
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json)
Hash identifier: 26z+aNtoiDFW6mhzdi4QRx9eTAixvDL/Zu/HrFmoDBw=
Subject key identifier: AC:FA:E8:63:40:D7:D3:9A:77:95:87:7D:DB:1E:4D:62:CC:17:71:9A
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial: 398FFC634F89B75931260864ED8A560910FBC5A4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
Manifest number: F6
Signing time: Tue 28 Jul 2026 10:03:02 +0000
Manifest this update: Tue 28 Jul 2026 09:58:02 +0000
Manifest next update: Wed 29 Jul 2026 13:45:02 +0000
Files and hashes: 1: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=)
2: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=)
3: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=)
4: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=)
5: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=)
6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: 60HH1mwtCGqiZ8sPTZv45pN827BW48KHg3lyEcT93wA=)
7: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=)
8: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=)
9: 3139342e33312e3136342e302f32342d3234203d3e20313531373034.roa (hash: qPTeTmV7oWgeHcKKTzXESARKHRkTDbk6syKPhIyZlgk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8f:fc:63:4f:89:b7:59:31:26:08:64:ed:8a:56:09:10:fb:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Validity
Not Before: Jul 28 09:58:02 2026 GMT
Not After : Jul 29 13:45:02 2026 GMT
Subject: CN=ACFAE86340D7D39A7795877DDB1E4D62CC17719A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:80:45:ff:6c:4a:94:c3:12:a5:43:9c:8c:48:
bb:c1:4f:6f:c5:0b:13:3b:fe:28:12:dc:1d:57:e8:
aa:71:23:38:70:ab:0d:6d:da:0a:af:5c:12:d1:8f:
12:a5:0c:6c:e5:a2:7c:8f:fa:d7:a6:50:9f:3c:d5:
12:3e:0b:df:cf:3f:4c:11:f8:34:46:49:98:2d:f9:
f9:f6:c2:8e:3a:ad:f8:5d:44:34:ae:8a:9e:41:5a:
03:3f:80:6b:0a:06:33:98:bb:16:6d:db:c6:51:32:
23:d4:c5:35:be:ce:96:47:f2:94:ad:87:58:31:c2:
51:87:6f:22:c6:93:5a:55:64:7e:df:2c:e6:3d:7e:
52:f3:43:99:92:ff:52:de:11:f7:ac:84:4e:c2:1a:
71:57:04:7e:59:fa:4f:68:5e:ed:c4:f8:92:a6:ff:
06:db:ba:5c:eb:63:57:f3:52:ce:a7:ab:de:37:38:
ec:00:0a:6b:3f:a1:1f:a3:e1:e2:d8:6d:fc:d9:3c:
4a:b3:45:20:8a:54:8f:85:22:65:66:28:c8:a4:5d:
e0:30:76:5a:67:16:a6:f5:52:79:84:b8:ec:20:ea:
c0:30:4e:e8:9e:27:78:83:a9:e1:b2:21:73:ac:49:
aa:e0:32:15:96:56:26:c8:d5:fc:ba:7b:fb:be:95:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:E8:63:40:D7:D3:9A:77:95:87:7D:DB:1E:4D:62:CC:17:71:9A
X509v3 Authority Key Identifier:
keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d0:77:fb:6d:4b:be:57:8e:c5:eb:80:e7:d1:e5:a9:25:db:
a1:d8:85:3b:12:a4:f6:79:65:36:40:a3:cb:dc:b9:b4:ba:da:
ae:d0:75:d1:fb:a8:e2:6a:02:60:65:13:12:c9:41:be:e7:32:
df:35:dc:f3:e8:e9:b7:b1:16:da:61:2a:fd:02:22:70:bd:34:
c8:a1:97:d7:71:3e:d7:3b:2c:f1:ab:8c:18:cc:19:2f:dd:93:
98:be:4e:40:59:fc:01:e8:07:91:5c:77:38:b6:b8:5e:48:aa:
fc:d7:ec:a6:45:fd:3e:00:ea:c8:da:9a:f1:11:0e:3b:ed:8d:
23:1d:c5:f0:ab:c7:29:c3:35:cb:fb:b1:9a:34:45:24:c5:60:
d2:40:35:6d:7a:a3:41:8b:ec:f7:d0:68:a1:99:8f:ad:57:79:
21:86:78:8d:e0:5e:1a:23:21:52:cd:5b:4a:76:d6:86:87:82:
75:a5:8d:2c:d3:79:d3:12:15:3d:9b:b7:67:e1:30:f2:af:05:
35:76:df:ee:50:e2:4a:91:7b:d6:e8:d9:f4:a7:59:92:d5:53:
ac:a7:a5:ce:c8:94:47:f3:dd:9e:48:2c:24:d5:6f:c8:03:a6:
e7:e2:1c:bd:48:06:6e:4b:07:f0:42:e2:37:d5:02:0e:c8:ff:
2a:01:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:20 2026 by rpki-client