
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
File: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft (raw, json)
Hash identifier: PsFjv2QD6B9VApcnotoNFE9olUDbNJ9p0cEBUFk2jCI=
Subject key identifier: 62:40:1B:2F:40:8A:FB:CA:02:B8:E2:DD:36:58:7C:C2:F7:D6:AF:34
Authority key identifier: A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
Certificate issuer: /CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694
Certificate serial: 55D32765B2F16982D2C806ED764B4D88DFAD3CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
Manifest number: 79
Signing time: Tue 28 Jul 2026 11:48:41 +0000
Manifest this update: Tue 28 Jul 2026 11:43:41 +0000
Manifest next update: Wed 29 Jul 2026 15:41:41 +0000
Files and hashes: 1: A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl (hash: iDCjHvihVvTlek4svu7laH4fKYgJXKNU3o1D9wwk0fg=)
2: 3139342e36322e3131342e302f32342d3234203d3e20323133323739.roa (hash: BnIaV5FiLeRJIhLXFhxINY2zPA6qV+k77tjzHgdIj+w=)
3: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: pEcoX+Tc0xOxgJ55vOp1eqI0XlRh+h6vJeMxfEC5Z5g=)
4: AS213279.asa (hash: 40hLQBUiXUPHSvWyFQPme4bAikEMDsrUBrQ4Icz5KX8=)
5: 326131343a623430303a3a2f33312d3331203d3e2030.roa (hash: TSZA08L1jZT+5Qa9xo1wIebR2Ro2rcIanRIxNUOMcd0=)
6: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: qNVwAoNW+7s0+MjZgIZI2Rwnidleg3JKmPVxodfFqdI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d3:27:65:b2:f1:69:82:d2:c8:06:ed:76:4b:4d:88:df:ad:3c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e4de695d846c0e5864e4c865d9bd5e80e5f694
Validity
Not Before: Jul 28 11:43:41 2026 GMT
Not After : Jul 29 15:41:41 2026 GMT
Subject: CN=62401B2F408AFBCA02B8E2DD36587CC2F7D6AF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:cf:f4:90:95:c5:ba:4d:27:b8:4a:34:34:
16:c6:9f:6b:dd:0c:8d:3b:e0:8a:80:22:63:fe:37:
f7:e3:2a:d3:e2:74:07:21:d1:7f:ab:a7:c6:32:54:
9c:3e:1a:21:b2:18:86:d2:58:8f:36:70:ac:0a:a0:
78:50:94:ed:22:e0:d2:1e:7b:e3:51:18:b6:36:8d:
d6:e8:18:26:43:cc:f9:31:fd:6a:4b:93:cf:37:2f:
5e:5b:d8:3c:d5:f9:3e:8a:33:e4:4f:0b:ab:e5:e2:
b8:57:00:51:27:9e:c4:90:83:bd:4b:67:12:55:8c:
ea:3b:44:98:50:8f:63:be:3d:fa:82:c5:b3:89:e4:
31:bc:3b:1a:b0:e0:6d:86:16:be:d3:70:6b:fe:bb:
d5:45:c3:84:df:13:9c:86:cb:c3:b4:a9:18:f0:31:
52:ba:0d:ec:55:65:49:55:fb:df:e6:c7:fd:05:1e:
87:01:69:7d:2a:b2:f1:a6:07:fb:02:c8:15:80:79:
22:dd:ad:80:81:91:a3:2a:b6:a9:31:64:2b:da:eb:
d5:52:fe:20:86:f9:35:d5:17:ef:bc:22:cf:ae:8e:
3d:a5:13:88:bd:ef:e2:55:e0:2d:8c:73:34:59:b7:
a1:86:51:15:44:d6:89:0c:41:c9:9a:9a:d5:32:01:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:1B:2F:40:8A:FB:CA:02:B8:E2:DD:36:58:7C:C2:F7:D6:AF:34
X509v3 Authority Key Identifier:
