
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier: 6KXFWa705RVgTe1fPhc+OYWe+F1GYF8pgQZWeCgZaHc=
Subject key identifier: D0:0C:02:A2:1B:A2:39:FD:4D:85:7B:0B:E3:7A:E0:0D:30:DD:C2:00
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 0911964F20443BC38428C483D28D9BEBF41086F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number: 02C4
Signing time: Mon 21 Sep 2026 05:45:45 +0000
Manifest this update: Mon 21 Sep 2026 05:40:45 +0000
Manifest next update: Tue 22 Sep 2026 07:09:45 +0000
Files and hashes: 1: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: V4JNlPHt9GYe6uHPs4b02Df/splFF1TrehGP4K2WsXQ=)
2: 3139332e31372e39352e302f32342d3234203d3e203537303433.roa (hash: ZlGZ8zDu+Ph5bj7QSByoEcMl2ulTvvWRFvbekfqhnas=)
3: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
4: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: RuV0EVRLGAeQX3itFCg+1/o7rn3b30Yzc3OClL2TL2g=)
5: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: etX7ciNZNs5174vWdmDtkQTBFeC2wxz0cAkyidyNAqI=)
6: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
7: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Dq65MGgP/jvbx/fRolu32u44f/9NuGsxFlxiMiQcK+Q=)
8: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: /keadxHEKLIlJdZn+7/QJ582hR4EPNEsV/ta7yXGjKc=)
9: 38392e3135302e34392e302f32342d3234203d3e20323135313134.roa (hash: 8+3QXBkWfKHqJrin574kCECO066l0OpHPCh7UyKJaQw=)
10: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: qOwOklOJIQDQ3iXtKHsvIrT4nC9DB9yL2jjN1btBvD8=)
11: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: KKez0Khb6IZPJMlNfqEbtFW6uvUHl2oV9Icm6KoeU2I=)
12: 3138352e3136322e3137362e302f32342d3234203d3e203230343733.roa (hash: BMOkPoNWcAYzpN5k3PIQljFD4Ir4NkOTI8n1XNh1RY8=)
13: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: 7cx3PmNL2bx7p3TSn+B5wruk2DH5oi/qrUGQZZobhk0=)
14: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: a1awRu5W+j/OpVvgzZ2y3kpbavrV8XlF/TCtgRFx9ok=)
15: 39312e3233322e39392e302f32342d3234203d3e20313734.roa (hash: vw6CF6gn9sbz+AB9WKlGqawV53NNSKPBFf5sty8TfWc=)
16: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: StvUkxWAE+cFieU3uToD4GXXDDAlKXKMH9/0h+2uU3s=)
17: 3138352e3136322e3137372e302f32342d3234203d3e203330303538.roa (hash: glvI8KA5Mlz1qugjW7p3hT+2BSoQqvSz/4XgBMswo28=)
18: 3138352e3132332e3135372e302f32342d3234203d3e20323136343735.roa (hash: itYG2GwbUfv2aVLVfTQU5Cj2qGDvAV+mpJgT54TYfWk=)
19: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: LQqWRc5RiRnrFMSHCeqJMpc6vcXWST3+o1UDPgKt7+k=)
20: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: oKlOYt/ivogY03DODAeqT+usA/kmhETdr3gop9LZK2c=)
