
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
File: E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json)
Hash identifier: iEd5+Bloejpro6Ixkh0vdbKSzSYACd9BLgShLSBfgFY=
Subject key identifier: 19:E5:DF:43:48:90:FD:79:E3:3E:AA:13:02:94:EE:FF:DF:CC:33:AE
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Certificate issuer: /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial: 0AF8B2B8622350428B76EC8C8FFD2BCB368344BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
Manifest number: 01D6
Signing time: Wed 23 Sep 2026 16:26:57 +0000
Manifest this update: Wed 23 Sep 2026 16:21:57 +0000
Manifest next update: Thu 24 Sep 2026 17:29:57 +0000
Files and hashes: 1: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: jpD4cd+aXIDoafO3aGwXg/ny5f8GVeVybLj54yA5SnQ=)
2: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=)
3: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=)
4: AS52112.asa (hash: FhhGzMNZlZdNgosWnmgHoPIdMt6QO7EnQDJjZKjEsvQ=)
5: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f8:b2:b8:62:23:50:42:8b:76:ec:8c:8f:fd:2b:cb:36:83:44:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
Validity
Not Before: Sep 23 16:21:57 2026 GMT
Not After : Sep 24 17:29:57 2026 GMT
Subject: CN=19E5DF434890FD79E33EAA130294EEFFDFCC33AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:b1:fe:45:6d:6d:3a:98:e7:92:72:b0:b2:
50:9e:49:77:5d:d5:a2:9f:94:86:b1:37:1b:3c:b7:
f7:4e:f2:50:b6:ea:72:38:85:cb:e0:27:4f:b0:87:
68:63:f4:d1:a4:6a:1d:ec:30:70:fb:60:54:97:25:
fc:fe:fc:7f:13:d4:71:7a:bb:e2:f5:de:4f:da:c3:
57:c8:25:fc:50:64:00:29:e9:f1:d4:af:00:b4:a1:
3f:e8:8d:18:67:82:bc:10:53:9a:91:5f:1f:b1:4a:
2c:44:20:75:67:eb:ca:4d:5c:73:9f:9a:f0:9b:74:
dc:be:8e:50:78:de:57:9d:bf:8e:7e:dc:1d:06:be:
f4:a7:ce:14:79:09:54:91:fa:35:54:51:1d:f2:8b:
c9:66:38:da:6a:de:7e:ff:28:27:05:76:92:f3:5c:
be:4c:d6:ca:fe:c0:ce:77:52:41:9b:98:69:67:33:
39:84:1b:45:86:a2:cd:86:97:25:ef:52:3a:e8:ff:
33:d0:2a:81:79:1c:0e:c2:8e:de:cf:b6:e9:cc:59:
ff:16:e7:5b:e2:43:64:86:fc:ef:f4:5c:5d:99:85:
9d:40:f9:df:aa:b3:e0:49:7a:56:33:a4:68:5c:a7:
7f:ed:72:07:85:d1:55:2a:2a:37:bf:6c:b0:82:eb:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:DF:43:48:90:FD:79:E3:3E:AA:13:02:94:EE:FF:DF:CC:33:AE
X509v3 Authority Key Identifier:
keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1a:d2:b0:e6:4e:b1:2a:a8:f5:54:ed:41:4a:35:de:23:a5:
57:a9:8c:86:d8:e0:51:d2:1e:00:08:1f:92:05:fe:9a:b3:0d:
f6:f5:02:23:a0:87:90:28:9d:5e:b0:d3:5e:cb:4b:af:5c:7e:
9b:fd:39:47:af:bb:86:35:c2:7d:45:c8:18:04:e1:cb:e7:ea:
ba:e6:0a:92:f5:a3:64:12:f1:8b:8b:5c:35:2e:1f:22:dd:fc:
8a:05:e1:5d:a9:db:7e:0d:e0:e9:c5:18:ca:fa:d9:27:3a:0f:
7f:25:81:22:7b:17:e2:0d:e7:ea:8d:af:45:88:b9:22:71:c1:
ca:b1:26:d9:e6:9a:03:6b:fa:b5:3f:a6:d6:08:10:2b:56:f6:
8f:20:ac:95:23:0b:db:eb:b7:9d:a6:67:0a:06:b8:42:9a:86:
9d:98:e1:40:96:87:10:84:64:d2:2f:06:2f:0e:4d:ff:db:e9:
04:85:53:25:d5:0f:f0:53:20:30:e0:5b:ad:fb:08:9e:25:0d:
b6:53:c1:9c:20:a4:52:f0:02:cb:9c:7e:3b:82:5b:ae:8d:8a:
a5:cd:54:9e:5e:2b:d4:24:54:ef:fc:30:92:68:7e:29:e4:14:
c4:0f:7c:60:42:9e:14:5e:40:bd:61:9c:b9:aa:a0:5b:0c:c6:
12:ba:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:40:16 2026 by rpki-client