
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier: p8UhVZR6/lLIgCoDbJiLYPnLCKDg+orxNlTzrcsMUFU=
Subject key identifier: F1:20:CB:EB:74:28:80:E7:BA:10:98:14:7C:7F:68:EC:C7:A9:9E:AD
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial: 3A9EFD328536ECF550F0096CE66AD6F4A929032C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number: 0242
Signing time: Fri 17 Apr 2026 20:03:32 +0000
Manifest this update: Fri 17 Apr 2026 19:58:32 +0000
Manifest next update: Sat 18 Apr 2026 23:54:32 +0000
Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: gFtAqV2gZ9lqo30pAarMZaYdJlbUbvjV075e4cFLvzY=)
4: AS215296.asa (hash: l7QnDI/OpnY5Yq7b4HfqMZZEDw/6Wh6mqj/BM8KgG/E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9e:fd:32:85:36:ec:f5:50:f0:09:6c:e6:6a:d6:f4:a9:29:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Validity
Not Before: Apr 17 19:58:32 2026 GMT
Not After : Apr 18 23:54:32 2026 GMT
Subject: CN=F120CBEB742880E7BA1098147C7F68ECC7A99EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:46:e2:d9:2c:3f:98:ad:d4:2e:a0:d9:de:
b7:fd:1a:a1:1e:78:68:e1:23:c8:c4:32:ee:35:85:
e1:a1:19:51:c1:6d:67:8a:6d:a3:5c:e9:b7:13:30:
a7:78:73:34:d4:4c:7a:23:58:42:69:0a:69:88:88:
b6:9e:4d:7d:4c:c1:1e:6f:3f:21:84:78:56:5b:44:
2f:e1:fa:0d:1d:47:bd:04:a8:19:bb:4d:2e:13:e0:
52:c1:2e:41:38:3b:1a:0a:69:41:ce:9c:c6:e0:3a:
45:32:cf:10:23:22:cc:53:06:1c:28:ff:b3:ca:d9:
9e:98:62:08:83:31:8e:68:9a:77:e8:74:23:db:63:
77:34:c8:d7:3d:c9:ca:eb:bf:c5:2d:10:3f:f3:ba:
1f:b4:23:f4:91:f7:ad:72:e1:3f:7c:19:9c:d5:75:
1a:d7:d4:c4:06:90:58:7a:ed:dd:bc:bb:b5:9e:55:
de:86:d0:2e:ed:c6:e0:ed:94:93:85:fb:5e:13:6a:
91:c0:4d:5b:d7:46:4e:00:1f:d9:b4:3d:b1:8c:10:
b1:1a:d1:94:eb:ff:93:ec:b7:a8:99:9b:8b:b9:4c:
5f:f6:20:1e:da:2f:fd:d7:96:72:ff:f6:e9:ca:56:
13:e9:78:38:08:4f:1b:4d:fd:7a:54:d0:39:cb:4d:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:CB:EB:74:28:80:E7:BA:10:98:14:7C:7F:68:EC:C7:A9:9E:AD
X509v3 Authority Key Identifier:
keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:56:b1:f4:78:13:d9:b1:40:e9:c7:05:ba:3e:cf:41:4b:
14:14:01:ea:bf:b6:f6:55:b0:f1:ae:27:4a:a5:9f:0c:69:06:
c9:e3:ea:08:76:30:b5:8b:94:e8:2f:8a:4d:79:0b:54:37:b3:
fd:d2:45:a2:a1:f5:61:89:6e:83:51:03:af:5c:ec:5c:42:7e:
30:59:de:c3:d3:fd:05:96:44:1d:84:7c:fb:c8:32:bb:93:aa:
4f:2a:27:1e:7c:de:0f:09:e9:cf:89:0d:20:a8:37:42:8a:93:
3b:16:c5:b0:fa:aa:28:67:84:95:f8:a0:a0:41:03:0d:2a:08:
ad:f4:2e:3f:b3:49:b5:17:67:12:c6:43:10:23:59:69:1a:96:
25:d1:38:a7:40:c8:5f:31:b3:d4:a7:8a:dc:12:c5:41:43:5d:
d3:74:83:e4:2f:c6:eb:7b:d3:2e:69:e9:ae:6d:12:0b:28:27:
ab:f0:02:59:e1:87:3b:78:c2:78:29:5a:c6:ef:b6:48:64:7c:
ca:cf:58:da:fd:22:20:e3:e6:73:70:b6:a0:32:03:39:be:de:
d1:f0:0b:04:af:9a:34:b1:9f:ae:26:fb:de:0a:2f:b6:ed:2f:
29:48:b0:18:cd:f3:bf:85:cc:d7:f2:ad:09:76:75:35:51:bc:
2e:82:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:06 2026 by rpki-client