
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier: Xr2mtKxoFnHgptALBEMwNq5i4N6+EQIFze/52LJPb98=
Subject key identifier: C8:29:A9:28:05:AD:03:C6:2C:60:1B:FA:A3:E0:15:17:37:63:5E:B3
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial: 3ED3D54E50004885649CE866680BDF59CE3B3DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number: 0200
Signing time: Sun 01 Mar 2026 11:23:23 +0000
Manifest this update: Sun 01 Mar 2026 11:18:23 +0000
Manifest next update: Mon 02 Mar 2026 11:52:23 +0000
Files and hashes: 1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: 8AeYShAtIcUibixAsgd1U6grpVM6I/QvLLkNRbuWVck=)
2: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=)
3: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:d5:4e:50:00:48:85:64:9c:e8:66:68:0b:df:59:ce:3b:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Validity
Not Before: Mar 1 11:18:23 2026 GMT
Not After : Mar 2 11:52:23 2026 GMT
Subject: CN=C829A92805AD03C62C601BFAA3E0151737635EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:24:9c:44:84:b0:02:6f:8b:23:a5:4e:0d:
13:6e:ed:ac:ac:85:38:59:46:a1:aa:ee:e2:fa:72:
df:af:64:fb:73:74:32:6b:d4:55:26:ad:7e:a3:20:
3d:87:60:b4:c0:73:2c:28:c1:f3:c6:56:7b:85:be:
34:d6:89:a7:c4:4d:53:28:5e:1d:84:38:89:5c:cb:
9d:31:1a:6f:e4:61:35:c2:a2:b8:fa:eb:2d:d6:b7:
7a:0a:33:f4:4a:ca:db:95:c5:61:70:6a:f0:5e:69:
bb:f1:11:95:cb:29:44:b5:60:e0:a1:90:db:00:28:
b6:f3:50:2a:5c:f9:bb:07:5f:b1:9a:19:1b:3b:8b:
7b:22:53:46:64:90:b6:5b:84:a8:95:5a:8f:64:7d:
6d:5e:68:3c:52:11:44:b1:85:80:76:86:c0:c8:ba:
64:b8:e9:5c:96:02:eb:d0:fd:dd:33:a2:af:92:a6:
38:2b:b0:f4:28:a5:af:05:08:d8:35:05:b3:68:e1:
61:79:ac:ae:b7:cc:91:52:ae:75:64:ce:5d:ee:6f:
da:b0:6e:f8:f9:fb:c8:6c:d4:d1:c5:62:27:ea:c8:
58:63:2d:b9:34:bb:7b:02:27:65:b9:3a:fa:cf:7f:
93:50:f3:e1:7c:46:06:34:81:18:bd:65:fa:58:49:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:A9:28:05:AD:03:C6:2C:60:1B:FA:A3:E0:15:17:37:63:5E:B3
X509v3 Authority Key Identifier:
keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:1c:ec:f7:c2:8e:70:b6:2d:26:46:e8:fe:84:79:8e:da:
0e:f3:f3:b8:f5:58:62:c5:c5:33:1b:12:f7:e8:77:8c:b3:bc:
50:b0:56:26:70:7c:60:33:d8:8b:2f:09:0c:3b:91:e8:70:9d:
80:44:18:f0:eb:de:de:3c:c6:8a:21:54:f1:f4:a6:5f:5c:67:
6a:0c:48:80:d1:af:61:3c:2d:8d:b7:32:2d:51:e8:6a:af:00:
13:f9:86:e0:66:01:df:74:9d:70:2a:72:05:8d:3d:e6:de:79:
11:d9:75:da:52:29:fd:e8:4d:7d:54:e3:b5:6e:1d:a9:6c:97:
1a:e7:e2:be:bd:5c:4c:95:c0:00:15:1a:35:80:27:b6:f0:b2:
83:55:1e:26:83:40:5b:f2:af:3a:97:06:00:20:6e:50:77:07:
45:3e:38:73:19:d3:5f:71:eb:03:65:76:c5:f3:72:2b:91:f8:
dd:d1:98:25:5e:48:a2:52:1c:3e:91:0d:84:37:91:40:87:0f:
b6:57:f4:53:04:36:74:11:9c:5a:27:2c:03:70:a2:41:3d:cb:
71:f2:5e:7e:00:bd:12:82:a4:44:2d:f9:13:c6:5e:db:ea:14:
fb:2d:b7:97:9c:77:d0:3b:ca:57:29:f5:84:02:6c:7b:84:4c:
fc:71:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:19 2026 by rpki-client