
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json)
Hash identifier: T+VB8TiUQbYhHKlypJ/dg1Pjm1UNAweTdznw2QMFpsU=
Subject key identifier: 60:96:41:12:76:FA:BE:E4:03:C6:76:CD:03:C3:C9:97:B6:87:68:B4
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial: 1FB645EB909152F422631F430F6ACC04143491B2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
Manifest number: 0477
Signing time: Wed 29 Jul 2026 02:54:15 +0000
Manifest this update: Wed 29 Jul 2026 02:49:15 +0000
Manifest next update: Thu 30 Jul 2026 03:49:15 +0000
Files and hashes: 1: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: X9iGjvm4df6WWor3AACTl/KMonyksRhg2Q+TRfNQNfU=)
2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b6:45:eb:90:91:52:f4:22:63:1f:43:0f:6a:cc:04:14:34:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Validity
Not Before: Jul 29 02:49:15 2026 GMT
Not After : Jul 30 03:49:15 2026 GMT
Subject: CN=6096411276FABEE403C676CD03C3C997B68768B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:86:8b:6d:44:fb:24:01:19:57:a2:17:31:
f8:50:16:b8:f3:08:dd:a1:96:ab:1b:7e:a2:a9:02:
2f:91:7f:11:a8:36:e9:03:aa:fd:1c:a2:44:c0:97:
2a:bf:0a:61:c6:13:62:1a:f9:49:d8:47:23:56:0e:
b1:8b:6e:9e:9d:e9:57:23:63:10:63:e2:09:50:3a:
b5:ab:5d:1e:7a:34:ef:a0:a1:a4:8c:5d:9b:36:2a:
09:a1:71:bf:d1:cd:ca:1a:6b:1b:e3:00:5e:26:65:
a6:75:c0:5e:c0:20:18:64:fc:fc:58:f5:64:86:99:
cd:73:ee:2a:a2:9d:ee:f8:b9:0a:c6:16:33:62:a9:
a8:20:d8:30:79:0d:b2:44:21:d1:f2:00:65:60:6f:
bd:b7:74:e9:2a:86:31:ba:74:91:2e:8e:94:36:d6:
4a:de:63:db:44:db:ac:2c:f0:2d:21:55:ac:86:aa:
fd:de:e4:98:30:12:65:07:be:3e:55:48:44:d8:df:
50:19:7a:c9:53:94:6b:31:6a:0c:6a:89:ec:89:59:
26:dd:79:60:ab:f0:90:93:25:a2:a4:83:58:c1:b0:
59:59:38:a1:4d:66:ec:61:da:c9:b0:18:8f:a6:c9:
30:71:6f:e8:c7:98:cd:bb:a1:0a:41:fc:af:3c:5a:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:41:12:76:FA:BE:E4:03:C6:76:CD:03:C3:C9:97:B6:87:68:B4
X509v3 Authority Key Identifier:
keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:06:ad:86:29:36:c0:f7:1f:d5:7e:a4:94:91:86:d5:f0:
44:5d:c3:20:26:71:5a:88:b4:f0:ef:4a:b8:1b:23:47:56:12:
97:08:07:3a:c0:b4:d4:51:d0:be:8d:db:f3:7d:ba:1e:35:64:
89:9a:cf:d3:20:e7:40:73:a4:43:85:a8:76:2d:2b:05:fc:5f:
52:05:b4:fb:4f:e7:1c:31:f5:e1:13:29:4b:1a:04:e8:2f:85:
12:6c:a1:f7:70:33:74:df:a9:9e:67:bb:a7:a4:bf:56:de:ff:
01:ad:de:7a:0b:74:a0:cd:57:fe:42:5e:f4:77:6f:f7:47:d2:
0d:e3:6e:89:37:b8:ee:7f:6b:5c:b8:1f:b8:35:34:56:c2:4d:
df:75:ec:cc:aa:5f:fb:f5:25:18:bf:d6:41:d8:e6:39:20:96:
a6:b2:68:fa:04:74:50:c0:cb:c8:da:71:6e:82:cf:32:0b:27:
34:4a:76:5d:26:10:b7:70:23:e9:6a:66:af:65:70:9d:da:0f:
02:07:94:32:02:7a:a7:84:f3:f1:83:0f:cb:b4:fd:19:16:72:
ae:cb:6f:be:6c:33:08:ee:43:5e:03:e6:f8:c2:9a:a9:ad:58:
a7:4c:51:c1:b3:a9:56:c5:b3:d2:9e:6f:c2:81:57:49:91:38:
cc:f2:86:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:13 2026 by rpki-client