:5d:b1:21:f3:dc:f0:53:21:b5:86:21:
b0:47:24:8b:55:a3:21:1f:e9:45:7d:9a:89:ce:ed:
61:5d:e8:e4:b8:bb:b2:d0:65:e0:f6:2f:7d:1c:b8:
21:7a:a7:2d:a9:8e:7d:98:e3:88:0c:9f:88:76:8b:
3c:b6:b5:7f:93:10:4c:49:0c:79:b0:91:b7:94:f4:
5b:19:dd:46:53:6f:66:69:5f:23:22:72:55:d4:76:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:FA:A1:8E:FB:C1:96:D5:3D:45:31:B0:13:47:98:BE:1C:C2:E1
X509v3 Authority Key Identifier:
keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8c:f5:38:7b:4b:75:5f:65:7c:52:50:17:22:24:26:34:70:
2c:7d:75:d8:5b:25:7a:0c:89:1d:6e:3e:f9:c9:6a:bf:b2:13:
dc:f9:f7:94:50:39:b1:1f:80:16:a1:06:5e:94:d6:13:e0:e3:
82:6f:b5:86:77:25:36:63:10:85:9e:92:1a:63:5c:67:c0:ff:
cb:a5:22:46:39:e8:04:90:9f:5b:03:ba:96:18:9f:86:ed:79:
a3:e5:54:cc:e2:75:64:f5:89:05:3b:12:2a:cf:97:5d:89:03:
04:f8:a9:66:93:c4:13:19:d9:65:21:99:de:c2:e2:2c:a4:5c:
ce:b3:34:df:e0:b6:03:d1:3c:6e:70:8c:dc:58:5f:8f:b0:ab:
dd:a1:1a:23:fb:e1:95:c0:f0:71:1e:e3:6c:c8:f2:37:aa:5e:
9e:be:09:b4:4f:7f:88:e9:e3:17:cd:2c:c6:a3:eb:ed:65:42:
cb:97:1e:c3:34:2d:d7:d7:b0:c9:fc:4a:18:69:27:85:c8:d0:
e4:56:50:4e:b9:65:78:65:02:cf:fc:91:f4:47:e5:6a:7a:2e:
3d:38:ba:d6:55:9f:4a:c0:2f:a5:68:11:0c:4d:7d:96:24:70:
11:ae:8f:89:06:f0:c5:4f:21:76:3d:70:3c:a8:9a:3a:39:8d:
c5:87:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:12:50 2026 by rpki-client