
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
File: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft (raw, json)
Hash identifier: lW7hVFCCnaYRaiNSPJZ3sTTXMmdevzPb7xWRrplQGJE=
Subject key identifier: 51:C9:00:CC:7A:2B:13:7D:3D:32:6A:DC:63:B6:C5:B9:ED:A2:B0:78
Authority key identifier: EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE
Certificate issuer: /CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
Certificate serial: 07C835A914E3B3AFF006F7F5D9658AD539025A4D
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
Manifest number: 2C
Signing time: Wed 29 Jul 2026 01:43:15 +0000
Manifest this update: Wed 29 Jul 2026 01:38:15 +0000
Manifest next update: Thu 30 Jul 2026 02:18:15 +0000
Files and hashes: 1: 326130623a346530373a323930343a3a2f34372d3438203d3e20323139343538.roa (hash: KRlxFqHowZdaTNViCJhErb//DfzqvDoHewWZPqKtCkA=)
2: 326130623a346530373a323930663a3a2f34382d3438203d3e20323139343538.roa (hash: QdWdCYMQ1B0FZjXFRDlUNhMGI8TuC2nx+5W/1E5RsMo=)
3: 326130623a346530373a323930303a3a2f34382d3438203d3e20323139343538.roa (hash: mDjQQXF1v1WMqSeOU6+LNJClsgR6yYGDAu/LFfF+GPM=)
4: 326130623a346530373a323931303a3a2f34382d3438203d3e20323139343538.roa (hash: 9GeXEaD9Ha5SPI5oBieu1S85PeA/oPrJ9T28WW3r65g=)
5: EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl (hash: ig8iFxwMnvK/8WrMEmKT6UQr2cMwf0oF88Pw0JCFmK4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:c8:35:a9:14:e3:b3:af:f0:06:f7:f5:d9:65:8a:d5:39:02:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFB5DF076CDF062294B12C302E75D57EFCD7F7CE
Validity
Not Before: Jul 29 01:38:15 2026 GMT
Not After : Jul 30 02:18:15 2026 GMT
Subject: CN=51C900CC7A2B137D3D326ADC63B6C5B9EDA2B078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:91:91:5a:7b:f9:6c:77:02:80:da:62:be:
df:b0:0b:65:15:ab:73:f0:8a:1b:08:ce:cb:0b:cf:
b5:60:99:e1:81:6c:85:a0:8f:f6:9b:41:8c:4b:ff:
f2:de:60:71:fb:15:90:5e:0a:7c:d3:fd:30:50:94:
7b:10:e9:1a:71:bf:a0:ea:03:bf:aa:08:a7:37:c8:
37:89:f1:68:16:81:51:a5:ce:23:74:1c:3e:33:5a:
0e:22:86:d7:6d:b6:88:a4:4b:e0:f7:83:ff:c9:a2:
f0:9b:e5:8d:38:57:85:96:ea:ab:5c:3e:b7:e5:b4:
a4:3d:ff:4e:c2:fc:4c:f5:9e:02:ba:99:88:1e:92:
a0:cd:24:52:62:a4:40:ad:9f:53:08:0c:c5:50:54:
f8:35:bc:43:18:62:29:14:d2:b1:3f:39:41:80:4f:
29:4a:a0:31:07:87:d4:93:13:9c:e3:93:b2:23:aa:
b5:4a:1d:ed:ae:2a:17:d3:07:86:ae:02:0e:65:27:
1e:4b:a1:5d:87:55:7d:88:1e:15:5c:f3:0d:08:15:
8e:27:a6:d6:9a:55:48:61:f6:99:25:7a:dc:30:de:
8c:2f:05:d3:b2:51:d8:99:89:28:f4:7f:f2:0e:3a:
71:ad:f7:84:c5:d3:6c:0b:ca:73:f2:60:b3:69:6a:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:00:CC:7A:2B:13:7D:3D:32:6A:DC:63:B6:C5:B9:ED:A2:B0:78
X509v3 Authority Key Identifier:
keyid:EF:B5:DF:07:6C:DF:06:22:94:B1:2C:30:2E:75:D5:7E:FC:D7:F7:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/1/EFB5DF076CDF062294B12C302E75D57EFCD7F7CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:96:ad:8f:85:5f:c8:bf:8e:04:0f:64:ad:5d:81:b1:05:d5:
ad:9f:4b:a0:26:b1:3e:4b:78:d2:b3:ba:21:b7:80:8a:eb:c0:
63:63:f8:20:84:ab:76:77:a7:a0:e5:92:c8:1e:af:b5:fb:54:
cd:a0:ff:78:e6:29:ae:9d:bc:ce:54:f1:c5:2c:08:78:a0:50:
f2:b3:9f:9d:6f:cf:38:99:9e:e1:e3:14:d7:48:0b:fb:54:26:
7d:a8:2f:95:0f:d2:fc:5e:f2:a4:51:92:3d:38:c8:89:32:24:
d2:87:be:4c:d1:31:da:04:a1:94:c1:1c:e1:b4:eb:50:f9:c7:
bc:9d:90:47:4b:73:1a:ca:6b:7d:ca:96:75:43:b2:35:18:07:
76:b1:0f:b6:84:df:30:ec:5f:0b:57:a1:af:ca:9f:15:d1:eb:
c2:65:0a:95:a7:8c:60:8a:b4:a9:d0:5c:04:b0:2d:bb:dc:4b:
67:70:ad:13:5c:9f:3c:68:52:6f:c7:0b:cb:5f:3b:12:07:1d:
6d:41:67:45:12:27:02:2d:40:5e:54:7e:60:a7:54:63:8c:af:
ab:eb:e9:79:ce:dc:ff:d2:45:28:83:c6:af:d5:85:f2:3b:96:
29:9a:84:7d:3b:0c:b8:65:6a:b3:a2:b1:93:3d:84:5a:cb:30:
08:63:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:14 2026 by rpki-client