
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: kef3+mgzHOMJS7L05lFB1F46x43amJb0iYWIasZfH18=
Subject key identifier: 2F:27:9C:E8:A9:17:2E:39:57:CE:C1:3B:88:46:41:60:1D:AD:71:39
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 42D04632A99D77F4F68FDDE4882127418061086A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 02DC
Signing time: Sat 13 Jun 2026 07:49:01 +0000
Manifest this update: Sat 13 Jun 2026 07:44:01 +0000
Manifest next update: Sun 14 Jun 2026 10:25:01 +0000
Files and hashes: 1: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
2: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
3: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
4: AS215248.asa (hash: djW0TkIdr/r+xg3nC+ND17K5oQraA7r7jJN++ZM1GRE=)
5: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
6: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: Tb7QkwdaEPisbRvI8PWFtDkz+Va9Ip8+CmtuXjuoBZ8=)
7: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
8: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
9: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
10: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
11: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
12: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
13: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
14: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
15: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
16: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
17: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
18: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
19: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d0:46:32:a9:9d:77:f4:f6:8f:dd:e4:88:21:27:41:80:61:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jun 13 07:44:01 2026 GMT
Not After : Jun 14 10:25:01 2026 GMT
Subject: CN=2F279CE8A9172E3957CEC13B884641601DAD7139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b8:19:0c:f4:3c:c4:31:d4:70:0d:2a:b4:4a:
68:d9:e9:f2:d5:6b:d7:13:de:77:82:09:30:42:5f:
1b:bf:63:f6:be:78:12:58:5e:88:ac:12:7f:53:6c:
b9:3e:5b:f3:f6:fc:a9:6c:05:17:ac:c4:46:15:86:
08:b6:5b:26:c1:35:0f:28:61:0a:ba:64:ad:a3:9b:
d1:91:79:16:8c:57:dd:b8:69:ec:4e:1f:af:21:e1:
52:b3:0e:a3:54:f7:f5:27:e7:e9:6e:c0:32:2d:53:
3e:f4:fa:ed:c5:37:4e:63:f0:12:df:ed:2a:f9:cc:
7d:5e:15:98:ec:f7:cb:d9:76:b7:dc:44:db:05:95:
13:36:ba:c4:e0:dc:44:c8:83:69:9e:54:85:4d:e5:
88:8c:d5:60:1a:47:f3:fa:c0:42:6c:a1:0e:45:37:
3e:05:4f:ca:09:35:5e:dd:26:fb:5f:14:aa:27:ae:
f0:dc:51:76:78:77:a2:26:77:5f:e2:a3:cc:22:d8:
b1:07:fe:30:3c:99:bd:63:bd:fe:5b:81:34:ce:a7:
96:b6:80:33:7f:0e:58:4f:71:57:1d:ef:43:cf:1a:
32:45:16:69:fe:5d:0f:98:7f:89:db:71:61:5a:31:
9c:7d:b8:00:26:31:79:82:ac:ee:ee:23:6b:50:f7:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:9C:E8:A9:17:2E:39:57:CE:C1:3B:88:46:41:60:1D:AD:71:39
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:30:54:b7:d2:a0:31:51:42:f1:fe:55:84:2f:17:22:e1:5c:
44:3d:a6:ca:e4:98:13:e5:b5:8d:5a:a6:3a:4b:2a:9d:9c:b5:
1e:60:2b:66:84:4b:c6:f7:ee:24:1e:fd:6f:73:69:79:9e:29:
b3:00:76:b4:31:4f:98:2d:d2:ca:ac:e3:fe:81:94:31:86:02:
7d:e5:bc:d6:f2:12:7b:39:d2:7f:8a:9a:a7:28:56:9f:f7:5b:
33:2e:fd:42:fa:de:16:73:fe:41:93:c9:ab:79:07:e7:d9:58:
20:80:4c:43:aa:a9:0b:92:b5:a3:1a:48:d0:1b:ad:3d:fe:97:
5c:3e:65:ef:b9:b0:1c:07:58:da:f6:b4:c0:00:5f:9f:d5:b0:
ea:c2:d7:f5:bb:c0:54:29:4c:11:1e:22:0f:9b:5a:bf:1f:9c:
e6:5c:27:80:0e:4a:5a:a9:07:fa:b0:1b:b4:83:9c:2e:b0:cd:
fd:90:3c:df:a8:a0:21:bd:f7:ae:5d:5f:a8:0a:33:b0:40:7f:
ba:b3:51:7d:d1:15:84:d1:d2:ac:a8:c8:70:14:c3:36:df:d2:
21:f7:01:62:1a:bd:67:96:71:17:33:d7:c2:dd:62:a4:1f:f2:
ea:ea:94:8d:92:2d:c7:8a:5c:c1:e4:69:30:4f:48:0a:fc:e9:
8e:86:1a:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQtBGMqmdd/T2j93kiCEnQYBhCGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3
ZTc5N2I2ODAeFw0yNjA2MTMwNzQ0MDFaFw0yNjA2MTQxMDI1MDFaMDMxMTAvBgNV
BAMTKDJGMjc5Q0U4QTkxNzJFMzk1N0NFQzEzQjg4NDY0MTYwMURBRDcxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1uBkM9DzEMdRwDSq0SmjZ6fLV
a9cT3neCCTBCXxu/Y/a+eBJYXoisEn9TbLk+W/P2/KlsBResxEYVhgi2WybBNQ8o
YQq6ZK2jm9GReRaMV924aexOH68h4VKzDqNU9/Un5+luwDItUz70+u3FN05j8BLf
7Sr5zH1eFZjs98vZdrfcRNsFlRM2usTg3ETIg2meVIVN5YiM1WAaR/P6wEJsoQ5F
Nz4FT8oJNV7dJvtfFKonrvDcUXZ4d6Imd1/io8wi2LEH/jA8mb1jvf5bgTTOp5a2
gDN/DlhPcVcd70PPGjJFFmn+XQ+Yf4nbcWFaMZx9uAAmMXmCrO7uI2tQ9yXLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQULyec6KkXLjlXzsE7iEZBYB2tcTkwHwYDVR0j
BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli
N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1
NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00
NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3
OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDBUt9KgMVFC8f5VhC8X
IuFcRD2myuSYE+W1jVqmOksqnZy1HmArZoRLxvfuJB79b3NpeZ4pswB2tDFPmC3S
yqzj/oGUMYYCfeW81vISeznSf4qapyhWn/dbMy79QvreFnP+QZPJq3kH59lYIIBM
Q6qpC5K1oxpI0ButPf6XXD5l77mwHAdY2va0wABfn9Ww6sLX9bvAVClMER4iD5ta
vx+c5lwngA5KWqkH+rAbtIOcLrDN/ZA836igIb33rl1fqAozsEB/urNRfdEVhNHS
rKjIcBTDNt/SIfcBYhq9Z5ZxFzPXwt1ipB/y6uqUjZItx4pcweRpME9ICvzpjoYa
Sg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:48 2026 by rpki-client