
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier: h0PNshFlihUqEmnrxLNPg42zz+YNNkofZ27qkZZrVzA=
Subject key identifier: D7:EE:D7:C7:3F:C0:66:AD:01:C1:01:87:82:70:75:DA:D1:06:A0:45
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial: 79B319A4022C6A8D3867A6A3B78AAEE60B675D87
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number: 024B
Signing time: Wed 21 Oct 2026 21:09:31 +0000
Manifest this update: Wed 21 Oct 2026 21:04:31 +0000
Manifest next update: Thu 22 Oct 2026 22:51:31 +0000
Files and hashes: 1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: e3h2ZTUNZXjv98ArysnYSYWhaEkUBmjS0VqOuj8+VAI=)
2: 326130623a396534323a3a2f34342d3434203d3e20323134343531.roa (hash: Zck6J2syHDIk/NrGxsNjciGhnmYGMCo7e0kQNyx+lQM=)
3: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
4: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: qsBvkde3cSwvrOpP4JRoz0fQ5CNH+H7Nm3NR3j2Ds0s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b3:19:a4:02:2c:6a:8d:38:67:a6:a3:b7:8a:ae:e6:0b:67:5d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Validity
Not Before: Oct 21 21:04:31 2026 GMT
Not After : Oct 22 22:51:31 2026 GMT
Subject: CN=D7EED7C73FC066AD01C10187827075DAD106A045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:c3:cd:0c:5a:e1:53:3a:5f:74:c2:85:47:
fe:54:21:32:ae:15:a4:66:0e:32:4f:33:9f:e8:76:
eb:86:7d:14:e2:cd:b0:74:a1:de:87:ff:64:8a:c4:
f8:e1:89:c4:ca:06:d1:9e:a8:24:cc:81:6b:6a:67:
4d:33:81:f0:a6:51:97:ae:17:e1:54:ac:12:01:12:
7e:98:5b:cd:0a:50:41:ad:8f:03:e9:06:e0:14:98:
60:d8:67:b7:69:c9:10:76:5c:5a:15:19:5a:52:fb:
04:91:73:29:62:fc:ae:49:0b:dc:f3:86:33:11:e0:
7a:1e:af:1d:76:25:b5:3c:df:f9:64:e4:03:f3:9f:
a5:de:73:99:6c:e3:4a:a5:64:2f:fb:fc:f1:c1:d4:
fe:69:39:69:30:38:cb:f0:d5:53:5f:13:54:e7:ec:
9e:33:59:61:e6:75:b1:6c:a2:ee:77:46:36:52:03:
8a:26:63:8d:95:a7:5f:a0:70:d0:ae:63:f1:92:2f:
28:72:f0:dc:6e:5c:7c:c6:c5:6b:d0:a6:af:29:d4:
61:58:cf:e6:ca:00:3d:1e:49:d0:05:b1:f4:89:3b:
7f:8f:97:78:73:40:57:ed:1f:dc:bf:86:d2:6e:3e:
32:51:e5:c3:bd:e4:64:28:b5:7b:26:cf:df:34:c2:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EE:D7:C7:3F:C0:66:AD:01:C1:01:87:82:70:75:DA:D1:06:A0:45
X509v3 Authority Key Identifier:
keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:22:3e:b4:29:07:07:e4:a6:d9:28:66:b3:7f:1f:5b:e8:
94:06:98:7d:87:3c:1e:3f:38:6f:96:8f:c8:58:c3:49:c3:1a:
03:88:57:0d:df:0f:c9:ce:15:2f:6e:a0:b5:a8:46:2b:e5:4b:
de:53:a6:0f:16:a5:78:80:13:93:54:7e:d6:cd:46:3f:42:92:
2a:a6:3b:2e:dd:91:3d:e0:30:cf:a4:7a:85:e1:fe:3e:ec:77:
fc:ce:fd:93:e1:0e:6c:65:33:ff:af:3a:fb:d9:e4:4a:1c:88:
ca:fa:fa:f0:f5:10:35:be:5c:8e:11:94:48:fe:1e:44:41:a7:
e1:72:31:aa:5e:24:0d:16:5f:fd:3d:4a:95:75:7f:77:07:e8:
63:da:ef:09:e3:d2:ec:c2:6f:71:a4:a5:e9:55:97:82:c4:dc:
5e:f5:f9:6c:60:85:44:91:e2:3a:3e:ed:6b:cb:e3:a6:b2:94:
40:16:29:82:4a:cf:b6:37:e3:cb:8a:de:ab:ff:ba:ff:8e:ef:
a4:7e:b1:f1:b1:31:08:c0:4a:ff:c9:15:7d:3b:54:19:3b:80:
15:ee:3b:df:bc:1b:46:1e:89:45:9f:88:db:b2:38:83:fd:15:
8c:90:65:a5:0a:62:44:c0:3e:8f:1c:20:8c:be:91:c8:c7:d4:
cf:d1:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:07:42 2026 by rpki-client