
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier: 9PhrErAjWuBwAlwgKziO8NhUMQ3x/wjzR+cmH2TNy1M=
Subject key identifier: B4:48:DE:20:F0:14:FB:24:E5:8C:8A:0B:E1:94:8E:BF:7F:46:A0:08
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial: 19C14F0E78B6FFB603C009F2F16F0BFA42DA7568
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number: 0235
Signing time: Sat 26 Sep 2026 02:46:04 +0000
Manifest this update: Sat 26 Sep 2026 02:41:04 +0000
Manifest next update: Sun 27 Sep 2026 03:29:04 +0000
Files and hashes: 1: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=)
2: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: PWE5971C7QuLNwwp3st4YltR0tvfMKcd2CD25VQDDXc=)
3: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=)
4: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=)
5: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=)
6: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=)
7: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=)
8: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=)
9: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=)
10: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=)
11: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=)
12: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=)
13: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: ipHKh5YmoPitk70rd0W7ChT20zfwqYKsJpV0H80LQvo=)
14: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=)
15: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=)
16: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=)
17: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c1:4f:0e:78:b6:ff:b6:03:c0:09:f2:f1:6f:0b:fa:42:da:75:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Validity
Not Before: Sep 26 02:41:04 2026 GMT
Not After : Sep 27 03:29:04 2026 GMT
Subject: CN=B448DE20F014FB24E58C8A0BE1948EBF7F46A008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:ad:b2:b4:4c:e6:0e:27:de:97:34:94:3c:
f9:35:f1:93:bb:8c:86:58:bf:a0:a5:b2:12:80:50:
c0:20:75:e3:31:79:2d:bf:04:c4:2c:a2:2e:a7:87:
ab:f8:a4:1a:80:99:4b:19:67:6f:d3:70:b7:4e:13:
13:a2:3c:01:71:a8:ad:92:71:dc:52:05:b0:88:8a:
ad:88:42:b0:cc:be:ad:96:34:e4:19:08:ff:74:df:
1d:71:0f:47:de:f6:d4:8c:b1:e6:d7:3d:0f:46:47:
9c:68:b2:3b:5c:66:be:68:60:12:4c:fb:5f:a7:28:
9d:40:c7:17:ad:c3:68:76:b8:62:ca:20:4f:ff:3c:
ec:dc:f2:87:84:99:30:c5:41:d0:f0:12:e1:11:1d:
ff:5d:54:45:99:74:ee:35:97:31:1d:2f:f2:01:ad:
4d:b6:29:20:dc:9a:bc:bc:b5:c9:da:80:ef:7c:27:
a0:8e:de:78:bc:3b:b2:3f:52:3f:e6:e7:c1:95:e9:
a1:75:01:8a:e7:d7:ac:d1:3e:e6:e7:94:b7:6b:b7:
83:aa:8b:0d:2f:35:0a:f6:c5:c1:9f:bf:83:ca:10:
5d:38:f5:0e:f8:12:c4:a5:50:21:3d:ea:e8:f7:e8:
94:f4:d8:24:08:d7:bf:74:ee:77:79:2e:17:95:d4:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:DE:20:F0:14:FB:24:E5:8C:8A:0B:E1:94:8E:BF:7F:46:A0:08
X509v3 Authority Key Identifier:
keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:f6:f1:d6:8a:b7:b0:10:64:b1:55:ab:1a:c3:9d:fd:22:
1d:d1:c2:b9:a3:6b:bd:eb:60:c6:00:3a:78:83:ee:75:2e:62:
bf:ce:90:d1:07:ab:ec:95:5f:87:3d:0f:1c:f2:c6:62:6e:41:
30:12:93:57:17:5a:5b:ba:4e:5e:56:70:54:ec:e4:11:c1:d2:
c7:2c:7a:a9:8e:7b:77:6f:bd:39:6d:fe:c3:66:79:38:64:7a:
b3:ff:ed:5f:be:e5:67:9a:fb:15:78:db:b7:bf:05:22:a9:e6:
89:95:04:ff:0a:22:88:86:7b:c1:98:2a:6c:33:61:23:60:98:
49:b6:3b:b7:b1:bd:63:f5:36:bf:7f:a3:99:de:a8:c7:dc:be:
47:32:2f:73:b2:e8:aa:36:d7:a1:e1:7c:b0:95:9a:30:88:81:
1c:f2:b8:1d:fd:9a:71:b3:f1:c4:81:d1:2d:cc:0a:cd:4e:5a:
1e:20:84:f5:4c:5e:f8:14:56:45:8e:9d:d6:20:3f:16:9b:1a:
32:0b:ab:6c:94:b6:72:46:41:22:67:b9:75:bc:d9:07:f9:57:
c3:8a:fd:d8:3b:59:49:34:7b:25:f4:08:3d:1d:cb:16:f8:6f:
83:63:1e:4e:a2:a2:2f:01:06:0f:32:99:10:6e:2f:87:4d:c1:
58:e6:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:31:26 2026 by rpki-client