
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier: rmqUL3w3cXiblE5CgoVhmX+KZjqMMPqyA5SLNJJMne8=
Subject key identifier: F2:A7:31:A0:FD:F1:B8:E7:9B:57:55:D9:65:27:DE:C7:32:B9:B1:2A
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 28AC8AA51097F952F9C3B734251A7CB0708CABCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number: 0535
Signing time: Fri 12 Jun 2026 23:07:25 +0000
Manifest this update: Fri 12 Jun 2026 23:02:25 +0000
Manifest next update: Sun 14 Jun 2026 00:49:25 +0000
Files and hashes: 1: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=)
2: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (hash: 4lOTuSgWqAmrfILSuLn7dSenYEngEl5ae3tNRsBed14=)
3: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: oZkZNoC3MrxBAcapAHBvkx3h/PIA8P0AJlLqZaRKkD4=)
4: 39332e39352e3131322e302f32342d3234203d3e20313534313332.roa (hash: X+hAqNzdKPOq+S7rLC3YDEE1/xfftKr31m0O1xfsUHE=)
5: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=)
6: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (hash: Yvn2hgfWBB67lUsg5bePvjQ1LejvgLP9iHpOC2lrTXg=)
7: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: FutqYRyHBMmN+0PD6TfHd0Z48pzfzxz1hCrgLY7AwAA=)
8: 39332e39352e3131372e302f32342d3234203d3e20313332333539.roa (hash: M5vwdteA6vgVGSkPPJNq/lGZgSs9KFCNf+KWBKR3xOo=)
9: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=)
10: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: wiR4lXrHDBacVR9rhY/OZ5EVnNOlMyR8f6ZVRqs7p88=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:8a:a5:10:97:f9:52:f9:c3:b7:34:25:1a:7c:b0:70:8c:ab:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jun 12 23:02:25 2026 GMT
Not After : Jun 14 00:49:25 2026 GMT
Subject: CN=F2A731A0FDF1B8E79B5755D96527DEC732B9B12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:45:df:b7:27:f0:b3:50:e8:bd:c8:fb:a0:
97:8d:0c:16:c5:db:d9:41:7f:d8:01:03:37:95:72:
48:5f:21:20:02:84:05:3b:0a:fc:e5:34:ca:b2:0e:
99:3e:1d:3b:e3:0c:dd:7c:e7:60:bf:ea:e9:13:b5:
5d:c8:c5:d1:07:36:f4:a2:c9:bf:58:a0:e1:a5:64:
23:40:02:7f:3f:f4:b7:99:62:1f:97:47:64:b1:cf:
06:71:cf:e5:5d:ec:d7:07:66:e8:61:53:82:71:6b:
a7:f7:52:50:42:e9:30:f0:4c:27:16:f7:cc:85:8d:
f5:9c:cc:59:ff:bb:e5:be:ee:b6:46:94:32:3d:de:
c7:a2:b6:3d:75:0f:e8:c0:80:c7:d8:3b:17:3e:d7:
30:4c:55:a3:76:10:b2:82:9d:82:87:9f:88:8b:fb:
c1:1a:9b:11:19:ec:79:e7:e0:9b:9b:6c:7b:92:83:
76:3f:cd:8e:2c:49:fe:e8:01:cd:a5:f5:8d:af:a6:
b8:42:31:d7:13:5f:e5:d9:82:ff:78:d5:85:da:d2:
25:76:84:b4:35:d7:b2:fd:a0:06:7c:70:cd:e2:e4:
52:aa:a8:3a:49:6d:20:4f:95:3d:c4:51:99:0b:6f:
ae:fa:c8:a0:0f:fe:16:ee:0f:40:7e:af:23:38:8d:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:31:A0:FD:F1:B8:E7:9B:57:55:D9:65:27:DE:C7:32:B9:B1:2A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:bd:4f:8f:48:77:78:7a:49:26:48:b1:8b:9e:4e:d8:34:c6:
e0:de:7f:e9:02:58:56:59:ec:19:7e:c8:be:ce:8c:94:94:69:
a2:ba:8b:f4:15:2e:2c:a5:49:af:26:6c:36:ff:4b:29:d5:20:
23:d4:ba:22:a9:83:bb:15:2a:02:b7:36:92:e6:e1:b6:10:73:
8c:2c:7b:a6:ff:29:f4:a4:b5:93:f0:25:04:91:95:5e:4f:d8:
da:24:59:69:ad:70:40:92:72:8e:fb:41:20:9e:72:b1:d8:58:
fd:e3:dd:b7:bd:ff:a0:12:89:cb:a3:df:a7:c7:c3:91:6d:08:
41:50:b4:7b:2f:0f:ba:ee:be:a4:3f:84:25:f3:9a:10:8f:81:
52:44:72:d6:48:69:ca:1d:ff:be:70:9b:63:8b:9f:fe:73:c3:
26:0e:71:38:0e:c7:01:4f:e1:12:3c:76:fb:49:7f:05:9e:67:
e1:f0:64:d6:03:93:fb:8a:c6:79:57:33:4a:e6:be:dc:c2:1c:
82:3c:49:28:26:be:18:6c:bf:23:69:72:37:e7:4a:37:ad:72:
db:6b:44:26:c5:29:5a:dd:7c:27:59:b5:1e:c6:2e:3a:ce:e1:
61:77:49:61:b8:84:ca:58:b9:46:db:ca:9e:94:46:a5:b3:62:
30:83:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:14 2026 by rpki-client