
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier: /L2BAe0e4GrbRP5OUoHL0Id0O1+TYQEOR6w1zrK0W5Q=
Subject key identifier: 6D:E8:22:9F:00:2B:93:05:D4:F8:4E:F7:A9:60:E5:01:7E:29:D5:BF
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer: /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial: 150B6897290D5AF62E63DC9FA00E81AA7317EC3F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number: 0105
Signing time: Tue 21 Jul 2026 02:58:54 +0000
Manifest this update: Tue 21 Jul 2026 02:53:54 +0000
Manifest next update: Wed 22 Jul 2026 05:33:54 +0000
Files and hashes: 1: 326130663a316363363a666530303a3a2f34302d3438203d3e20313939373934.roa (hash: bczv8HPQxrdQAlSAG21zowjSuyByV0J0vFQmDC8cfZ0=)
2: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
3: 326130663a316363363a623135303a3a2f34342d3438203d3e20313939383137.roa (hash: jAjlYxtD2JiQt/anCFJXoX013l22BEoSBOom0VVJ2SM=)
4: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
5: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
6: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
7: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: fNT6xQfiZol9QU8G55L/jqw53jDnLlnp9gqruqt+6oE=)
8: 326130663a316363363a623230303a3a2f34342d3438203d3e20313938313535.roa (hash: R0Zp25uniUy1vGT1s0rsGRtZxCDntggB9KJVr/ZGHFk=)
9: 326130663a316363363a623137303a3a2f34342d3438203d3e20313938353838.roa (hash: Z1D2tzNH9Lk3h3VvnoiCB7e43V2PFv05dOJ2CtKqIbE=)
10: 326130663a316363363a623232303a3a2f34342d3438203d3e20313937313936.roa (hash: HmKrlFyhqlQZZbvjhxJnQb4uO8wWIL79TVFNo65Q1cE=)
11: 326130663a316363363a623136303a3a2f34342d3438203d3e20313939373934.roa (hash: CcK314TQaccXuzd2zjleKccUXAJU6r52sUrMN4OiPfc=)
12: 326130663a316363363a623234303a3a2f34342d3438203d3e20323139323839.roa (hash: bkUuykciTWh1bfFW0KX433jPn5468fT5sPJmNyOz8Lk=)
13: 326130663a316363363a623232303a3a2f34342d3438203d3e20313439353133.roa (hash: +hLyO2byVr3CI7RxU47nKmJbK198DWDlst7nIi5HHww=)
14: 326130663a316363363a623138303a3a2f34342d3438203d3e20313938333331.roa (hash: SQQpuf9MPugDuKKbLcQGIvoOhKwZP0elwI8EjjLg1go=)
15: 326130663a316363363a623139303a3a2f34342d3438203d3e20313938333035.roa (hash: MqnRABjnmlRpFJeXPojgQfKbU77XB43KxaLrjADcIBQ=)
16: 326130663a316363363a666630303a3a2f34302d3438203d3e20313939373934.roa (hash: u2OSA0CA/LhD/ehNs3nGB0Ac0Hv0xN26zlrjRiwlUDk=)
17: 326130663a316363363a623233303a3a2f34342d3438203d3e20323139333234.roa (hash: Fbr3d6vsF9f3Md2rcurK4yxy/TMDLffSbQOPQZqVAk8=)
