
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: uLacGe9BVUAfHWdn3VUfk6LVtEsAdb0K4vZkhAZDNzc=
Subject key identifier: DB:37:29:73:0F:98:07:19:85:67:DF:DA:89:C3:F9:27:1C:64:2A:8F
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 1B60F2769834BAE690B513CF106D49A0B9844096
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0158
Signing time: Sun 15 Mar 2026 13:29:59 +0000
Manifest this update: Sun 15 Mar 2026 13:24:59 +0000
Manifest next update: Mon 16 Mar 2026 15:41:59 +0000
Files and hashes: 1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
2: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
3: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
4: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: KOLmMvhCoCghQaS/RhVzCDtgbRzQr5n4yHDnmJPasCw=)
5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
6: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:60:f2:76:98:34:ba:e6:90:b5:13:cf:10:6d:49:a0:b9:84:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Mar 15 13:24:59 2026 GMT
Not After : Mar 16 15:41:59 2026 GMT
Subject: CN=DB3729730F9807198567DFDA89C3F9271C642A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:05:99:51:07:ae:b5:ef:d3:2f:31:43:c4:
d5:d4:56:c1:f9:59:bc:f4:ee:51:f2:60:e4:79:7b:
27:50:35:67:41:64:26:9f:b3:31:20:7d:70:ba:9b:
89:bf:86:8e:e2:8f:9a:bd:84:f0:de:48:c6:7f:ec:
fc:14:8e:55:a9:15:99:6b:32:10:fb:cb:dd:20:42:
51:2a:51:89:3c:3c:06:59:a7:83:47:ff:e8:5a:0b:
18:e0:ea:44:b6:ae:eb:8e:a6:76:3d:bb:f5:fd:07:
26:ac:1b:30:b6:c3:d1:30:96:04:27:15:28:7c:83:
b7:f1:bf:94:1a:82:7f:42:bb:bd:a1:ae:79:9d:4e:
a3:33:15:b1:be:7b:42:db:ec:2f:72:d9:74:aa:51:
03:25:87:2b:1f:9a:0c:23:fd:dc:8a:53:8c:91:cb:
19:f8:5d:88:04:ad:a5:d6:95:8b:78:88:c6:47:f4:
a7:dc:1c:38:9c:d7:c9:48:98:14:d2:73:6a:b5:05:
f2:82:b5:5d:e8:53:60:78:e3:43:67:99:e9:37:eb:
7e:ce:51:87:bf:e3:4e:a9:ce:b3:bc:6f:d6:fd:88:
f9:cb:1e:65:32:bb:86:bd:ec:f8:4c:8a:27:f6:33:
eb:1d:47:13:cf:69:18:87:0b:86:25:09:20:52:00:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:29:73:0F:98:07:19:85:67:DF:DA:89:C3:F9:27:1C:64:2A:8F
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:38:fa:8f:34:81:0c:c7:39:5d:f1:b3:e8:a0:88:1d:8b:e0:
8b:20:78:2a:89:05:76:fb:e9:22:f2:27:0b:16:a0:24:40:a9:
ed:89:3d:f9:ed:72:83:e5:72:37:52:2d:44:2b:a1:77:5d:11:
e7:74:1d:44:b7:87:1f:61:61:5f:86:81:99:20:35:b7:cf:f2:
cf:c2:37:81:ba:ec:03:b8:c3:30:aa:68:ef:0a:53:a1:3e:6f:
c0:28:47:c4:d1:ef:f6:a6:32:5c:19:e9:78:f1:65:a6:a4:a0:
09:d0:1a:f9:9e:54:82:0f:c7:59:94:44:3d:a6:a1:44:5f:70:
a1:2e:6c:94:f5:34:73:22:06:82:3e:cb:68:6b:a4:33:79:c7:
fb:bf:e4:f1:a7:ae:d4:70:33:00:52:d1:65:99:a6:05:37:99:
22:ec:b3:18:ca:0f:5b:32:91:85:60:af:e4:71:f1:d0:42:89:
62:95:72:77:fe:14:0d:34:6b:47:e0:2a:e2:68:c2:14:7d:ba:
96:8c:77:e6:c6:84:5b:25:d9:9a:89:ba:7e:05:e9:3f:40:0f:
fc:55:79:9d:86:86:bf:47:1b:50:cb:0f:08:0f:7d:07:35:1b:
77:ec:d4:74:e2:ba:ec:54:4b:a0:26:1b:55:b6:b7:ca:2a:2b:
98:79:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:40:11 2026 by rpki-client