
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
File: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft (raw, json)
Hash identifier: 67Vl9prDGe9YAaesIgKuShaxv4h7uqPXoxwbSfmVlgs=
Subject key identifier: E3:EE:BF:4E:FB:29:EF:02:8E:64:E0:96:27:52:33:05:35:FA:82:55
Authority key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
Certificate issuer: /CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Certificate serial: 6D6F8869101D51897221B573D192AE171060C1CE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
Manifest number: 3E
Signing time: Sun 01 Mar 2026 17:08:10 +0000
Manifest this update: Sun 01 Mar 2026 17:03:10 +0000
Manifest next update: Mon 02 Mar 2026 19:54:10 +0000
Files and hashes: 1: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl (hash: oBzHo8Wi9LsfVxKmkqyNV0GAf5vscNrs42Fyi0bAVFM=)
2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: r53+tlnjK7xAc5kJlxhFUell1c4S1jQNbSq/pievGCs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl
rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6f:88:69:10:1d:51:89:72:21:b5:73:d1:92:ae:17:10:60:c1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Validity
Not Before: Mar 1 17:03:10 2026 GMT
Not After : Mar 2 19:54:10 2026 GMT
Subject: CN=E3EEBF4EFB29EF028E64E0962752330535FA8255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:d4:a3:de:4e:5e:cc:7e:9b:14:a9:3f:28:
df:01:ba:f1:e2:08:19:78:46:b0:f4:a9:d6:a0:60:
3a:43:98:21:e3:5d:b9:bb:bb:3c:78:32:15:05:66:
c0:3f:e9:56:86:55:6e:9b:41:c2:7f:d5:a2:86:38:
94:b8:8b:d0:2f:ec:db:dd:7d:df:2d:a8:1d:b4:61:
f6:98:9f:20:d3:72:8e:08:90:ee:7f:92:54:fb:32:
de:f3:37:56:2c:8c:23:86:e0:8f:7e:88:b6:af:9c:
a1:e0:3a:1c:d7:1e:e7:6a:c1:2d:c5:87:ec:7f:13:
ab:2a:b0:01:3b:4a:f6:c8:e4:79:df:54:49:21:15:
70:f3:b6:73:d0:93:a0:1f:e0:17:6b:25:e1:bd:cf:
f5:c6:0f:e1:af:09:e5:08:51:b0:07:5b:db:44:c4:
61:35:1e:8e:67:41:a8:3f:1d:a4:77:76:78:fa:7a:
a3:75:04:4d:82:1b:27:03:ee:50:b7:64:6e:48:09:
71:01:9b:63:fc:10:21:9c:10:30:24:b6:7d:cc:b9:
78:1d:3d:77:31:2a:4b:d7:c8:c3:56:61:86:42:0f:
e1:07:a5:f6:e5:97:28:da:e9:cb:41:f6:75:7b:86:
a7:a7:66:6d:b5:2c:79:e8:8e:66:8d:ac:68:08:41:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:BF:4E:FB:29:EF:02:8E:64:E0:96:27:52:33:05:35:FA:82:55
X509v3 Authority Key Identifier:
keyid:EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:ab:b5:d2:48:49:36:61:d7:1b:b7:e0:3b:bf:b1:39:3f:
c5:a0:64:02:6c:62:36:b9:25:fb:e6:66:c5:fa:be:29:79:be:
77:37:e0:5f:74:cf:20:fe:98:15:37:57:02:70:19:fa:10:3a:
db:06:e6:50:4d:f3:3e:d0:d5:77:3f:dd:58:1c:f4:aa:11:b5:
90:a2:4c:bf:94:57:70:1e:f6:10:f3:bd:41:1c:0b:0f:8e:99:
90:85:d9:ef:ad:a6:08:68:71:f5:21:e7:26:1b:8e:a8:02:fd:
17:fd:ae:40:12:23:76:ce:de:8e:5e:0c:17:24:75:02:e5:f1:
34:1e:73:a3:80:37:72:9e:5c:0c:25:a4:38:cf:f0:11:02:9e:
42:7f:44:59:be:ee:52:b4:3e:29:f0:41:bb:8e:5c:6e:f3:dd:
ab:4f:7d:aa:70:39:bc:e5:24:a2:b2:34:8d:eb:9d:04:34:0e:
ad:9d:8d:bd:fa:73:29:40:e2:53:a3:3f:09:7a:87:d4:27:46:
f9:09:6f:a1:2e:6f:d7:05:15:cc:3d:36:5b:5f:96:66:96:48:
be:68:71:c6:b4:e0:bc:0a:a5:02:a3:be:71:10:1a:f2:c4:92:
5c:f8:55:50:97:05:13:10:e7:be:2a:c2:cb:32:47:7c:8a:d0:
a7:b8:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:07 2026 by rpki-client