
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: RmGEdsybT9JvUmGM+RRQ8n0V23ZB47Q48tAKHk19FmA=
Subject key identifier: 17:47:A5:1A:93:08:BE:23:EC:CA:08:92:5B:83:34:02:4D:3B:23:D2
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 33637832C023D552886C62886B7125C5A5D5B68B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 01F7
Signing time: Wed 04 Mar 2026 10:58:04 +0000
Manifest this update: Wed 04 Mar 2026 10:53:04 +0000
Manifest next update: Thu 05 Mar 2026 13:00:04 +0000
Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=)
2: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: km/FpVmgduySmFSTP8A1YfhBsj2sf7b/riGcX6alPxM=)
3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:63:78:32:c0:23:d5:52:88:6c:62:88:6b:71:25:c5:a5:d5:b6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Mar 4 10:53:04 2026 GMT
Not After : Mar 5 13:00:04 2026 GMT
Subject: CN=1747A51A9308BE23ECCA08925B8334024D3B23D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:57:29:c7:4d:40:4c:7a:b5:c5:6a:35:d1:
0e:b6:c3:60:73:e5:48:4b:92:0b:d2:8d:8d:f8:1d:
a6:81:b7:c8:50:be:c3:a5:f9:41:df:9c:92:38:9e:
c0:6a:32:37:3d:81:3b:5f:65:59:52:88:a0:54:c7:
e9:ac:0d:c3:1c:66:cc:23:49:67:a8:18:5b:ff:62:
4f:bb:e6:80:6e:ea:4e:9e:33:ad:13:4e:4c:4f:2b:
60:e0:8e:86:0d:b2:ea:17:35:72:ef:b5:4e:81:04:
92:e0:56:95:c8:9f:29:58:7a:b8:15:cb:19:df:a5:
6f:2b:13:73:45:b5:88:94:d9:b4:fb:11:6f:07:59:
53:eb:f0:b3:4a:40:8e:e5:0c:f7:bd:38:e3:48:e4:
48:80:37:30:b7:a8:6b:67:55:5d:ca:82:f3:d0:05:
1b:97:0d:68:64:b4:da:4b:32:20:46:71:9f:4f:aa:
80:fb:0f:b9:bf:c2:c6:83:c1:4d:c8:e9:9e:9c:78:
bb:bc:51:f4:58:9e:17:a7:34:d2:f4:78:44:29:e3:
be:98:ea:7e:c7:6c:76:5d:13:02:fa:2b:e8:fb:eb:
93:ba:17:a2:92:71:09:86:3f:18:26:06:d9:f8:4d:
f7:2d:82:37:63:48:b0:3f:f3:fd:3d:a7:68:86:40:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:A5:1A:93:08:BE:23:EC:CA:08:92:5B:83:34:02:4D:3B:23:D2
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:71:5e:72:29:8c:5c:28:9d:3d:5e:98:d5:fb:68:f4:ed:
8c:8d:8d:ec:94:c3:9e:29:2b:0e:c4:c2:4d:fe:e7:26:59:d8:
f9:5a:fe:21:84:a0:51:5c:11:82:a9:e2:d2:b4:e5:f1:9b:42:
7a:4f:92:19:ed:74:ae:57:e0:b6:33:78:b9:e6:e3:7b:f2:eb:
d5:27:25:6f:7e:6e:67:bd:03:77:9e:5e:bf:d8:55:ac:8d:e2:
15:91:f3:ec:c8:94:a8:07:09:c0:81:fc:fc:2b:bd:2a:65:01:
63:84:8b:ad:22:28:95:6d:d2:0f:0b:0a:1c:8d:29:62:62:ba:
50:60:72:34:fc:3f:b0:7e:e8:31:d2:0b:e9:20:18:c5:eb:b1:
63:54:c3:45:c6:42:5f:ff:64:8f:be:72:18:02:70:09:d5:6d:
24:e3:40:40:27:0f:ac:ae:37:fa:cc:da:7e:c0:34:c6:6f:26:
7a:f3:5b:c7:0c:88:ae:1a:9a:dc:15:cc:5f:31:73:b9:c1:5c:
29:d0:b4:ab:ec:88:ff:3b:33:f1:25:93:34:e0:c8:58:d2:7c:
a8:5d:82:6c:e4:17:32:f0:1c:f2:12:59:01:15:ff:5b:30:23:
6d:71:7b:df:5f:d2:04:d2:41:51:3b:40:b1:23:5f:a0:d6:47:
96:16:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:25:14 2026 by rpki-client