
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
File: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft (raw, json)
Hash identifier: euCCJJS5mWLah07lzxEqLZRrychFM+RAzdYiWOyDcF8=
Subject key identifier: 66:78:58:44:42:A6:E0:66:9A:59:A8:4C:4D:E3:F2:5E:42:F1:B7:9F
Authority key identifier: 29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
Certificate issuer: /CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Certificate serial: 423AC3644302918F2D0FD17808FD2F1CA9224DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
Manifest number: F6
Signing time: Wed 12 Aug 2026 16:18:04 +0000
Manifest this update: Wed 12 Aug 2026 16:13:04 +0000
Manifest next update: Thu 13 Aug 2026 16:24:04 +0000
Files and hashes: 1: 326130313a6234303a3a2f32392d3438203d3e203136353039.roa (hash: CivQf/u/Gk+LE+nokddTRzH9kTLqet4Y/E+g0q0KfIo=)
2: 295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl (hash: ooTYQkHsd71WyLX8i2TOrE1XiXgQiRFeje6mBvKwrGs=)
3: 326130313a6234303a3a2f32392d3438203d3e203438373030.roa (hash: zprKAfMxuhh44vBmZdJyS4oUsSHm80ESOd6bFepuvfw=)
4: AS48700.asa (hash: vc5Bz0waDsfQ0bs/Gu6racwgW1gSmnJnpEJHohHaeIg=)
5: 326130313a6234303a3a2f32392d3438203d3e203134363138.roa (hash: aQ7Zs1GXD2YhsOFRwSIq/T9v5bNh9rH0xnn29aQh438=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3a:c3:64:43:02:91:8f:2d:0f:d1:78:08:fd:2f:1c:a9:22:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b60bb0cbb4a53d9545bc20b774ffa036b4a46
Validity
Not Before: Aug 12 16:13:04 2026 GMT
Not After : Aug 13 16:24:04 2026 GMT
Subject: CN=6678584442A6E0669A59A84C4DE3F25E42F1B79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:fe:3c:56:cd:89:23:9d:3d:bb:8f:f0:34:
44:ac:16:55:74:4c:cc:3a:87:0c:e2:53:70:a8:11:
45:48:2e:cc:f1:26:9a:5f:32:00:d2:87:84:56:20:
fc:b6:0a:13:3c:30:0b:08:81:fc:3d:7b:a0:ff:10:
93:78:c1:19:03:09:64:db:02:cd:40:4d:ce:4c:9c:
f4:65:9a:85:bd:0c:08:d3:7d:0a:f2:18:da:97:88:
fe:ce:9d:14:01:36:05:c6:a8:2f:ac:99:05:1b:92:
d5:78:bc:41:f7:29:90:fc:35:23:b3:e0:69:d3:6d:
91:b3:d9:a2:27:86:51:9d:d5:dc:42:c4:9b:ef:2b:
a0:d7:3c:44:40:51:d4:ee:9a:1a:0b:f7:2f:06:cc:
4c:42:54:db:c6:d8:4f:f2:2a:e5:98:bc:0e:bc:b8:
7e:1d:83:4c:50:0f:29:e0:14:87:e1:c4:59:71:1c:
50:96:3e:a1:9a:52:06:be:55:d1:67:97:48:dd:79:
16:60:1c:19:de:56:5a:ee:be:c3:2f:35:88:f8:99:
aa:be:30:cd:fa:58:e0:59:6c:0b:0c:30:e1:a4:14:
a7:52:06:35:39:df:b0:01:bf:58:79:36:67:f2:9a:
b4:b3:f9:2e:96:9c:7f:eb:a8:2c:3a:d0:5a:71:ef:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:58:44:42:A6:E0:66:9A:59:A8:4C:4D:E3:F2:5E:42:F1:B7:9F
X509v3 Authority Key Identifier:
keyid:29:5B:60:BB:0C:BB:4A:53:D9:54:5B:C2:0B:77:4F:FA:03:6B:4A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtguwy7SlPZVFvCC3dP-gNrSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/5/295B60BB0CBB4A53D9545BC20B774FFA036B4A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:90:46:60:4a:a8:06:e5:06:f8:cd:7d:f3:1f:26:43:86:
21:74:ce:48:6b:3f:1d:df:a5:86:5e:03:4b:26:ac:12:5e:2e:
5a:45:1b:0d:ef:90:ef:aa:d0:30:f0:b2:9d:1a:b0:4e:3e:77:
1a:11:b7:f2:06:0a:3d:68:f8:66:ba:48:2c:aa:e0:08:7c:dd:
ad:13:aa:5a:09:8f:62:c9:33:32:86:be:66:f1:62:f0:be:1a:
1f:80:22:c4:c0:da:c8:c1:b9:ea:e9:1d:2c:7b:1a:3d:9d:94:
e5:13:dc:80:8a:d8:d3:bf:6e:05:7f:e0:26:41:fc:8e:6f:5c:
1d:62:3d:df:51:f0:78:20:82:76:d9:5b:6c:70:f9:73:de:b5:
e7:2a:a7:6d:84:f6:a5:5e:ac:43:da:57:e6:3e:10:7f:28:0f:
51:fc:cd:0b:82:fa:24:2e:6d:98:d4:2a:49:9d:ae:8e:ef:df:
ce:d7:c7:5d:23:10:46:7a:9f:60:b5:57:28:30:2a:ad:08:39:
d6:5f:01:ed:ef:20:13:ca:7f:2f:fa:c5:d9:7f:a3:57:66:4b:
bd:aa:d2:8d:ce:df:04:8f:34:ea:b7:72:70:50:59:ce:94:e9:
70:71:55:c3:3e:2c:b4:d1:e9:d7:4e:b3:95:43:54:59:18:6f:
13:cd:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:18:32 2026 by rpki-client