
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json)
Hash identifier: 34Ltrou+9oOhIHjrnoBod/mA3i1Gj4UaC2EEW3tZp+A=
Subject key identifier: 6D:B3:1E:12:9B:1C:56:AE:66:E9:67:51:64:9F:B2:A3:45:02:54:F3
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 327DB9631D54D09BA563A08D74D5AA3742079016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
Manifest number: 04B3
Signing time: Tue 28 Jul 2026 09:53:32 +0000
Manifest this update: Tue 28 Jul 2026 09:48:32 +0000
Manifest next update: Wed 29 Jul 2026 12:14:32 +0000
Files and hashes: 1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: VKGCj2R4ioFDe6CIly5PE+NA8GcWRmuQNjSfzc4kjwo=)
2: AS202881.asa (hash: XHj3wS//oUB0bBxH4kvJ0ulJ7YLDJlbJqdRBWQiQMqk=)
3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: WprHHCDYBsr5/f+ehFAWoktEYhynGEu2h7Y0/TFJt8c=)
4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3ZFhB/5ygf5t4lpptEoHt4tGKQVifxYsEJPws7ZipKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7d:b9:63:1d:54:d0:9b:a5:63:a0:8d:74:d5:aa:37:42:07:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Jul 28 09:48:32 2026 GMT
Not After : Jul 29 12:14:32 2026 GMT
Subject: CN=6DB31E129B1C56AE66E96751649FB2A3450254F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:18:71:a5:32:8a:d2:cc:d4:e5:18:dc:42:
bb:eb:c3:a6:25:96:f0:14:24:bf:93:45:70:15:20:
a2:1f:e6:22:0c:53:61:73:05:d8:0d:90:e1:01:87:
76:a1:96:d0:c5:a8:38:f6:75:aa:a2:ad:c1:72:2b:
2c:69:63:f0:e9:e9:ad:f2:3d:12:20:fa:76:a9:23:
95:5d:61:54:15:8f:41:74:c9:21:52:40:e4:19:14:
86:11:8e:3b:e7:83:3d:29:29:bb:ac:ac:f0:83:67:
05:36:d8:04:c8:91:07:e1:7c:2a:85:43:af:ea:e7:
91:e9:2a:a5:f2:09:99:17:dc:76:d5:aa:40:1a:83:
50:1c:7a:5b:85:0b:15:05:ac:38:e9:7c:2e:55:1c:
72:a4:7d:84:4a:27:aa:ec:21:f7:d6:fe:6b:88:62:
f8:7c:ae:b9:2f:b0:2f:6e:c3:ae:92:28:ae:a1:79:
e6:f9:48:3e:47:12:03:e4:e2:a1:a7:27:09:34:43:
75:b4:d9:9e:23:97:af:16:90:be:36:5e:1c:b0:a8:
14:c3:69:eb:81:b6:e4:02:8c:61:67:41:ad:87:27:
48:12:7a:83:b1:c0:c7:7a:60:bd:26:1b:89:db:1c:
88:32:cb:08:24:b8:60:8f:a3:72:19:95:c6:8d:b8:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:1E:12:9B:1C:56:AE:66:E9:67:51:64:9F:B2:A3:45:02:54:F3
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:83:38:f9:06:0f:4a:61:62:25:23:e0:f4:bc:a8:7a:96:6c:
00:a7:af:eb:ab:b7:fa:5c:66:1c:1e:2c:e7:88:a8:5b:40:fd:
d2:49:4a:5b:b8:55:66:ed:02:ed:63:c2:41:d8:2a:7e:53:f6:
8a:2b:12:cf:66:85:21:b8:bb:59:57:60:81:a9:26:c5:62:66:
36:d3:c2:53:31:f8:e8:af:32:51:f8:db:3c:d9:55:e4:04:91:
94:16:33:c8:81:ac:75:1e:95:a8:1d:cc:00:53:c6:bf:e2:52:
2f:4b:e4:ee:b0:94:9e:dc:77:08:0c:0e:eb:98:14:e7:a2:c8:
44:d9:7a:0b:26:48:ed:d2:ae:46:12:4b:22:7a:91:6e:9c:14:
cd:d7:51:66:4f:5d:cc:69:57:2a:4f:42:58:39:e2:3c:28:27:
5d:d1:65:c9:1a:ec:0d:3e:ef:87:58:92:07:b9:9e:6a:22:e0:
a3:6d:94:13:8d:e8:cb:4c:9b:65:f2:d4:12:c3:99:e7:4a:ea:
32:d9:a4:47:ba:dc:a8:0a:26:39:e1:9a:d9:98:73:85:53:22:
c6:85:4e:45:21:48:67:e2:45:2e:18:c8:57:a6:2c:19:19:54:
92:7b:45:9b:f0:4d:b9:8a:48:9d:66:d9:f3:88:4c:64:ff:e0:
1a:c9:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:30 2026 by rpki-client