
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier: ke2Q7O2xINdVqzFkjDfrnjBX3Hl7HtbyZrJR+/JrSZQ=
Subject key identifier: 72:2D:A3:40:5E:6A:FD:97:EA:5B:D8:0A:67:62:16:E9:FB:CE:D8:EE
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 6D9604E3CE6C6EC3ABEFD0E6C866A85CD55B3512
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number: 023D
Signing time: Tue 04 Aug 2026 11:31:54 +0000
Manifest this update: Tue 04 Aug 2026 11:26:54 +0000
Manifest next update: Wed 05 Aug 2026 14:45:54 +0000
Files and hashes: 1: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
2: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: znflcSKXFZHZIBV4yBa4PA/rZXSWWlTixRSXeMedo2c=)
3: 326130363a396634313a613a3a2f34382d3438203d3e20323135303835.roa (hash: NbDxV9qrS6TiSjVCZUDuT8o/FjbSqGztLjVZ8dbtZec=)
4: 326130363a396634313a3330303a3a2f34302d3438203d3e20323134393239.roa (hash: iVfsjGUvTt7XJSqNB1gfJbq7PcNxzcp6mUdRwbAEvfI=)
5: 326130363a396634313a3530303a3a2f34302d3438203d3e20323134393239.roa (hash: vhj3ge0HFLUitKaN+s5zDz0PPLk5IVtPYbDDdzjfCRg=)
6: 326130363a396634313a3a2f34382d3438203d3e20323135303835.roa (hash: ifqv7lMl5QtLHVetA7gis4rsAT0Hkt22y/eFJkwNV2E=)
7: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: IPmhuzBuQk0H65gj7yTl9nlDYGhk58il9d6iAo3tkJ8=)
8: 326130363a396634363a3a2f34382d3438203d3e20323135303835.roa (hash: 9cZOHiQCI3tJRKNhSvfRO+6YVPoE/zEcshIH8F7qWcU=)
9: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
10: 326130363a396634363a3a2f33322d3332203d3e20323135303835.roa (hash: KHPMWVPXSNE5MeO2seajbhD7um8es2E6kpPLcpx4Rh4=)
11: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
12: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: 4HEPjtIiPa97P9bGhpyLZGMoz0SO/cByiA91tlp90eY=)
13: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: c23f5zfF11QepD/hCX1+ZX8Ztc0XcCBU7/BkVhVVOkA=)
14: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: zDfWjzGK40zSCpRuFh+A3O83EeUEIjX9jMdsKJlIUSE=)
15: 326130363a396634313a613839393a3a2f34382d3438203d3e20323037363832.roa (hash: AsmqfeR8tzd8apPghjomjQ+mrFPKbFgoIC7Ra9M+3/4=)
16: 326130363a396634313a3930303a3a2f34302d3438203d3e20323134393239.roa (hash: +AMN4bGgppj9vi32rQAsxbtShvgpXDGYgBVZExdRGNA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:96:04:e3:ce:6c:6e:c3:ab:ef:d0:e6:c8:66:a8:5c:d5:5b:35:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Aug 4 11:26:54 2026 GMT
Not After : Aug 5 14:45:54 2026 GMT
Subject: CN=722DA3405E6AFD97EA5BD80A676216E9FBCED8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:0a:48:dd:c4:4c:98:78:9e:97:8b:0b:ab:
25:23:8e:26:a7:c4:ad:e7:5c:a6:09:0a:c9:a5:10:
a9:2d:0c:b8:5b:9e:4d:c4:80:fc:2a:ff:13:ca:13:
d3:4d:4d:c5:cf:50:7b:99:1f:38:b7:37:b4:bf:d4:
ba:be:94:84:c7:30:e1:5a:8a:8b:06:81:be:f2:14:
a1:0f:93:1f:c6:a6:f7:91:45:f1:dd:71:73:93:23:
80:2d:45:f4:04:2d:f0:32:91:b8:24:10:a6:70:87:
18:08:a9:22:af:40:ae:7c:fd:26:b4:13:45:2d:f7:
5e:03:30:30:40:b5:aa:4d:9b:93:bb:aa:cd:be:24:
a1:b1:f7:f8:c5:1b:1a:30:cf:16:0a:95:b9:e8:89:
5e:97:62:65:88:2a:ea:23:46:9f:31:12:e2:01:7a:
48:32:07:35:b0:da:7d:d8:82:f5:f5:b8:5d:6c:54:
6e:30:89:6b:bc:86:23:01:c7:e4:73:a0:28:e2:2e:
77:76:5e:3b:c3:0e:bd:65:da:df:ce:87:03:89:64:
09:63:e9:74:9c:3f:63:b2:f0:22:2b:c1:f2:db:40:
7f:6d:d5:fa:5c:66:5e:ca:9b:95:69:26:3a:93:e4:
79:93:27:e6:0f:a3:6b:a6:8b:23:1d:5f:7d:64:ef:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:A3:40:5E:6A:FD:97:EA:5B:D8:0A:67:62:16:E9:FB:CE:D8:EE
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6b:38:d0:b0:b3:df:03:aa:38:76:db:93:6b:9f:ac:76:7d:
fc:b7:5f:29:ec:40:3a:09:d1:dc:ad:16:e1:a3:47:16:cb:f9:
16:b5:e4:c2:04:8b:07:fe:a1:d1:3d:f7:07:57:af:a4:2d:5f:
2d:58:2f:23:2e:f8:db:3b:7e:e6:13:26:95:05:5d:8b:cb:f5:
6f:fa:b4:d4:db:05:31:de:bc:42:fd:f1:df:ff:9e:b7:79:a7:
3e:d3:56:14:72:61:0d:08:94:4c:1e:71:70:45:8a:1f:6b:60:
c2:a5:39:e2:7e:23:22:9b:ec:56:ef:98:a7:91:76:69:a6:46:
f4:69:ba:42:f2:a9:cc:13:13:cf:69:5d:10:6a:d7:da:f9:7d:
bb:25:1f:b8:66:30:e2:d1:11:93:d2:60:0a:70:a4:ef:40:41:
b4:b9:2c:1d:f3:6f:8a:fc:8c:a3:ea:55:be:af:82:60:1b:f2:
05:09:c3:d3:7a:65:aa:7b:12:6d:ef:36:0e:4e:1a:10:33:0c:
d3:56:33:21:60:54:e6:3f:7e:60:ef:f6:ea:6e:d5:38:eb:ff:
22:0b:f9:b4:d5:16:65:15:3e:b4:04:d8:75:c9:11:c5:e0:43:
77:69:8c:75:ff:81:75:d8:52:35:a1:86:5e:b0:dd:fd:b7:3e:
c5:61:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:53:01 2026 by rpki-client