
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier: tiHY5CR+q52CY0ikIY8il5mQLtfJWAVdXNgxsG3o6xo=
Subject key identifier: 19:CC:F7:08:CD:7C:4D:E7:48:1B:BC:A0:68:5B:A1:AD:89:B2:AA:89
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 37E92B39370D10CFCEFF1863CEE4276FE32D6A06
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number: 0152
Signing time: Wed 04 Mar 2026 00:34:46 +0000
Manifest this update: Wed 04 Mar 2026 00:29:46 +0000
Manifest next update: Thu 05 Mar 2026 02:48:46 +0000
Files and hashes: 1: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
2: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: nHehWoxWXf1o0dbPZ/QJuze/UCT4m10ZkG52IDHzFmw=)
3: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
4: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
6: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: VU9tY0kXnHxq+QS2OmeIywnClaAkTHjrF4DCrYG5NZw=)
7: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (hash: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4=)
8: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
9: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
10: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
11: 326130363a396634313a613130303a3a2f34302d3430203d3e20323135303835.roa (hash: OUt+1oKNkT4q09Fbf5w3L2mK025o9AopYE3nSbhRFR0=)
12: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 02:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:2b:39:37:0d:10:cf:ce:ff:18:63:ce:e4:27:6f:e3:2d:6a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Mar 4 00:29:46 2026 GMT
Not After : Mar 5 02:48:46 2026 GMT
Subject: CN=19CCF708CD7C4DE7481BBCA0685BA1AD89B2AA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:a1:60:0d:39:44:89:0a:d8:34:16:40:76:
8f:f8:9f:7f:eb:33:2a:43:6a:c2:9d:a6:85:e0:50:
3b:e2:18:d9:9d:15:ef:da:e6:c9:82:0d:9c:5d:aa:
ad:68:26:3b:df:dd:0a:89:99:b7:ab:ee:7e:de:ac:
fa:f9:41:59:07:64:4d:25:48:bd:76:fa:92:a3:48:
0a:3b:23:85:d9:f5:bc:83:bb:d1:89:5d:8e:60:73:
81:e5:cb:04:06:6c:d2:ca:00:14:f3:66:00:e1:4c:
b1:5e:17:79:b7:68:be:a2:ca:7a:dc:fb:3e:d3:9b:
ba:c2:03:59:85:4f:7a:90:57:2a:d6:b4:5f:02:36:
f9:8a:7e:16:0d:d2:aa:9b:9f:24:31:c5:c4:d7:f3:
10:04:3f:38:60:df:33:17:d1:7e:fd:9f:f0:f3:55:
1b:e4:9a:b2:93:28:66:0e:e8:09:4d:75:0b:bd:79:
38:f0:dc:d3:ab:38:97:7f:18:f9:15:7d:83:b7:5c:
16:7f:2b:41:84:f3:0c:16:e2:75:11:a8:5e:21:55:
44:5e:0e:97:95:3f:42:f4:e5:cf:da:b5:f9:9f:c9:
ac:4d:2d:c3:f3:1a:0f:db:e6:8f:00:f8:db:6b:ff:
e7:6c:34:64:81:7a:86:ff:c7:de:c6:d7:86:62:fc:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:F7:08:CD:7C:4D:E7:48:1B:BC:A0:68:5B:A1:AD:89:B2:AA:89
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:3e:94:ab:80:29:1f:a7:fb:13:0c:06:47:a9:d4:ba:2b:
14:f9:1b:9b:df:e9:3c:aa:a3:6a:08:c9:53:04:75:da:67:f0:
72:33:91:00:3f:63:09:ea:09:ae:00:d2:2f:70:c5:e3:69:2d:
0e:9a:c5:b6:30:4e:e8:09:70:e2:b4:4d:8c:26:28:10:2c:14:
78:5a:18:a2:cd:97:ab:83:3b:e4:4a:58:f9:ce:ae:dd:90:a1:
fa:e7:53:fa:2d:19:4f:0f:ed:e5:5c:85:f8:69:63:b0:19:34:
c9:88:d1:29:62:9b:30:26:12:db:03:55:d1:f8:c3:0c:fe:e1:
85:89:d4:49:90:79:3b:77:fd:79:62:c3:74:cf:1f:51:0e:c2:
da:35:c6:ee:05:2f:76:c0:03:81:b6:07:5e:ee:57:4c:21:1c:
bb:6f:70:66:e1:2c:2c:9c:d8:ea:cd:6d:cb:78:04:7c:39:95:
f2:18:a9:78:37:1b:36:f5:27:d0:a9:e8:b7:b2:e6:c0:f2:f8:
a8:f5:62:e7:04:88:f7:bd:32:33:ef:e8:a7:5b:cd:ae:3c:69:
6b:af:d1:18:e5:a0:6d:5a:70:80:e3:a4:8a:82:9c:45:e2:50:
6b:3b:a2:88:d8:48:ba:1f:4c:8a:05:5e:40:e2:5f:c2:3b:ce:
2b:d0:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:49:13 2026 by rpki-client