
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: JkKjybHqrRoIt42zymfFLdax3IOl2VVwG8scRbifaks=
Subject key identifier: 1A:E9:DE:55:1E:34:7B:CA:58:3F:1C:53:5E:8E:B6:B3:DD:0C:B6:5E
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 11B15FEAB97C3B2392493332EFC55C70306D4627
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 01E5
Signing time: Thu 25 Jun 2026 01:12:05 +0000
Manifest this update: Thu 25 Jun 2026 01:07:05 +0000
Manifest next update: Fri 26 Jun 2026 03:29:05 +0000
Files and hashes: 1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=)
2: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: FVeJGr7pGoUXj/H9Q+U8JZGo7MhlPSHBkxfm6DJIRHg=)
3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=)
4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=)
5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs=)
6: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:5f:ea:b9:7c:3b:23:92:49:33:32:ef:c5:5c:70:30:6d:46:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Jun 25 01:07:05 2026 GMT
Not After : Jun 26 03:29:05 2026 GMT
Subject: CN=1AE9DE551E347BCA583F1C535E8EB6B3DD0CB65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:43:22:1c:b6:21:88:8c:56:61:0b:35:9f:
82:88:5d:ee:c3:d8:d6:21:e4:c8:cf:c5:13:eb:4d:
63:69:31:64:34:85:8d:df:4a:ba:bd:96:f8:6f:d3:
9f:ce:63:3d:a7:3e:0b:f2:83:b5:4b:83:f6:8c:46:
61:76:48:30:49:05:8b:98:55:39:18:2b:ea:db:e1:
c4:53:1a:27:98:9b:a6:92:7c:ee:94:3e:26:a1:00:
d8:ba:9c:76:44:84:64:f4:32:18:06:38:65:0a:84:
95:99:38:da:af:92:17:d9:96:49:29:c1:f0:6b:e7:
1b:6d:8c:74:3c:4c:63:97:fb:b1:43:0a:d5:05:f2:
45:8d:dc:7a:d4:35:3a:8e:59:48:7d:a6:c3:93:a2:
3c:04:79:11:eb:77:a5:3f:72:d8:e6:77:b3:a2:87:
c4:3f:c8:45:c3:8e:74:da:29:42:2f:ca:82:05:d3:
99:73:b8:b1:34:f4:f1:82:47:04:5d:b7:d2:22:c8:
9b:a2:50:4b:93:d4:26:07:07:01:4e:2e:af:99:72:
11:90:c8:e5:05:86:30:19:84:3c:f8:55:79:79:1d:
44:e6:ae:d5:1c:c3:9f:3c:0d:e6:64:6a:af:36:61:
a6:d5:2c:1c:9b:6c:1c:b2:be:42:f5:2f:a7:7e:bf:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:DE:55:1E:34:7B:CA:58:3F:1C:53:5E:8E:B6:B3:DD:0C:B6:5E
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:08:bc:e9:4c:b5:3b:41:e0:68:d6:e2:ae:57:0e:e5:32:bf:
f0:0c:79:0a:5d:bc:4b:b1:ee:66:c6:84:64:cf:aa:51:d3:68:
a0:4f:97:d5:25:1e:e4:7d:af:ed:bc:97:c8:58:75:b5:bd:20:
81:ef:52:b9:9e:4c:b0:71:2f:98:d5:64:2a:07:fb:37:53:d0:
22:0c:c8:a4:4a:b7:02:96:a6:37:f7:95:35:51:4a:ca:c2:95:
19:ca:bc:61:27:7e:40:63:86:b5:bb:4f:06:0c:b7:85:10:42:
a2:b3:cb:ea:11:2f:45:30:75:c2:19:80:e5:4c:96:49:35:36:
29:da:5c:8e:1e:1a:cf:30:f0:09:99:32:1e:21:2e:e2:0d:6f:
2b:d8:c1:26:d8:ac:c7:0c:6f:3e:e1:44:94:87:a6:f4:ad:d6:
95:3c:84:8a:6c:77:17:09:fd:5a:03:68:e2:26:06:64:d9:e9:
8b:67:58:3a:82:7b:1c:24:ee:f3:34:36:17:9a:6f:d6:40:c0:
0d:ef:ee:c0:41:37:a8:8a:99:9d:38:48:99:67:40:3e:d1:2d:
78:67:aa:f5:b8:b8:e4:1a:02:b2:dc:d7:fd:a9:03:c9:6c:54:
07:dc:ff:51:44:55:cc:3d:34:32:20:5e:2f:73:01:83:1d:73:
a4:1b:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:21:48 2026 by rpki-client