
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier: FSI2MTXTDUy0DQJE7iTy9j0eX1hSKi8zq+1cYv+EM1E=
Subject key identifier: 76:01:61:49:38:62:77:1D:92:9A:4C:73:59:BF:2B:A3:D3:A9:A4:88
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 3BD3165CAF442CDFC50D3A441F8DE9E0B1FD7D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number: 025A
Signing time: Fri 12 Jun 2026 23:42:31 +0000
Manifest this update: Fri 12 Jun 2026 23:37:31 +0000
Manifest next update: Sun 14 Jun 2026 03:01:31 +0000
Files and hashes: 1: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: EPz3NDf4MUiCsCIJX6j6WRR5dWzB5Mggp/2xBlaSx7M=)
2: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=)
3: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=)
4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=)
5: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=)
6: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=)
7: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=)
8: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=)
9: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=)
10: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d3:16:5c:af:44:2c:df:c5:0d:3a:44:1f:8d:e9:e0:b1:fd:7d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: Jun 12 23:37:31 2026 GMT
Not After : Jun 14 03:01:31 2026 GMT
Subject: CN=760161493862771D929A4C7359BF2BA3D3A9A488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:97:af:2c:75:92:c1:75:6a:36:20:25:16:
48:af:e1:01:b0:92:f1:60:51:0c:36:82:76:a7:3e:
b4:0d:6e:bb:cb:08:01:31:83:6b:c9:b2:d4:dd:83:
3a:c1:60:4d:21:97:53:03:bf:be:35:08:6b:7e:39:
3b:5e:f8:04:07:9e:3f:64:83:81:ac:77:6e:e3:82:
da:2b:52:c6:44:7d:7c:4d:13:c4:ee:f3:ff:af:63:
75:42:a5:d9:bd:98:88:80:19:7f:5b:6c:72:ec:b3:
3d:cc:b1:e7:26:00:50:00:cb:f2:aa:3c:78:d0:66:
c2:34:d7:0a:13:96:75:08:70:b2:96:86:2d:1f:f2:
39:4e:44:c2:19:f9:eb:0d:53:bc:93:d2:9e:21:4b:
82:40:b5:1a:ef:77:5b:05:52:20:7d:4e:5b:d4:09:
c2:43:04:bf:2a:ee:85:33:a0:75:09:05:70:50:6d:
4d:04:21:49:a0:1a:b1:7f:bc:07:c0:30:6f:c7:a2:
be:cb:14:53:5a:3b:7a:21:7b:5c:3c:b3:1d:dc:23:
37:00:75:3c:29:8a:05:76:0e:b9:81:ad:6e:38:af:
e9:df:f0:21:00:ba:ac:6c:43:93:08:5a:48:98:91:
59:54:da:d9:a3:9b:31:85:9f:77:f8:6f:70:d7:40:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:61:49:38:62:77:1D:92:9A:4C:73:59:BF:2B:A3:D3:A9:A4:88
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:d9:ae:40:31:62:50:42:54:9d:91:f6:fc:5d:e1:f8:f8:
be:f8:46:94:9d:e7:8e:84:40:08:bb:7f:b3:6b:32:4d:e0:c5:
83:56:d0:85:57:25:8d:6f:74:a5:d0:b0:34:0a:c6:56:c8:33:
bc:a6:77:c3:7b:ab:54:7a:84:1d:d6:0a:d3:cc:a4:86:7b:8d:
c7:9a:1f:fc:4a:51:30:da:b4:77:d3:ee:d4:60:05:26:27:c3:
4d:4d:cd:00:51:9e:0e:0d:2c:f5:80:e2:10:d8:27:c2:a1:91:
25:08:63:59:17:ed:d0:3d:45:cf:e9:53:94:11:b5:87:ad:82:
2d:f9:33:13:58:ad:54:68:a8:be:7b:89:db:4c:01:a9:1c:b6:
50:d7:7c:af:dd:ba:6b:f6:3d:71:11:7e:3a:96:86:f6:e3:5d:
87:87:7b:d6:60:78:28:ad:a8:1f:40:ee:f6:9f:d9:04:72:74:
df:10:53:5a:cb:07:70:23:18:dd:09:62:7a:5d:7e:7c:59:ae:
0c:92:ad:38:6b:b8:4d:c1:b0:5b:cb:72:d8:6a:72:dc:0a:a6:
e6:3a:ef:09:02:e9:9c:e0:66:c9:f4:40:1c:e3:de:cd:9f:cb:
1c:fd:c1:3b:15:7b:29:ee:3f:66:db:73:70:4b:ec:a8:27:9f:
df:b6:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:17 2026 by rpki-client