
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: xi0ZhaZE8QW3l1AAB0h1rcfXVyGPpkNb6qm3RVK7X5s=
Subject key identifier: A3:5E:F4:99:97:0A:D4:C9:2C:0A:F4:4E:0B:A1:37:AD:1F:22:1F:AF
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 57E7A77956AF2FF4AC6B48B0544EF3E99832CA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0284
Signing time: Thu 16 Apr 2026 22:39:20 +0000
Manifest this update: Thu 16 Apr 2026 22:34:20 +0000
Manifest next update: Sat 18 Apr 2026 01:43:20 +0000
Files and hashes: 1: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
2: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
3: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
4: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: T9kysQYXtpCCN65P2t8hJPSt3o0hIXQFGMVQSNjnClk=)
5: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
6: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
7: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
8: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
9: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
10: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
11: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
12: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
13: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
14: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
15: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
16: AS215248.asa (hash: gSIlCwlw8JO7fhHcwb3U8PAw9UJCYWeXxNRBGMYW6JM=)
17: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
18: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
19: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e7:a7:79:56:af:2f:f4:ac:6b:48:b0:54:4e:f3:e9:98:32:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Apr 16 22:34:20 2026 GMT
Not After : Apr 18 01:43:20 2026 GMT
Subject: CN=A35EF499970AD4C92C0AF44E0BA137AD1F221FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:30:d5:c7:63:ad:4d:9e:72:6c:d3:69:47:
4f:b8:99:46:17:2e:5d:a5:a0:85:1f:b8:0b:e0:12:
4f:c7:d5:0e:e1:c8:cc:bb:24:77:0c:f3:31:79:8d:
9e:08:5f:bb:ad:76:03:c2:90:3d:55:a8:d7:3d:80:
8a:bf:27:ab:0b:a5:66:2f:7d:b4:92:36:96:04:6b:
2a:85:56:16:95:4d:fe:38:4e:31:72:81:9b:ec:41:
0a:d3:0e:71:c2:c1:77:f9:18:8c:48:1b:47:68:1c:
02:1e:e3:b1:3d:94:32:4c:1d:f1:d4:ac:f0:38:79:
61:93:04:de:90:9e:72:5d:72:a2:d1:a6:f9:60:47:
90:32:a7:8c:0b:f3:7b:cb:77:0a:1c:a5:0b:86:dd:
b0:a2:d5:1d:f2:87:27:9e:ff:33:47:6c:ad:9b:dd:
c0:e9:2f:3f:58:a0:e1:b8:4c:6b:4b:b4:a6:8e:e0:
10:09:bb:81:ee:41:89:76:d4:e6:14:c9:7e:3b:11:
b7:78:98:7a:4d:44:47:42:0c:ec:aa:b9:b6:96:92:
e5:0d:5d:b1:7f:17:a6:bb:52:94:02:60:bc:bb:74:
d7:1c:ce:c2:b2:58:4e:53:84:ea:a5:09:df:26:f3:
a7:d2:e9:d8:69:3e:00:98:b5:ca:13:d4:ae:12:a4:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5E:F4:99:97:0A:D4:C9:2C:0A:F4:4E:0B:A1:37:AD:1F:22:1F:AF
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:00:d1:cb:f4:f2:89:af:57:a6:15:36:03:db:be:39:87:8d:
60:dd:a3:a0:09:08:68:09:72:b0:3a:15:62:a2:e2:05:42:2a:
05:83:61:4e:63:f2:39:a1:a5:0f:48:7e:48:7c:e4:9d:4d:75:
5d:6a:18:42:ee:50:cf:71:38:b5:89:1f:b3:a7:9b:a9:76:f5:
a0:f6:6f:8b:36:18:cf:18:5a:2f:92:cc:7f:de:8e:36:21:c9:
70:57:91:4f:29:01:42:21:09:2d:0d:bb:92:db:00:f4:bc:ce:
d1:3a:bd:4c:2e:c9:ca:01:05:51:af:77:1a:b5:95:a1:0d:75:
d5:f1:5c:84:c5:8c:00:52:a7:1f:13:91:43:7d:84:4e:7a:64:
52:4f:4a:0e:2c:81:da:64:f0:be:58:1b:80:70:b1:32:df:82:
bf:39:a7:ef:53:36:fc:b7:f0:48:e2:ff:e3:63:07:24:15:e4:
04:ae:17:95:8d:18:35:3f:40:3d:1c:58:7b:10:09:12:3c:8e:
7c:a7:08:a5:78:4e:a4:71:4f:6c:a0:a7:e7:cd:2c:e2:6c:cf:
3e:16:10:de:d2:c7:37:93:ac:06:5c:ac:d2:92:ff:94:bc:91:
c3:4b:a6:c6:da:d6:84:53:c3:89:df:80:aa:6a:5c:80:64:31:
d3:1f:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:36:46 2026 by rpki-client