keyid:A1:E4:DE:69:5D:84:6C:0E:58:64:E4:C8:65:D9:BD:5E:80:E5:F6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeTeaV2EbA5YZOTIZdm9XoDl9pQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5df7bba-6d8c-49e9-bbe3-c525f53d4206/1/A1E4DE695D846C0E5864E4C865D9BD5E80E5F694.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:42:73:be:ec:44:08:8c:79:65:9f:40:a0:65:c2:12:bd:
42:f5:66:c8:37:e7:08:8c:fa:f4:90:dc:ce:21:6f:30:ab:13:
f4:2c:2f:b4:d1:fe:46:16:da:d5:b1:5b:21:f7:af:44:df:9c:
ab:af:a2:14:fb:b9:b1:9a:42:57:cc:60:6b:92:50:bf:d3:68:
91:66:b4:c6:b7:25:82:22:a1:89:27:75:6e:64:64:b4:ce:0d:
69:87:92:b7:d3:be:23:07:f6:43:74:40:16:26:09:b4:cd:25:
6b:21:c9:1a:e2:c7:4c:69:fd:a8:a3:63:5d:d1:a9:9b:92:83:
f5:62:55:5c:19:24:01:3a:74:9c:46:d7:b6:d4:5a:53:74:24:
66:db:31:55:ab:2e:23:ba:74:7e:72:50:f2:35:3b:be:da:6f:
c2:fa:7b:00:b9:ef:f6:f9:1e:1b:4d:38:a8:52:43:cf:5b:e3:
ad:58:95:66:94:ff:da:1d:56:bc:2c:8e:39:c1:34:a6:8c:02:
5e:d0:5b:22:c2:69:7f:34:12:ed:fa:25:34:d7:c2:a8:3c:64:
ce:67:8d:a7:c9:65:2d:ef:d6:a7:be:a5:23:c6:c6:98:f1:31:
2f:4b:b7:71:b1:3a:fa:87:20:1a:23:5b:c3:d1:1a:3f:49:a2:
43:a4:06:d9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVdMnZbLxaYLSyAbtdktNiN+tPNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTFlNGRlNjk1ZDg0NmMwZTU4NjRlNGM4NjVkOWJkNWU4
MGU1ZjY5NDAeFw0yNjA3MjgxMTQzNDFaFw0yNjA3MjkxNTQxNDFaMDMxMTAvBgNV
BAMTKDYyNDAxQjJGNDA4QUZCQ0EwMkI4RTJERDM2NTg3Q0MyRjdENkFGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOs/0kJXFuk0nuEo0NBbGn2vd
DI074IqAImP+N/fjKtPidAch0X+rp8YyVJw+GiGyGIbSWI82cKwKoHhQlO0i4NIe
e+NRGLY2jdboGCZDzPkx/WpLk883L15b2DzV+T6KM+RPC6vl4rhXAFEnnsSQg71L
ZxJVjOo7RJhQj2O+PfqCxbOJ5DG8Oxqw4G2GFr7TcGv+u9VFw4TfE5yGy8O0qRjw
MVK6DexVZUlV+9/mx/0FHocBaX0qsvGmB/sCyBWAeSLdrYCBkaMqtqkxZCva69VS
/iCG+TXVF++8Is+ujj2lE4i97+JV4C2MczRZt6GGURVE1okMQcmamtUyAQKdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYkAbL0CK+8oCuOLdNlh8wvfWrzQwHwYDVR0j
BBgwFoAUoeTeaV2EbA5YZOTIZdm9XoDl9pQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkZjdiYmEtNmQ4Yy00OWU5LWJiZTMtYzUyNWY1M2Q0
MjA2LzEvQTFFNERFNjk1RDg0NkMwRTU4NjRFNEM4NjVEOUJENUU4MEU1RjY5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29lVGVhVjJFYkE1WVpPVElaZG05WG9E
bDlwUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWRmN2JiYS02
ZDhjLTQ5ZTktYmJlMy1jNTI1ZjUzZDQyMDYvMS9BMUU0REU2OTVEODQ2QzBFNTg2
NEU0Qzg2NUQ5QkQ1RTgwRTVGNjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+9Cc77sRAiMeWWfQKBl
whK9QvVmyDfnCIz69JDcziFvMKsT9CwvtNH+Rhba1bFbIfevRN+cq6+iFPu5sZpC
V8xga5JQv9NokWa0xrclgiKhiSd1bmRktM4NaYeSt9O+Iwf2Q3RAFiYJtM0layHJ
GuLHTGn9qKNjXdGpm5KD9WJVXBkkATp0nEbXttRaU3QkZtsxVasuI7p0fnJQ8jU7
vtpvwvp7ALnv9vkeG004qFJDz1vjrViVZpT/2h1WvCyOOcE0powCXtBbIsJpfzQS
7folNNfCqDxkzmeNp8llLe/Wp76lI8bGmPExL0u3cbE6+ocgGiNbw9EaP0miQ6QG
2Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:40 2026 by rpki-client