
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: YUzva6CkANjUx5AKGU8HGKDsvFDu4uKQjOOraUeEGgg=
Subject key identifier: 1D:E1:13:E4:64:7B:00:A9:86:3C:9A:D8:59:4B:C3:A4:B0:69:97:2B
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 171CF3A28CFC7D4D3C089F09A4274CED30B6319E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 023C
Signing time: Sun 01 Mar 2026 02:55:33 +0000
Manifest this update: Sun 01 Mar 2026 02:50:33 +0000
Manifest next update: Mon 02 Mar 2026 06:06:33 +0000
Files and hashes: 1: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
2: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
3: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
4: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
5: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: rULE6QZycQdbSLSggEMqpQB2sZXpuQs3EumawNKxNPc=)
6: AS215248.asa (hash: +7bZg/L1iv45A8Lv9ZnYzCCmE84OHieAnUYCYHDgEBc=)
7: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
8: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
9: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
10: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
11: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
12: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
13: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
14: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
15: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
16: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
17: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
18: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
19: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1c:f3:a2:8c:fc:7d:4d:3c:08:9f:09:a4:27:4c:ed:30:b6:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Mar 1 02:50:33 2026 GMT
Not After : Mar 2 06:06:33 2026 GMT
Subject: CN=1DE113E4647B00A9863C9AD8594BC3A4B069972B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:da:27:ee:27:e0:13:69:e8:66:d4:7d:ad:
a9:88:b4:58:f1:ff:e1:e1:46:61:c9:41:6d:36:cb:
0e:06:23:11:9c:ad:b8:8d:13:8a:3e:17:57:74:15:
b5:9e:bb:98:76:06:16:ee:ff:24:9a:b5:42:f0:48:
3a:43:b4:da:52:86:81:a9:55:24:d1:6f:27:97:b0:
1c:e9:72:bf:87:3b:3f:80:72:1e:63:2c:a9:63:fa:
fb:73:3b:4e:15:3d:69:46:9c:0f:89:33:89:7c:a2:
8b:9c:90:0a:88:8f:1a:66:5d:ce:80:8a:71:a5:9e:
c3:a7:ef:ba:c9:0c:1e:62:ed:b7:62:be:8d:f3:06:
3c:08:1c:9a:92:81:31:c0:fc:e9:c7:b4:58:18:b4:
bd:a4:7f:24:50:23:96:58:cf:8d:17:76:dd:63:99:
49:fc:d3:ca:fa:02:6a:94:75:c5:83:f8:5b:cf:49:
2c:44:e9:4e:09:09:03:0e:15:c5:03:23:bb:84:16:
15:d9:56:99:1e:82:8b:04:04:68:28:f7:ab:fe:71:
80:02:cb:47:69:2a:fd:95:77:0f:99:aa:c7:2e:d5:
d9:cf:ec:7f:25:e1:98:a2:e5:63:9a:7d:ce:fc:b5:
2f:63:ee:79:76:b4:54:c3:9a:56:46:72:46:9b:c2:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:13:E4:64:7B:00:A9:86:3C:9A:D8:59:4B:C3:A4:B0:69:97:2B
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e2:06:4c:65:e8:a3:b4:92:df:aa:41:f3:07:f1:94:da:78:
46:d9:51:22:41:a4:12:98:42:26:6b:f6:dc:be:5e:ff:1e:99:
e2:63:d0:7c:eb:fe:4f:31:1e:46:b3:dd:e8:b6:2a:4b:d9:12:
a8:9d:ea:79:24:1a:d4:20:f6:86:5e:1f:0d:7a:2a:62:75:89:
c2:32:8a:92:cd:51:9a:fc:38:c8:92:b8:36:18:bb:4e:81:9b:
9a:07:3d:1c:56:80:61:b9:cd:70:40:05:85:38:f2:39:21:f4:
81:5e:08:88:57:f9:84:98:34:aa:02:cb:fa:60:70:55:e1:ff:
5b:61:fa:98:df:fb:c9:4a:37:f4:16:1a:b3:60:52:d2:f0:e6:
44:3f:a7:ad:cf:d6:00:2a:e8:10:a0:c1:4e:33:d1:c3:32:f2:
2f:d3:10:f5:ac:22:fa:e6:20:fa:62:b0:71:a1:98:99:68:5c:
94:8f:23:c5:75:78:99:1f:72:19:0a:20:5d:24:43:77:f6:a0:
fe:d8:43:3c:b5:67:45:44:89:29:2c:d9:05:d4:79:51:68:c1:
49:4b:8d:f5:d4:49:3a:1b:70:94:ef:85:d3:f6:97:7c:95:8b:
72:0b:dd:a0:c6:68:3e:a6:99:4d:2d:1c:61:d2:db:08:71:64:
93:69:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:58 2026 by rpki-client