
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier: HpGmAWA5JbHuuV2Gco6jlgD+xmTou82vhfxVr3myDvs=
Subject key identifier: 72:78:25:AF:02:3E:85:DA:72:D5:CB:A1:65:66:18:B3:47:2F:07:0F
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 6B08D6F26BC5E51092052A46371BF03243B90BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number: 05D8
Signing time: Thu 24 Sep 2026 02:50:54 +0000
Manifest this update: Thu 24 Sep 2026 02:45:54 +0000
Manifest next update: Fri 25 Sep 2026 03:16:54 +0000
Files and hashes: 1: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=)
2: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=)
3: 39332e39352e3131362e302f32342d3234203d3e2039333034.roa (hash: plCfGSXPfhTajm4cdjMqyYr1YrnQY7w3e6xDMUQOQyY=)
4: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=)
5: 39332e39352e3131342e302f32342d3234203d3e20343032323635.roa (hash: XpI1frjDCdiqqdjI8V0/ftv5/Y6j8UuAYvwRLMQoOgQ=)
6: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=)
7: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: goKr61V/fV46Cdn/lyPkJQXr1aIqTIqC22xZMesKa/k=)
8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=)
9: 39332e39352e3131322e302f32342d3234203d3e20323130373332.roa (hash: PX19irLQHpIFWltGzv3XYJnikwfnyHbTOA1bjEAIlcw=)
10: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (hash: 7ZgcCpYFR8HMsnY8UXDNPfwnRDp4xij9/4U/GxNHhy8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:08:d6:f2:6b:c5:e5:10:92:05:2a:46:37:1b:f0:32:43:b9:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 24 02:45:54 2026 GMT
Not After : Sep 25 03:16:54 2026 GMT
Subject: CN=727825AF023E85DA72D5CBA1656618B3472F070F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:ef:40:0d:1c:46:6b:1b:45:cd:08:69:0e:
92:bc:3e:2e:8e:89:c3:92:0d:68:be:cf:ae:2e:24:
0f:ca:ca:66:47:ba:e1:a1:85:ae:50:f8:cb:c8:a3:
54:98:1a:0f:cc:38:1b:f9:45:03:5c:3b:b5:4d:d5:
3b:e9:3f:22:6a:d6:f2:55:50:5a:7b:0d:5b:88:1b:
d0:21:8d:05:15:67:d5:4a:e1:d1:cc:f4:53:6a:9a:
8a:b7:67:91:af:db:b7:ca:69:e2:4b:79:f5:bf:e5:
1c:a1:ca:04:6d:4b:34:51:5f:e1:19:18:39:c2:f1:
13:2a:f2:43:40:06:19:08:a9:09:1a:5e:1b:8a:7e:
20:df:14:81:94:3f:bd:f7:22:91:dc:cd:32:a8:00:
9f:c2:0a:d9:60:97:a2:0e:3e:f4:60:8f:62:bd:78:
d5:ff:aa:cf:4d:ac:c8:d1:b0:7e:19:ee:6e:0c:25:
ce:4a:d0:40:72:39:62:36:c3:bd:1e:6a:fb:01:62:
f9:5a:19:46:28:85:64:6a:be:24:96:5c:58:1c:9f:
2e:58:c9:91:4e:8f:6d:bb:f9:a5:31:97:33:fa:90:
45:38:07:21:ee:38:c2:05:fd:3a:bf:7e:24:1d:e4:
b6:4d:f8:c3:fa:97:f2:15:74:19:27:39:de:e8:ae:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:25:AF:02:3E:85:DA:72:D5:CB:A1:65:66:18:B3:47:2F:07:0F
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:46:f8:fc:b9:28:bc:e1:9e:f1:c4:90:c1:28:77:98:4f:
66:09:c3:a4:db:92:5a:d7:32:be:11:00:9f:b6:72:46:2f:d7:
5b:7d:a6:cf:97:2b:2a:38:dc:e1:cc:49:eb:36:90:bc:d7:27:
88:06:b7:cb:c1:f1:1b:db:96:21:21:74:24:fd:1d:d7:fb:a6:
8d:0f:88:a9:5e:db:5e:e4:68:87:a3:70:57:49:b2:3d:4a:e5:
ee:83:e3:24:c6:0c:59:33:64:85:09:a4:80:e0:c7:96:f0:38:
49:c4:55:fa:1d:bd:bf:cd:29:f6:76:ac:ec:42:58:67:63:d8:
ed:7e:56:9e:30:a4:60:8d:59:8b:83:be:2c:9c:7c:79:f1:8f:
73:2d:69:f2:12:1c:28:2a:04:5a:fa:b2:2d:ab:5c:9c:ea:32:
6a:5e:67:b8:59:09:8a:8a:78:72:f2:a1:6a:86:28:cb:46:e5:
3c:41:75:83:4c:fe:05:3b:25:22:11:9d:b7:a2:7c:50:49:9b:
c5:1d:60:ca:ff:42:0c:c8:33:f8:9d:08:60:b4:a1:24:b1:85:
19:36:1d:a5:b4:c3:66:1d:bb:65:5d:77:13:45:a9:69:5f:44:
43:96:a0:e5:37:89:bc:7d:ee:a1:06:2d:a1:39:33:15:06:a7:
68:8c:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:10:44 2026 by rpki-client