
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json)
Hash identifier: pCxv+5eLd6Fbki+l/5+Xwot+lGwTYbs8acNkEXGrGCo=
Subject key identifier: 3F:79:5C:8F:B5:4C:E8:85:87:EC:EA:1A:8E:C7:F5:A9:90:3E:EA:E9
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial: 53D0A1666130F2ECD3146703E78EAF8B7DA8E502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
Manifest number: 019E
Signing time: Fri 02 Oct 2026 20:00:05 +0000
Manifest this update: Fri 02 Oct 2026 19:55:05 +0000
Manifest next update: Sat 03 Oct 2026 21:23:05 +0000
Files and hashes: 1: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=)
2: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=)
3: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=)
4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=)
5: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: 0rFE61idMQrtUrwquVIlxzy13lbkNO7zgWPJpjdPAc0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:a1:66:61:30:f2:ec:d3:14:67:03:e7:8e:af:8b:7d:a8:e5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Validity
Not Before: Oct 2 19:55:05 2026 GMT
Not After : Oct 3 21:23:05 2026 GMT
Subject: CN=3F795C8FB54CE88587ECEA1A8EC7F5A9903EEAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:65:06:d1:2d:d4:9a:3e:4c:f9:98:2d:a5:
b9:b0:35:f9:0a:6d:37:34:f2:58:c9:b1:1f:15:1b:
1d:c5:39:fb:36:96:ee:5d:b2:57:ce:9e:96:0c:7e:
84:f7:aa:86:da:7c:8d:0d:6a:46:ce:88:f7:0b:ab:
ee:59:0d:79:ec:16:25:a4:9a:38:6a:0a:48:46:58:
32:9f:36:4a:b3:f5:00:e4:da:1f:0b:4f:8e:32:d5:
f5:1b:0e:5e:6e:8a:47:aa:59:33:1c:ea:96:be:e9:
8d:b4:66:1b:71:07:e3:8b:d8:ca:ed:f6:a4:e8:15:
a0:4d:f1:8b:8f:d6:67:36:52:fd:da:c6:50:49:91:
eb:ed:71:76:05:ec:24:58:58:22:3f:f4:25:fa:40:
ea:e7:58:91:90:1c:46:b9:b1:70:92:ea:87:4f:fe:
aa:f6:db:7c:05:4b:76:3b:2e:99:91:8d:35:97:b6:
27:f3:1a:5d:aa:3a:e5:4c:02:4a:3f:ec:c2:7a:32:
67:d5:8b:bd:87:c4:e0:ef:54:59:42:fd:a4:38:64:
68:7c:eb:65:b4:7e:15:9e:30:f1:4f:d2:8d:bc:80:
de:f5:0b:8f:9b:6c:29:f2:ce:36:28:52:f7:db:71:
4f:0a:32:f6:c2:e7:fb:f9:35:71:e1:aa:05:ce:4e:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:5C:8F:B5:4C:E8:85:87:EC:EA:1A:8E:C7:F5:A9:90:3E:EA:E9
X509v3 Authority Key Identifier:
keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:1b:cb:e3:10:43:f7:a5:d5:c5:e1:f0:3f:04:ee:4e:98:
23:4a:31:e8:91:fd:e1:c0:86:25:88:af:ad:ed:99:af:d5:50:
13:47:1d:f1:79:9c:5a:53:49:fd:fe:b6:53:04:2f:6d:8e:5a:
3e:ec:c5:24:90:47:82:c2:d6:c1:21:33:1f:ca:61:07:d1:46:
dd:53:bf:84:af:74:32:63:63:71:cb:d1:a7:cd:87:75:32:72:
3d:5c:38:c1:5e:3d:f2:d4:d0:57:21:fc:99:a1:28:67:47:e9:
38:ce:bc:53:0f:b2:d9:98:41:b3:bc:c4:d5:c9:cd:ff:3a:28:
fd:82:3e:2a:4f:ba:6c:f0:bd:d0:e4:56:55:92:9e:b5:96:11:
e0:14:97:2f:c3:94:e9:18:00:00:28:8f:d2:0e:6e:4f:bc:d7:
2b:b0:09:f6:19:bc:39:6e:58:db:71:11:da:c3:0f:d1:f0:49:
46:b9:79:3c:a0:91:ed:35:46:6c:a5:03:a3:0b:d1:61:6f:e6:
41:1e:e8:95:f6:5f:69:8a:64:bc:43:d6:f7:da:e7:58:00:60:
a3:b6:ef:b1:b6:17:6e:e1:d7:24:f3:36:51:fa:84:35:6c:dd:
50:70:ce:43:4b:1a:93:20:20:45:03:54:b0:4f:75:85:f2:55:
fe:66:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 00:23:04 2026 by rpki-client