
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json)
Hash identifier: gS1TIscZcIGPlA81lB/t1kraP1G3Q805w57TxU0FUFw=
Subject key identifier: C3:5E:92:F2:0F:92:BF:43:FD:7A:71:6F:95:DC:8E:9B:2D:6B:6D:D9
Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Certificate serial: 619BA3FBA3DAB6F7E9ED8A9F976D45F144C525F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
Manifest number: BD
Signing time: Wed 17 Jun 2026 10:33:20 +0000
Manifest this update: Wed 17 Jun 2026 10:28:20 +0000
Manifest next update: Thu 18 Jun 2026 11:34:20 +0000
Files and hashes: 1: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: mo2cfpBIAGKg9J/u2gL/i3uxtfn2eCj0UkJwl23oz8g=)
2: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (hash: LLqjEp0OclrSlskg2I6XUCzelmtApYaUU2NWogCCo1E=)
3: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: wiquf0s0IJhUqNIZK/NhS15qBu64R1irAIQEbqDWqWw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9b:a3:fb:a3:da:b6:f7:e9:ed:8a:9f:97:6d:45:f1:44:c5:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Validity
Not Before: Jun 17 10:28:20 2026 GMT
Not After : Jun 18 11:34:20 2026 GMT
Subject: CN=C35E92F20F92BF43FD7A716F95DC8E9B2D6B6DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:80:2e:41:6f:53:c3:60:7a:fa:c8:48:f7:
d3:ad:f9:87:1e:eb:fc:c0:c5:d4:16:75:af:5e:7b:
30:dc:9e:4e:6a:56:13:47:8a:bf:28:0b:cf:f4:6c:
b7:d6:01:ef:91:54:79:9c:42:c1:15:ad:7c:23:a8:
79:07:10:ca:6b:fd:6d:c9:ae:b0:5a:fe:4d:e7:8b:
c7:3e:ca:f3:bd:65:65:97:68:11:ce:26:39:b0:d0:
1f:31:6c:29:06:47:1d:9b:b5:4f:47:a6:83:02:a9:
10:b3:22:a2:27:d3:94:d9:73:d3:c1:a6:f9:15:2a:
dd:69:d9:f8:96:8d:1b:91:40:c4:33:13:86:31:3c:
6f:7a:9b:8b:58:92:01:77:52:15:4e:99:9d:91:85:
b2:1b:54:c2:42:79:29:1c:fc:4c:e1:d0:7f:69:0c:
d9:0d:9e:9d:f9:fd:5d:c0:94:0b:a7:8f:79:71:02:
34:40:59:28:ed:26:4f:fa:ff:11:86:e3:46:10:f8:
4a:45:04:7e:ff:31:66:8e:31:50:61:67:92:cb:b3:
c2:de:88:da:48:ac:cf:64:55:82:5c:13:3e:8d:dd:
a9:0c:7d:f8:7f:b4:38:57:ce:67:56:86:27:58:e6:
83:6d:f9:7e:5a:41:a5:f2:14:6d:3b:b0:f1:2f:39:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:92:F2:0F:92:BF:43:FD:7A:71:6F:95:DC:8E:9B:2D:6B:6D:D9
X509v3 Authority Key Identifier:
keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b8:22:3e:a3:1d:3e:fd:ee:8f:99:0f:eb:79:98:40:be:31:
a4:3c:0f:91:98:ba:2f:66:1a:53:91:e6:55:cb:d4:eb:9c:c7:
55:0d:2d:af:33:2c:3c:ed:41:f2:0e:eb:b6:19:11:c1:20:23:
d1:96:56:5c:44:cc:ee:f9:e4:eb:49:eb:3c:2c:a5:7b:8a:a9:
37:2a:a6:8c:11:de:2c:26:50:43:95:56:0d:59:34:d5:a4:46:
ab:91:5f:84:36:da:53:0b:6a:3d:df:d2:2b:a8:e5:a6:3e:ab:
88:41:5a:f2:fe:29:d5:01:3c:53:37:dc:7b:bb:f9:d1:4b:83:
48:f8:bd:31:7d:f5:6c:43:20:14:f8:2e:6b:f2:d9:aa:3e:72:
ad:2f:cc:9f:3e:fe:37:77:90:6e:db:76:49:ab:13:26:dd:04:
e7:c2:9a:dd:4e:5f:42:e4:18:c0:c7:f9:c7:de:d8:65:f1:2b:
0b:0c:05:57:3d:3e:38:26:9e:20:4b:65:88:3c:57:d8:a1:bd:
39:28:55:13:00:30:96:fc:ae:40:be:1c:96:cd:46:c0:fe:24:
24:91:54:c4:80:88:da:88:5c:be:2a:2d:09:12:68:87:58:10:
f5:cc:74:9f:3b:d5:f8:03:74:f8:ce:c1:7f:ff:2f:fc:91:2a:
10:09:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:07:48 2026 by rpki-client