21: 39312e3233312e3135362e302f32342d3234203d3e203230363438.roa (hash: wgnwOREk/SS3AgEpm0DrSplNXucfBzpB5qxDojvDuuo=)
22: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
23: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: 1zceVbNoNbGigb739DKGH12Lz3EUL5EUuGLD5sTpqIs=)
24: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
25: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: h9UpEYcBJQPvnmmvG2hq4aqmuYuGKBso5cycO357wTk=)
26: 39312e3233322e3130332e302f32342d3234203d3e2030.roa (hash: hp0BD10ScYnMtcHuhlTB0I41ZHOp3SxXjpbuadrcoQM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:11:96:4f:20:44:3b:c3:84:28:c4:83:d2:8d:9b:eb:f4:10:86:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 21 05:40:45 2026 GMT
Not After : Sep 22 07:09:45 2026 GMT
Subject: CN=D00C02A21BA239FD4D857B0BE37AE00D30DDC200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:47:08:a7:c9:1c:b8:1c:d9:f0:14:f4:dc:
55:5a:48:26:b3:20:04:3b:6e:bc:e6:e0:25:05:0f:
eb:e5:35:5a:2c:d0:31:f7:41:c5:a7:88:e8:c2:48:
c6:40:25:f0:52:37:88:6b:2d:aa:a2:a2:f9:a7:3a:
69:77:d1:b7:8d:84:00:58:44:a4:e1:a4:f4:b2:ee:
e0:76:5b:d0:74:7b:ce:13:10:05:a0:34:bc:4a:40:
1e:06:0f:a1:35:3a:47:d0:35:f7:1d:a9:f5:3c:cf:
7c:d6:6b:b7:d2:4c:6a:f5:4d:ce:7a:d6:df:28:36:
1d:7b:f6:8f:88:1b:79:d8:7f:1c:28:4b:39:7f:a7:
38:d4:98:51:f2:d2:05:76:13:49:55:44:8e:30:f1:
97:e0:f4:06:ca:70:8c:7e:73:de:af:f7:00:48:c8:
ad:e3:92:fc:f1:ca:61:8f:8c:67:8c:a9:ad:46:7f:
1b:c7:fe:9b:c9:d7:b1:4d:5c:21:05:64:e1:78:4a:
23:11:04:03:63:fa:f2:b8:4f:5e:e4:e7:36:98:84:
ef:92:ad:16:ab:0f:8e:76:a6:23:74:c9:b9:0c:ef:
ba:18:e5:dd:09:63:ef:da:58:c8:b6:e4:e2:f0:5a:
02:e8:27:38:a8:6e:32:80:98:7f:fe:51:84:b9:2b:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:02:A2:1B:A2:39:FD:4D:85:7B:0B:E3:7A:E0:0D:30:DD:C2:00
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:0b:7d:2e:5b:68:77:f9:91:31:dc:1e:ac:3b:db:fe:12:
b6:b4:b4:99:f5:3b:a1:8c:66:e1:66:60:a6:9e:6b:60:39:19:
7b:29:df:ae:39:75:ef:02:67:a4:14:b7:5e:2c:3f:13:d5:24:
ed:32:30:62:34:9e:76:9f:16:56:99:b0:96:e6:c4:b0:9f:82:
2c:3f:0d:06:d0:5a:ce:5b:a2:3e:33:72:78:95:ff:1a:2a:58:
92:e1:ab:99:98:2d:e8:73:83:92:43:7d:22:3d:90:66:e2:92:
3e:2a:5d:3f:dd:18:98:d4:0d:9f:c4:02:e4:29:62:1f:8d:10:
0e:f8:7d:80:ab:ee:c2:8b:22:1d:3b:6d:2b:00:f4:f9:f9:ad:
6b:39:e2:c2:9b:35:4e:c8:37:1c:35:95:76:a4:8f:92:c2:a7:
63:4d:dd:7d:79:70:d3:ed:b8:7c:99:6b:c5:57:f3:b3:ce:fd:
c8:59:df:e1:81:14:d4:19:9e:1c:46:19:8b:23:64:a3:70:b9:
f0:31:5c:9a:9f:9d:f1:83:9f:50:37:ee:1e:ed:a7:61:47:a9:
01:8f:68:f3:43:24:2d:5f:bb:bc:e7:e6:3c:11:90:51:03:4a:
ad:4e:df:49:36:42:65:09:db:90:b6:ab:16:1c:e8:e1:47:a5:
ef:b5:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:44:41 2026 by rpki-client