
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: g9zqzTSgfQo5DhIM0RuKGtUp3vIuafvxJZZYLwCfkt0=
Subject key identifier: 06:28:9A:14:7E:F9:0E:12:42:26:C0:B6:AE:7F:0E:1B:A3:12:DB:25
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 71333931655693C3C4B5D4BBEFBF1A1226DBAD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0370
Signing time: Thu 24 Sep 2026 09:23:53 +0000
Manifest this update: Thu 24 Sep 2026 09:18:53 +0000
Manifest next update: Fri 25 Sep 2026 10:57:53 +0000
Files and hashes: 1: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
2: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
3: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
4: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 69vQD4PcmcdNbQycTg/E9d0UdkQGJ8bAG39qAj0fKAw=)
5: AS215248.asa (hash: Ks58Ctz2hRVGrTaVNMmyrZzvbMUZa4toHgyrb8iY6Wc=)
6: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=)
7: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
8: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
9: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
10: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
11: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
12: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
13: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
14: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
15: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=)
16: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
17: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
18: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
19: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:33:39:31:65:56:93:c3:c4:b5:d4:bb:ef:bf:1a:12:26:db:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Sep 24 09:18:53 2026 GMT
Not After : Sep 25 10:57:53 2026 GMT
Subject: CN=06289A147EF90E124226C0B6AE7F0E1BA312DB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:1d:15:a0:18:a5:dd:c7:a3:e1:3a:f0:2d:
8d:53:b6:dd:c2:f0:5c:9d:a8:47:f5:c3:85:92:cb:
b2:51:15:c5:e8:f2:99:3a:9d:b6:c6:7f:9c:9b:27:
9f:24:8b:1a:a2:f6:10:da:2a:78:9d:4b:76:d2:6f:
fb:79:92:99:f6:09:b5:d9:dd:87:e5:62:2c:55:60:
c2:2b:60:42:5e:d1:5f:94:a6:8a:e5:76:6f:80:ad:
47:5c:c0:e0:76:17:c6:d9:b7:c1:ee:30:e4:1c:cb:
f3:73:c9:3f:90:5b:5a:ce:44:f6:aa:a4:bb:95:4e:
4c:69:f2:bf:1e:bd:06:8d:3a:1d:34:8c:1f:ca:91:
fb:7c:c9:2f:3d:0b:66:b6:e7:bf:ec:52:5b:21:25:
3e:86:6a:e3:a5:c0:f2:49:0a:e4:cb:d0:5d:c0:fb:
5f:87:e0:e8:5d:2c:db:1e:11:2d:77:30:dc:d0:3c:
35:a6:db:d2:ee:24:8e:74:08:38:b8:76:d0:7d:8c:
b5:97:f9:75:ac:6d:c0:79:63:e9:e6:8b:cb:d2:09:
2e:52:19:2d:0e:3c:2c:32:8e:b7:75:1f:bd:cb:9b:
73:89:7a:b2:4d:89:03:e1:d2:de:e9:35:a3:49:5a:
4a:c9:49:d6:fc:60:98:fa:f4:a3:f1:e1:39:6e:ff:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:9A:14:7E:F9:0E:12:42:26:C0:B6:AE:7F:0E:1B:A3:12:DB:25
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:04:f0:82:19:59:15:37:7c:9f:08:d0:69:be:ef:4c:fd:c5:
15:84:35:3c:22:30:fe:24:e1:31:75:c7:0c:04:cc:81:ce:24:
44:f0:10:74:c3:0f:6a:0d:0c:e2:67:21:42:73:36:bc:fe:4e:
2a:13:d5:b4:c4:14:38:52:2f:75:6c:d3:bd:95:9e:13:65:03:
fb:34:44:aa:fe:5a:4d:6c:9a:6e:c7:79:bd:01:26:7d:0d:91:
ab:0a:30:f7:96:95:5d:f7:42:b7:78:8b:7c:fc:ee:c2:cf:be:
ca:dc:ac:69:29:52:59:2e:da:55:18:69:5f:6e:db:92:95:72:
e0:c7:f7:1f:a1:2e:b4:8e:5e:a4:c2:b3:ff:9f:0a:11:f9:92:
13:b3:7d:ab:02:b1:c0:f7:28:20:af:6c:0e:ec:98:ba:e9:22:
d8:4c:84:3f:ec:55:bf:cf:c6:2e:e8:62:68:ae:12:4b:68:e4:
d1:0c:d3:a3:32:e1:55:cd:30:b0:d2:3b:9b:a2:c8:e0:92:c0:
91:58:28:cf:b2:e7:da:22:71:81:ae:9b:52:85:0f:e5:15:e9:
7a:74:14:fd:01:bb:81:6a:29:d9:33:34:aa:81:6d:94:98:2c:
94:e5:1b:81:65:92:20:75:0d:21:9c:88:5a:2c:a4:12:d0:78:
05:bf:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:32:18 2026 by rpki-client