
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier: blIM54d6YqxArDWsOEC5hd3r69fMGm0HR0rb6MZOxwU=
Subject key identifier: 50:18:D5:44:1E:4F:C9:B3:BE:5D:A4:D5:A7:33:F2:44:6C:74:07:4E
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial: 37C68659EF801BA19665F56777915F6FC0623997
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number: 0277
Signing time: Thu 08 Oct 2026 05:32:10 +0000
Manifest this update: Thu 08 Oct 2026 05:27:10 +0000
Manifest next update: Fri 09 Oct 2026 08:31:10 +0000
Files and hashes: 1: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: BylLqrJdzJY1U3EhC5IP7YYn1BvBHfO9BvQfvXlNUzo=)
2: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: h+i5iNq2HhuYpHClFvwdiV/aTyG+CJ60spe5U0eVWQY=)
3: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: TnOKZ29z57WPuuAiM1ZmtS5ep5yz6fX+hNHGNg6nE64=)
4: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: 43/Hl3X+BREyxQjjJV5Oda1rLTc1IyLJ2mCyE8ROtmI=)
5: 326130353a646663353a3a2f33322d3332203d3e20323033303639.roa (hash: 1TfiGVzOrsDaGT5s8N1oSkECX3MMsr3gXEgw7UF/3c0=)
6: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: FkfWJe29iHnNlJdMbmZJIXc57ti+3ftPAFjBN1jj2Hs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c6:86:59:ef:80:1b:a1:96:65:f5:67:77:91:5f:6f:c0:62:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Validity
Not Before: Oct 8 05:27:10 2026 GMT
Not After : Oct 9 08:31:10 2026 GMT
Subject: CN=5018D5441E4FC9B3BE5DA4D5A733F2446C74074E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:69:f9:03:be:85:11:e7:e8:03:d2:d8:ce:
c3:78:cb:3e:28:40:8b:41:a8:21:77:bf:6d:9d:9a:
f0:80:9f:26:ae:ee:d4:a6:6e:a1:50:53:e7:51:b8:
a4:58:0c:ec:c6:06:88:a1:13:8a:be:66:09:47:dd:
ec:57:5e:d9:e2:3f:5b:60:fa:e5:ba:f9:c2:00:47:
b7:01:a6:46:fa:0a:d5:df:94:13:79:22:9d:ae:1e:
86:a5:c0:5d:a2:64:ca:dd:b6:5a:96:2e:41:63:63:
6f:1c:4c:e2:a7:cf:90:24:7e:e7:f1:83:da:00:e5:
66:f0:15:2d:d2:cc:90:68:3a:b0:08:3b:f2:8b:30:
14:33:93:2b:30:02:4e:1e:fb:7b:7e:e7:72:d2:84:
5c:1a:4b:8e:a8:04:fb:f5:04:42:55:1f:7e:48:54:
4d:28:c1:23:19:2a:c0:91:3f:27:b3:f3:44:a0:5f:
2a:6e:cc:e7:75:21:c0:b3:e3:1e:c2:8f:f2:33:03:
6c:24:e9:b4:72:b7:a7:8d:9c:9a:a0:8a:1a:c1:0a:
8e:69:16:25:29:1a:a8:45:3e:e0:c0:7b:60:47:f0:
30:31:48:a1:6a:ab:83:36:cb:e9:0f:f5:51:fc:de:
4a:5c:82:83:24:34:1e:b2:ee:f8:95:59:19:6a:5a:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:D5:44:1E:4F:C9:B3:BE:5D:A4:D5:A7:33:F2:44:6C:74:07:4E
X509v3 Authority Key Identifier:
keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1a:bd:d0:22:ad:d4:26:7e:a0:c1:1e:17:cf:cf:c5:19:25:
b1:1b:11:88:99:d9:50:84:67:60:9f:08:74:47:b9:1d:12:bf:
4e:bd:81:39:b8:b8:0b:9a:34:d8:60:98:ba:f8:24:e5:ad:30:
cb:d9:26:54:8f:17:d6:36:45:e6:79:61:39:d2:8f:90:d9:86:
d4:ca:68:75:16:44:6c:f4:e4:e2:8a:dd:fc:01:96:87:40:06:
2a:48:39:90:d1:6b:77:82:06:04:d6:13:c1:21:66:2a:ca:de:
65:8f:24:11:f9:e4:78:8a:7c:ae:8f:0c:4a:a5:76:65:18:3f:
8d:cb:98:a7:00:7d:51:7a:f1:d2:93:fe:b5:42:2d:f3:bd:55:
1d:f9:fa:67:b4:2e:58:96:9e:fe:d8:9d:47:1e:6f:f3:e3:57:
8d:2d:18:34:42:9b:6b:4a:66:6a:f1:e7:56:85:0d:76:99:d1:
33:a8:8e:3d:9d:e2:20:b3:ed:33:b4:79:c9:17:d3:2e:d7:d3:
7e:42:fd:cc:36:dc:a9:b9:e4:2c:b6:80:0e:9f:56:83:6f:26:
55:21:dd:ef:db:fa:5f:fe:ba:6a:70:e4:60:66:f2:ac:33:84:
73:f2:f5:fb:3f:6d:6f:66:41:4a:02:ae:22:23:6b:0a:83:f4:
76:45:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:41 2026 by rpki-client