
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier: CKmGfbnUWhzDwI9UvB1aTimDIIa+bYos+dwmQ1IyfH0=
Subject key identifier: 96:C4:1E:9B:56:FB:71:EC:FF:12:2C:CA:FE:B8:21:FF:A4:29:2D:24
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial: 017F713021A99CF806C386AAECFCD8ACBB35BF79
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number: 0183
Signing time: Wed 21 Oct 2026 18:53:17 +0000
Manifest this update: Wed 21 Oct 2026 18:48:17 +0000
Manifest next update: Thu 22 Oct 2026 19:36:17 +0000
Files and hashes: 1: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
2: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
3: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=)
4: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
5: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
6: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=)
7: 326130663a316363363a623236313a3a2f34382d3438203d3e20323130343430.roa (hash: BBIINwZ22Hh6hrSdWji52wFJuJeFGO5YGYYIOcfRZis=)
8: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
9: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
10: 326130663a316363363a623237303a3a2f34342d3438203d3e20323138333831.roa (hash: 2MmLnL57ra7Wby+jYaCtzMXod1WyRblYvU/0wEIFC+8=)
11: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
12: 326130663a316363363a623235303a3a2f34342d3434203d3e20323131353735.roa (hash: 8mE1jAfmLyWfaMnOLOuvCITYLEI/kRV9tFQm4x0RWuU=)
13: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: Epg9/MvH1FoIVQJQG1+ypLO8zLxgVYLXduYxajc1PRQ=)
14: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
15: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
16: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=)
17: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=)
18: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
19: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
20: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
21: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
22: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
23: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 19:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7f:71:30:21:a9:9c:f8:06:c3:86:aa:ec:fc:d8:ac:bb:35:bf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Validity
Not Before: Oct 21 18:48:17 2026 GMT
Not After : Oct 22 19:36:17 2026 GMT
Subject: CN=96C41E9B56FB71ECFF122CCAFEB821FFA4292D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:59:e1:43:3d:5c:d7:a3:7e:a6:45:f2:cf:
a1:bd:50:07:17:15:11:7a:32:d9:99:48:c0:24:b1:
c5:3f:f3:c8:fa:27:5f:d9:fd:68:aa:29:7a:b4:1d:
12:95:8e:29:a0:a1:88:6d:5b:ad:84:51:8b:01:0b:
20:c4:ba:4f:77:92:31:27:c9:5e:d6:df:21:48:53:
87:cb:1d:f0:46:f7:a5:cb:d7:a9:f3:bb:93:cb:0f:
e2:73:1a:0e:a1:c2:c0:43:6c:7b:c9:97:82:f0:11:
aa:74:f1:c2:d5:aa:2c:d6:5d:6a:40:1d:12:d6:de:
57:b2:0c:96:a6:11:c0:de:0a:56:17:10:ff:fa:c7:
5d:4a:0b:89:81:6e:8b:01:22:ba:5f:bb:20:fa:2d:
58:50:5a:fa:e0:87:75:7d:30:27:2d:e2:7f:ac:d8:
97:94:57:fb:2c:f4:c2:bb:16:0d:02:6f:9d:cf:9c:
4b:e0:be:ac:c1:97:31:05:ad:e1:56:c8:9a:77:45:
1f:05:30:59:cd:07:3b:2b:c6:5c:8b:d4:80:98:f0:
88:42:32:89:49:ec:d8:dd:fc:9a:6f:e2:5c:c3:44:
a3:1e:e0:54:87:32:de:d6:cd:af:89:78:d8:cc:f6:
f2:10:e0:9c:1d:1c:0b:97:2f:d5:ff:17:82:7c:18:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:1E:9B:56:FB:71:EC:FF:12:2C:CA:FE:B8:21:FF:A4:29:2D:24
X509v3 Authority Key Identifier:
keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:36:31:49:c9:09:8a:1f:fc:bc:f2:aa:ee:56:8b:0c:4c:
ea:6c:3f:f8:48:54:76:76:cc:f7:0d:19:20:5e:75:cd:2e:5c:
78:fd:0f:ff:5d:7f:58:45:f6:b1:6a:0c:42:60:1f:c9:3a:07:
9e:36:f0:09:73:c0:af:77:08:29:df:0a:98:a1:31:b3:d1:a9:
ae:dd:64:eb:f4:fc:06:1e:9c:1e:72:cc:3e:ed:8e:4a:36:58:
4d:19:f1:12:2a:89:cd:a1:64:05:86:39:5b:4f:bc:37:9e:c8:
19:a3:0d:c7:e0:0c:47:7a:5b:81:ed:a5:87:f9:7c:c5:31:73:
54:f6:aa:cf:4e:a3:3b:08:e9:6f:0e:01:74:98:7d:29:af:87:
ae:f0:04:2f:92:17:24:88:43:6d:1e:cd:3b:64:1d:63:c2:da:
62:73:3a:b0:78:2f:62:92:79:2d:1c:bd:1e:62:2f:12:16:5f:
9a:17:69:87:2d:64:57:75:e6:3c:6d:ee:63:ba:b3:20:be:36:
4d:d4:34:9f:34:5f:a8:73:bb:25:66:57:2f:8f:71:d2:5c:2c:
dd:20:37:23:22:a6:90:24:4b:e1:e1:ec:2b:52:7a:7c:d0:b6:
98:36:7f:cc:30:b6:85:a4:ed:2d:9c:f7:9f:00:8f:64:e5:0c:
6b:53:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:21 2026 by rpki-client