
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json)
Hash identifier: Z3+gXG6QIypuRKKt0Jn6/RczxI0Yh3iqnyf7b03QuP8=
Subject key identifier: 46:EB:D3:11:93:93:47:A8:1D:21:87:8E:3A:06:FF:D6:EB:FB:C4:5A
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 694266650F1B0E8CA4C0E68BE973E64732AAC674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
Manifest number: 025C
Signing time: Fri 12 Jun 2026 23:02:24 +0000
Manifest this update: Fri 12 Jun 2026 22:57:24 +0000
Manifest next update: Sun 14 Jun 2026 01:11:24 +0000
Files and hashes: 1: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: L177TKKEupyBPzfJZPARCKkhgnDjicDaQ1MDYfZL9Sw=)
2: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=)
3: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=)
4: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=)
5: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=)
6: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=)
7: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=)
8: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=)
9: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=)
10: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=)
11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=)
12: 3139342e3132342e3233342e302f32342d3234203d3e203632303638.roa (hash: VKu+iyAXdNGspkh1hqCECAzpccaJ3+JyjcRyNO0/DAw=)
13: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=)
14: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=)
15: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=)
16: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:42:66:65:0f:1b:0e:8c:a4:c0:e6:8b:e9:73:e6:47:32:aa:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Jun 12 22:57:24 2026 GMT
Not After : Jun 14 01:11:24 2026 GMT
Subject: CN=46EBD311939347A81D21878E3A06FFD6EBFBC45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:81:f0:d2:d9:cb:3b:85:1e:6e:ad:db:ea:
6c:ce:ee:83:3c:0f:8f:13:06:af:05:53:a0:a5:b3:
0c:6f:ce:b0:51:b9:93:c5:96:58:eb:34:1b:5f:4b:
d0:7c:dd:1b:be:87:67:97:cd:45:b2:1f:5c:f5:f4:
4f:2b:59:ad:00:17:94:5d:89:c8:4b:ad:0d:65:06:
4a:f1:44:50:93:b3:c6:37:8f:6d:aa:e1:24:2d:e1:
91:a6:ee:92:4f:8a:05:35:76:9d:e2:4f:03:78:91:
3a:4b:80:ab:72:8d:ba:26:72:9b:0d:78:c5:46:ca:
dd:02:f6:32:b5:2b:bd:72:98:4b:66:4f:b5:24:22:
16:89:24:24:a2:b0:be:43:32:63:ca:1b:e5:74:3b:
a0:11:b9:12:a8:af:51:71:a1:b4:e4:23:74:bc:57:
0f:9b:e5:db:ee:85:31:29:f2:6e:a5:90:5d:04:36:
e0:87:18:c7:f1:ab:cd:ca:84:c0:be:9b:ab:7b:11:
16:2b:a1:4f:ab:71:18:02:ee:30:f8:a8:08:3f:0b:
dd:10:be:54:17:c6:53:7d:b7:7a:03:9f:c6:af:23:
a8:f5:cb:ee:45:82:9e:19:c5:48:bf:5c:a6:1c:57:
6a:ee:fe:15:cd:28:db:f1:71:59:02:81:9f:2a:b6:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:D3:11:93:93:47:A8:1D:21:87:8E:3A:06:FF:D6:EB:FB:C4:5A
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:8c:f1:6a:68:7f:55:66:80:8c:92:a5:90:c1:90:1b:91:
fb:46:ab:06:ba:eb:5d:f3:6e:5e:5e:ca:d6:25:6e:f0:b7:6e:
24:7a:93:f8:21:c4:74:bd:5a:4a:f9:74:58:83:a2:b1:9c:93:
ea:f9:d2:09:6c:0e:cb:10:15:cc:e1:6d:5e:bf:9e:54:89:61:
f1:4d:11:f8:54:1e:28:66:64:ad:46:bc:e6:c4:6e:f5:2f:be:
6e:26:91:a4:e6:19:1a:33:9b:1b:92:83:69:94:2c:70:2a:6f:
45:4b:e8:ff:11:ce:25:af:ef:25:19:1a:c6:71:98:a2:7c:b3:
a6:02:0e:e0:c2:69:e6:b5:e9:7f:26:72:2e:bb:c1:fb:58:27:
4a:a5:55:92:f6:92:0e:85:4c:2c:ea:81:40:5b:1f:73:3b:e5:
a2:43:2c:72:d0:c1:88:80:7a:24:12:cb:c4:3e:a0:79:59:e3:
23:e0:24:db:f8:d9:de:7d:41:d4:43:27:eb:f4:4d:c1:2e:0f:
1c:74:7e:b2:f9:dd:89:77:b9:d6:75:13:81:fe:c2:0c:09:a8:
42:f8:a9:ee:6c:1c:4d:9e:f3:59:92:e0:e2:92:4a:c3:29:b6:
31:c1:3a:3c:2b:c2:9a:96:2b:cb:9e:6d:2d:74:7b:1d:eb:31:
27:75:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:29 2026 by rpki-client