
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json)
Hash identifier: sztSc63FuMlfSMaoFgNYrLWVM4aGjVQaQQxBnWEh4l8=
Subject key identifier: 78:14:35:36:17:E7:E2:B2:F0:57:7C:2A:F6:CE:8B:76:15:E2:47:78
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial: 1F4A8CFF523D1ECAD0A04134BA3567822EE34656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
Manifest number: 01A3
Signing time: Sun 04 Oct 2026 08:25:51 +0000
Manifest this update: Sun 04 Oct 2026 08:20:51 +0000
Manifest next update: Mon 05 Oct 2026 10:51:51 +0000
Files and hashes: 1: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=)
2: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=)
3: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=)
4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=)
5: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: krM7XjqKjWyEfJOb4eXAFAOBj8b5pguJVtS6T+hJEew=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4a:8c:ff:52:3d:1e:ca:d0:a0:41:34:ba:35:67:82:2e:e3:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Validity
Not Before: Oct 4 08:20:51 2026 GMT
Not After : Oct 5 10:51:51 2026 GMT
Subject: CN=7814353617E7E2B2F0577C2AF6CE8B7615E24778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:97:89:c9:30:c6:b9:9c:17:a5:88:69:b6:
67:80:09:09:8a:eb:39:8c:c0:d9:80:2e:c3:43:da:
9f:c2:bd:cb:91:b0:08:3a:a5:00:a4:fa:6e:30:b1:
a9:87:c0:74:4c:8f:ed:97:f9:11:0d:f3:4f:37:45:
6c:dc:58:b0:ad:7f:8f:df:13:a3:b6:9d:07:17:28:
aa:86:a3:be:41:66:27:f4:dd:cc:89:53:a8:65:4c:
98:72:18:a6:70:f1:6e:6b:af:8c:08:66:52:48:04:
eb:ca:47:1c:f2:75:0a:cb:d0:fa:27:eb:d2:b7:1b:
b2:ba:25:47:f7:79:49:0e:ba:38:43:6c:49:76:08:
b6:03:1b:d1:2e:70:a5:b0:7d:0f:6c:bb:d2:74:ed:
16:5f:3e:68:24:b8:f8:72:45:14:00:ca:c2:1c:97:
28:5f:81:95:22:74:af:fe:89:32:4b:b9:f2:84:80:
85:36:fe:5f:34:93:4e:0d:45:a6:cc:1a:d7:15:da:
39:a7:ce:63:94:01:69:38:16:2a:96:3c:a2:7c:72:
96:65:0e:9a:da:c1:ec:2d:b0:37:1d:f7:53:5e:71:
a9:60:85:cf:d3:f6:fd:52:43:4c:db:99:8e:89:32:
e1:87:21:e4:86:20:38:bf:42:7e:39:b6:e8:68:78:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:35:36:17:E7:E2:B2:F0:57:7C:2A:F6:CE:8B:76:15:E2:47:78
X509v3 Authority Key Identifier:
keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5b:95:16:32:91:12:62:31:de:17:e8:cb:32:89:8f:5d:a2:
2e:71:a9:62:c2:c1:e4:77:1b:ba:75:02:4f:07:e0:ea:a3:15:
7f:c1:cc:5d:5e:76:75:14:d0:01:8c:37:2f:0d:66:36:93:b1:
55:46:22:bb:3b:db:c9:29:73:07:77:5e:c5:46:f0:26:4d:f2:
08:37:83:de:15:c8:fc:27:6c:1e:18:4f:f2:5c:f2:08:a5:a0:
c5:98:90:1e:5f:dc:ad:04:31:05:7c:a1:e9:5c:36:af:70:30:
e2:7c:48:01:a5:69:e3:d1:52:cd:07:ab:a7:68:b6:29:7f:78:
00:8d:47:39:87:2b:48:0a:5a:0b:85:a9:4d:48:7b:33:2c:8a:
63:66:b5:b6:14:d9:c9:24:0a:60:48:d2:40:3f:4d:a6:76:5c:
89:a5:f3:aa:68:96:7d:df:3e:55:44:1e:0d:d4:29:42:30:cd:
a3:8d:61:65:4c:9b:d6:c5:25:7a:ca:0f:15:91:5c:13:58:8d:
06:8b:68:8e:89:8c:10:c5:8a:fe:58:15:51:30:0f:42:95:dc:
b2:15:e4:f0:73:a7:ab:2d:95:b9:e1:5d:6a:5b:af:43:b1:4f:
3c:72:97:91:dc:9f:40:a3:b9:1f:b2:25:8e:3c:6b:4e:1d:18:
91:30:6a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:49:59 2026 by rpki-client