18: 326130663a316363363a623134303a3a2f34342d3438203d3e203230343733.roa (hash: 0uVBH5sUFKMTa796Uvv1SVvRGarUL75dm7ieOip7W/Q=)
19: 326130663a316363363a623133303a3a2f34342d3438203d3e20323031373730.roa (hash: Efws7PM/OQeywU7TXDwbueQNU1D1OoCjFxiKYnz5zVA=)
20: 326130663a316363363a666430303a3a2f34302d3438203d3e20313939373934.roa (hash: 7kHfAdGzdlPdhwNaqHeUsijlhqrvdKv4GhsJwDJouZY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:68:97:29:0d:5a:f6:2e:63:dc:9f:a0:0e:81:aa:73:17:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Validity
Not Before: Jul 21 02:53:54 2026 GMT
Not After : Jul 22 05:33:54 2026 GMT
Subject: CN=6DE8229F002B9305D4F84EF7A960E5017E29D5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:03:a5:44:32:45:a1:f4:33:57:22:70:df:
e9:3c:f8:c7:6a:d5:bc:ee:cd:a6:b8:6a:0a:ec:05:
82:57:00:9f:b9:e5:f2:54:84:b3:35:b7:c4:59:12:
bd:f8:af:30:49:24:2f:c3:1f:60:dd:01:49:a4:5e:
2d:36:5d:c4:69:6b:b5:f5:9a:88:65:c9:08:0e:22:
93:2a:0a:8e:16:60:77:65:96:33:f3:bc:09:7d:84:
02:af:cb:21:a4:26:93:c5:d3:cd:26:64:3a:d4:7e:
34:6a:00:f3:99:22:27:d1:f2:8c:c2:58:b1:92:b3:
f2:77:ab:e8:35:b6:20:80:81:06:2c:ad:5e:be:3a:
93:f3:86:a4:8e:a1:8d:94:13:48:bf:45:60:38:85:
d9:6d:1f:94:76:91:36:4d:54:80:d8:e6:2e:75:ca:
e6:01:71:48:09:b8:ca:9e:be:58:fb:df:9a:c4:15:
5f:29:d7:9d:65:47:2e:57:32:f8:11:35:1c:aa:bf:
7c:05:69:97:a4:c9:09:65:bb:6b:7f:fc:49:68:ba:
3d:a3:4b:bc:29:67:c9:44:fb:6f:e8:ef:b7:3a:11:
0e:34:b8:1b:69:d2:f0:08:97:53:f3:70:91:e2:71:
ae:5f:fc:08:55:d2:47:68:18:99:5d:cf:f2:7d:e2:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:22:9F:00:2B:93:05:D4:F8:4E:F7:A9:60:E5:01:7E:29:D5:BF
X509v3 Authority Key Identifier:
keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:5a:6a:d9:9d:70:46:64:ca:96:cd:39:77:32:c3:46:ed:
9d:58:a8:b9:27:f2:19:0a:da:ee:7c:22:64:27:8c:7e:dd:42:
02:1a:4a:da:db:42:b2:db:f7:80:e0:e9:7e:10:92:2f:76:f5:
3e:70:78:9a:a3:7f:02:b3:b0:ec:57:ce:15:9e:8b:6c:4a:5b:
38:de:6f:38:ce:0f:13:4e:4c:a0:1b:fb:3b:fa:92:c2:35:f2:
6a:a4:9e:a4:91:91:19:82:c7:bb:b2:b9:e7:cb:4b:48:16:0b:
1c:5e:a5:60:67:c8:fc:a4:fe:db:23:2a:09:1d:21:ac:71:46:
ed:4f:9d:e8:5f:eb:dd:32:5d:a6:63:b0:c9:ab:69:e4:f6:9b:
de:12:0f:f3:48:91:8f:ca:8c:38:bf:b4:e4:15:7a:de:3b:82:
41:3f:17:73:4b:1f:fb:cc:a7:d9:69:9f:bb:64:41:7d:55:1a:
83:8e:38:ff:a5:4a:fb:ae:b9:65:79:d5:e4:16:b3:e2:99:07:
74:66:d6:01:55:7f:bc:26:4b:72:77:86:65:ce:b0:81:4b:ed:
9a:da:ae:1b:e5:2f:3c:cf:d4:94:d4:f2:39:7d:69:be:67:38:
aa:9c:1c:1a:62:87:73:51:67:ce:72:65:b8:80:4c:6f:d9:e6:
11:99:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:52 2026 by rpki-client