
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: MC5ea5JzEKUEcomiRqvk6T4e9LD49MsqJuRkKy4TFAs=
Subject key identifier: 56:83:87:58:5D:71:4C:24:D0:89:97:D4:72:1D:5B:F7:4D:33:69:DC
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 5980E6CEB9A128960469744EFEC9EACC2B579209
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 0234
Signing time: Sat 18 Apr 2026 17:49:26 +0000
Manifest this update: Sat 18 Apr 2026 17:44:26 +0000
Manifest next update: Sun 19 Apr 2026 18:41:26 +0000
Files and hashes: 1: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: j2vksxdyRjri2bmGlinvGPIGLO3M6R4gqJYqbQ2UtHA=)
2: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: tIRLcVg7UrhNFhqoUSzyKAfDY3qvSoSmXd0Y8F0kvUs=)
3: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: OqGaVqVCLNSInBlm8X6eu0kCi8tEf6Tx9W+YlK/qfuw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 18:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:80:e6:ce:b9:a1:28:96:04:69:74:4e:fe:c9:ea:cc:2b:57:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Apr 18 17:44:26 2026 GMT
Not After : Apr 19 18:41:26 2026 GMT
Subject: CN=568387585D714C24D08997D4721D5BF74D3369DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:e7:16:f3:f3:07:09:65:e5:3a:28:e3:d4:
ae:ee:d5:f6:44:1c:31:1a:27:e5:0a:fa:6e:3e:7a:
ee:18:f2:77:ed:7b:e2:0f:9c:0b:e6:b4:8d:0f:e1:
a9:2a:4f:01:35:a9:52:e1:a3:52:73:48:78:e4:a8:
41:9d:f9:0b:9b:bc:f2:5f:81:48:15:e0:a3:98:6d:
38:2e:03:77:e0:83:35:e9:78:6f:36:40:7c:fc:4b:
cb:0f:26:b5:7a:a0:1f:73:5e:ca:19:50:a7:ac:68:
65:e1:48:25:e1:5f:74:f1:58:4e:36:b2:93:5f:0d:
71:34:e8:80:cb:80:a4:f3:eb:1b:32:84:ee:d4:e1:
52:67:0f:72:5e:f3:c9:fe:f9:22:7d:00:a5:3f:13:
2a:58:69:8f:b8:d6:80:fe:88:bd:ff:a5:0f:c1:3f:
69:8c:0b:87:2a:f9:5e:47:67:a0:d2:5c:5c:73:bd:
ca:f4:8e:a2:d5:c3:18:53:2b:08:7a:a9:a1:10:39:
95:11:de:5a:1c:67:a1:39:90:c7:25:7e:4c:81:80:
8f:21:6d:e3:18:6f:f9:b3:0c:20:20:2f:19:be:e6:
66:d9:f0:53:b6:bc:2d:37:3d:bb:43:b0:de:a4:c1:
2d:58:1a:ff:ed:1b:b8:4e:eb:bf:e0:ac:26:6c:2e:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:87:58:5D:71:4C:24:D0:89:97:D4:72:1D:5B:F7:4D:33:69:DC
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:16:db:86:d0:55:ec:04:14:34:94:8d:67:8d:d0:d5:74:44:
70:a1:de:1e:9c:47:72:1f:72:23:1a:d7:d8:84:7d:ff:57:e6:
e7:7a:e5:78:3a:14:8c:a2:69:25:4e:84:86:0b:ef:83:90:1b:
c2:63:2d:68:5b:90:dc:bf:98:3f:b7:3c:07:76:41:fc:d9:be:
99:3b:07:23:52:f7:28:95:b2:61:8a:62:d7:08:da:1c:cb:90:
e9:52:39:74:f4:1d:41:55:66:6e:e2:08:b7:98:03:1b:87:44:
e6:e6:3d:87:38:a1:4e:6a:de:b2:f3:34:54:8a:4d:f3:e4:dc:
dd:c6:73:1a:52:d5:47:ba:6e:89:f0:2b:7d:68:d5:60:c9:b5:
c7:03:41:fc:71:2d:ec:54:de:a8:ae:2c:7f:18:3b:35:e7:6e:
af:63:95:2e:01:24:b4:df:a1:51:34:be:06:91:ec:37:17:34:
3b:86:c6:24:db:b9:3b:55:74:b1:8b:81:cf:6f:1b:0c:cd:f3:
71:fa:b5:03:d8:55:3e:5d:17:03:3b:40:2e:1e:75:04:88:58:
4f:78:61:d9:84:a5:3d:58:23:a4:c3:83:7c:42:ea:bd:3d:cd:
85:57:87:51:49:4c:11:5e:f0:44:cd:76:be:ee:94:4d:29:63:
cb:df:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 05:41:39 2026 by rpki-client