
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: rAR5pyRKoijQ2+YPmaLi15IaO9dtuyhRWUAzqA4bYd0=
Subject key identifier: ED:F5:82:00:60:36:4C:7D:3D:63:52:36:8B:1F:C9:63:0D:40:9C:C7
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 2BD32997FB5EE003E33E6F70F9F88FE188B74335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 031F
Signing time: Tue 28 Jul 2026 09:51:44 +0000
Manifest this update: Tue 28 Jul 2026 09:46:44 +0000
Manifest next update: Wed 29 Jul 2026 13:35:44 +0000
Files and hashes: 1: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
2: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
3: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
4: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: oqhaNNGDfLizAxZieCuxsVclEFGkSDAPEm2SytHKZQs=)
5: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
6: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
7: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
8: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
10: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
11: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
12: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
13: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
14: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
15: AS215248.asa (hash: Eg99jLezI40BElbDL434GmBRT28XySCdWz+4KExnZUU=)
16: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
17: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
18: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
19: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d3:29:97:fb:5e:e0:03:e3:3e:6f:70:f9:f8:8f:e1:88:b7:43:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 28 09:46:44 2026 GMT
Not After : Jul 29 13:35:44 2026 GMT
Subject: CN=EDF5820060364C7D3D6352368B1FC9630D409CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:9b:12:0a:9d:9a:8a:e4:32:1f:39:7e:87:
af:10:42:f8:5b:05:77:8b:0a:cc:bb:81:e6:ef:63:
86:7d:1c:25:e3:61:d3:e0:0b:23:97:c9:00:eb:21:
f9:b0:7a:37:18:85:e6:ad:21:15:38:d9:48:4d:56:
a9:0a:ea:44:61:cb:7c:06:14:ff:65:2c:af:03:4a:
f5:58:f9:65:40:c0:33:c5:a6:c7:3b:32:49:e7:b0:
35:cc:bf:e2:82:39:62:d1:05:e4:a8:4f:8a:4d:1a:
4b:1f:35:c2:a9:d1:7f:a1:54:c3:b0:b0:25:0a:64:
e4:57:ec:2c:b3:71:c8:ed:40:e9:4d:09:d2:3b:af:
30:32:5a:05:2f:7c:5d:66:3c:b2:0d:cf:dd:ec:5f:
82:f6:c0:af:dd:c8:95:06:a6:e0:fd:c7:e4:df:df:
03:bd:f0:95:b9:ed:a3:49:f8:93:a9:ef:60:b4:4c:
ca:bc:f4:ee:25:c8:e6:be:71:6d:1f:a7:03:04:88:
0d:a6:3d:a4:71:b6:cb:cd:9a:cc:4e:df:45:6d:b9:
6a:eb:da:f4:c3:9c:78:04:b5:b3:03:c2:7f:6c:a8:
99:5e:c7:86:ce:6b:8c:a3:38:cf:0b:99:93:b8:1a:
59:8e:d4:85:c2:92:0b:bb:df:1f:60:e4:4f:c1:db:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F5:82:00:60:36:4C:7D:3D:63:52:36:8B:1F:C9:63:0D:40:9C:C7
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2f:21:d9:b6:c0:ee:8b:59:e8:30:5a:0e:8c:4e:16:bb:3d:
ff:1d:14:5b:5f:cd:da:eb:ba:c3:99:a6:36:67:c3:c9:41:42:
62:de:9d:b2:45:f7:86:45:16:26:af:97:33:7c:a1:00:92:08:
80:ca:0a:bc:20:b7:b8:ef:13:4f:a7:a8:f7:96:f1:3c:0d:70:
51:aa:80:be:4e:49:2f:91:72:f7:f0:1b:41:70:3e:05:19:c8:
4a:83:ba:43:9e:7a:06:9f:2b:c5:f2:e8:21:dd:89:72:c7:b8:
a2:c3:20:25:69:34:a7:f2:8a:e4:9f:88:5f:7a:17:9d:63:b7:
0e:00:eb:66:fe:63:57:bb:f6:63:48:cc:6d:67:54:4d:39:a6:
e8:ed:5b:46:b0:b6:40:09:db:60:43:4d:2e:23:ef:2e:00:00:
84:7a:dd:8b:15:17:22:71:41:00:26:f4:ae:f1:e1:49:77:ba:
b8:3c:75:0e:a6:9a:29:7f:a5:86:e4:b1:68:f7:f4:eb:2d:cc:
78:9d:8e:99:97:ea:8f:85:b5:47:22:c9:61:11:7a:b7:4a:ea:
55:ec:04:3e:21:cf:1e:82:af:d6:32:03:12:60:61:87:67:f1:
eb:91:b1:ff:c4:ec:80:b7:02:18:70:66:be:ea:26:bc:2e:2f:
26:31:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:52 2026 by rpki-client