
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier: VHRZExDr23rGcCzJ6j96RLQLqWqFISBId0ynjrnjskM=
Subject key identifier: 4A:A6:F9:9C:F3:15:55:F3:15:B4:94:87:E4:FD:7A:EB:28:86:D4:2A
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial: 1751D3FB4C64BFBE4C61F8CED3B4C1FA22816FFD
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number: 011F
Signing time: Sun 22 Feb 2026 04:09:55 +0000
Manifest this update: Sun 22 Feb 2026 04:04:55 +0000
Manifest next update: Mon 23 Feb 2026 07:09:55 +0000
Files and hashes: 1: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=)
2: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=)
3: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=)
4: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=)
5: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=)
6: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=)
7: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=)
8: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: h1/wyuucMymdNRaRsWFFIr0AgOIEhN/+c29yQ9EVyIA=)
9: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=)
10: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=)
11: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=)
12: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=)
13: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=)
14: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=)
15: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=)
16: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=)
17: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:51:d3:fb:4c:64:bf:be:4c:61:f8:ce:d3:b4:c1:fa:22:81:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Validity
Not Before: Feb 22 04:04:55 2026 GMT
Not After : Feb 23 07:09:55 2026 GMT
Subject: CN=4AA6F99CF31555F315B49487E4FD7AEB2886D42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e4:ef:f9:9f:19:be:c8:33:ab:02:52:82:27:
c0:80:3e:fa:e5:72:46:66:04:d0:e6:64:9b:51:50:
d0:d8:ee:c6:77:be:f0:83:ac:45:56:ec:41:c0:30:
ad:a5:cf:3d:5e:a6:ba:35:a8:8c:74:0c:cd:c3:60:
d2:b2:8e:ef:7c:13:fa:2f:aa:30:6e:cd:df:3e:cb:
86:66:7c:e0:e4:29:e8:35:c5:1a:f2:e2:a8:84:69:
b6:ed:b8:a1:fe:7c:8d:a0:c9:2b:2c:04:54:cd:65:
de:ce:00:e9:1e:02:13:0e:48:14:7f:38:db:f3:0c:
88:63:52:b8:36:c3:2b:2f:72:92:23:33:3d:b4:e9:
f4:25:81:98:ab:9f:02:8e:ab:b8:66:2c:a1:2b:0c:
b5:2b:56:02:39:a0:58:70:57:4a:90:e7:ec:3f:90:
91:33:fd:f0:b5:cd:c9:7d:99:d9:36:38:cc:51:aa:
06:06:fc:8f:29:4a:6e:61:a9:e1:60:fd:27:cd:85:
3b:25:f5:08:dc:52:01:85:a0:ea:42:fa:b7:c1:7b:
af:e8:aa:ba:a0:1c:29:62:4f:36:34:0f:36:b2:3a:
c5:3c:94:34:34:01:e3:ba:72:c4:c8:75:32:f6:6b:
1c:f0:83:87:a7:59:54:b5:7e:de:cd:0a:db:4c:43:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:F9:9C:F3:15:55:F3:15:B4:94:87:E4:FD:7A:EB:28:86:D4:2A
X509v3 Authority Key Identifier:
keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ac:4e:b6:d2:a6:22:d7:1e:4b:b4:12:d8:10:56:73:29:3e:
ed:10:86:95:5c:09:00:77:26:b9:cb:96:28:5b:2c:5d:02:3b:
65:5a:8d:d3:34:d7:7b:ec:33:f2:31:66:88:02:7d:3c:9a:77:
49:4a:19:a1:f9:d5:e6:58:3e:41:7d:7d:27:52:01:7f:4c:76:
f6:f9:f2:93:de:96:1b:67:97:75:68:da:f9:11:6b:f3:fb:2f:
de:8a:3d:41:05:4e:4b:be:50:49:41:df:71:85:00:f3:8b:b9:
4f:36:79:b5:ea:48:4f:df:c5:57:ff:b8:11:b7:86:5d:27:38:
90:69:9c:99:e6:13:14:1a:e3:62:fb:15:34:8b:51:dc:d2:fc:
a9:f0:64:88:ed:70:7e:84:3d:d6:61:66:fe:fe:b3:14:02:74:
91:c6:cc:70:4a:3b:15:00:49:55:d6:99:d2:0e:f1:37:69:09:
a1:0a:f2:94:0e:4b:4e:b9:f4:23:f9:c2:64:07:42:df:5e:35:
ae:0f:9b:7d:94:e3:6a:23:2f:e3:f0:dd:dc:cf:45:44:04:95:
ed:0d:a2:07:0c:68:43:21:79:35:9b:c3:75:25:b5:5a:23:18:
01:57:d4:e6:7c:47:fb:38:1a:33:29:93:66:d4:45:3b:73:5a:
ec:e5:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:13 2026 by rpki-client