
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json)
Hash identifier: SL+zW17cvEjAfl7Ag+3v5dJkfHq87wiQy7zC4LQ30cQ=
Subject key identifier: 3D:56:5A:F9:D1:20:63:51:8F:14:69:5F:4E:D5:65:04:C4:2E:79:0F
Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017
Certificate serial: 09115BD39FB46B2BB0378D8E154C312B7D3DD54C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
Manifest number: 0146
Signing time: Sat 13 Jun 2026 06:31:40 +0000
Manifest this update: Sat 13 Jun 2026 06:26:40 +0000
Manifest next update: Sun 14 Jun 2026 08:29:40 +0000
Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=)
2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: hgnOERPAJClGJLUDn3oeIrdRMpqeF6aF7CcyZXOS1L8=)
3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:11:5b:d3:9f:b4:6b:2b:b0:37:8d:8e:15:4c:31:2b:7d:3d:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017
Validity
Not Before: Jun 13 06:26:40 2026 GMT
Not After : Jun 14 08:29:40 2026 GMT
Subject: CN=3D565AF9D12063518F14695F4ED56504C42E790F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:bd:13:02:2e:be:18:53:0e:c0:5d:44:42:
07:e7:ea:7d:d0:de:1d:63:9c:cb:3a:56:13:37:00:
e7:3a:49:68:56:1b:2c:b9:08:fd:ee:0f:91:fe:6d:
d2:b0:08:7d:5f:4c:a6:f3:80:7f:39:e9:8e:c5:7f:
10:ff:28:88:74:74:ef:78:81:13:19:34:ae:14:17:
0a:69:26:c5:07:84:1f:f1:42:dc:14:3f:bc:b6:50:
e4:bc:c6:f0:f4:53:95:a7:cd:4c:d3:4e:8e:27:55:
1a:88:02:1d:7c:21:8a:3f:2f:6f:08:64:63:b9:c7:
41:47:41:22:39:20:fe:07:9b:ed:09:5a:39:fc:58:
64:23:c5:04:d6:80:62:34:ab:98:8b:fa:ac:a2:1f:
ab:46:f1:a2:7b:69:d9:49:b2:39:84:15:01:66:cb:
0c:fc:1b:a8:1b:ad:7c:4e:b4:2e:e7:77:5b:f6:9d:
9c:03:7b:a9:c1:cd:89:44:05:00:58:d4:da:78:d1:
82:a4:5e:ce:b2:f5:5e:25:21:62:36:2d:ae:fb:74:
9c:b8:29:e5:ca:55:ad:22:da:e7:56:bb:03:58:cb:
8f:b2:93:6f:e1:34:5d:af:49:36:98:8c:47:f9:2c:
79:b9:11:8b:29:5e:c0:22:08:3c:4f:90:96:34:e5:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:5A:F9:D1:20:63:51:8F:14:69:5F:4E:D5:65:04:C4:2E:79:0F
X509v3 Authority Key Identifier:
keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:fd:84:12:47:5d:79:1f:cb:e0:f0:b5:7c:b9:df:a9:61:
03:01:3c:35:84:c3:20:f8:d5:e2:03:d7:27:a7:3f:47:9d:06:
3a:84:ca:9e:25:cc:33:29:b1:76:f8:3a:53:b8:ae:b4:fe:ce:
26:db:1e:ec:b0:f5:0e:e7:61:ba:48:89:3b:6e:25:6f:6b:da:
fb:37:bd:de:0e:72:8e:57:96:49:4f:ce:b1:e9:80:db:b4:90:
22:5e:be:98:f2:71:35:76:bf:e7:3d:20:38:7a:6a:68:53:b9:
ae:63:3c:2f:6a:6f:4a:60:5c:86:b3:81:30:0f:ef:25:f5:3e:
14:50:78:ba:ba:da:d4:a1:2a:e0:71:22:50:88:05:46:f9:cb:
d5:87:0e:3a:93:a5:f0:34:d3:75:cc:e6:87:dd:60:e3:a5:09:
c8:e0:d2:d6:14:d8:27:ef:c0:70:8e:26:9a:b9:5b:d3:ff:b5:
2e:38:9e:01:8a:25:54:d8:1d:d5:33:a9:98:51:20:87:e4:d5:
0e:a1:3f:b1:72:3d:78:77:8e:80:d6:fb:bb:13:63:7c:fd:d1:
bf:bd:74:ee:36:ff:b0:d7:23:a1:b6:de:45:23:e0:ae:05:c1:
f9:cd:50:b3:21:49:12:8b:e2:28:87:e7:55:ef:1f:a1:66:e8:
fb:45:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:17 2026 by rpki-client