
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier: 7STzw7xEMqx+jm/lXKQoQk62QeIk4EMkkTM/vfTKzAA=
Subject key identifier: 24:60:E3:C4:C1:2A:9C:02:A0:65:B4:0C:EF:B4:40:1E:39:D3:90:C9
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial: 45169FD0F08159D4999843F620EA261607D89EE4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number: 0143
Signing time: Thu 10 Sep 2026 14:35:06 +0000
Manifest this update: Thu 10 Sep 2026 14:30:06 +0000
Manifest next update: Fri 11 Sep 2026 17:26:06 +0000
Files and hashes: 1: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=)
2: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: 6ES77BzNnIOZJ9NBCDBxMVbuzAIaWb8bThnqZPXWPmg=)
3: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
4: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
5: 326130663a316363353a313034303a3a2f34342d3438203d3e20323136323939.roa (hash: jkUpaqC40AVryws2M4l3hA6Beu5Hl97BKn2xwWx/2YU=)
6: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
7: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
8: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:16:9f:d0:f0:81:59:d4:99:98:43:f6:20:ea:26:16:07:d8:9e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Validity
Not Before: Sep 10 14:30:06 2026 GMT
Not After : Sep 11 17:26:06 2026 GMT
Subject: CN=2460E3C4C12A9C02A065B40CEFB4401E39D390C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:2b:cc:f3:25:47:d1:e8:61:74:30:d8:d2:
02:b1:73:c8:59:49:36:87:d0:d6:64:55:f0:01:69:
f3:34:7f:a2:fa:30:ae:18:1b:64:c4:04:df:7d:cd:
9b:cf:28:89:35:9b:61:43:ff:69:e7:c1:5d:22:6a:
84:d9:be:01:5a:07:44:85:df:20:ae:d4:ad:74:68:
bd:29:0f:3e:02:41:0d:65:e4:7c:3e:2b:18:a1:0c:
82:e1:51:ee:3c:3b:91:9b:34:7e:95:22:13:fd:9f:
31:8d:e8:58:4c:4a:6c:fc:6b:02:38:56:16:66:2d:
82:19:0c:4c:69:d2:03:07:b9:ba:58:f7:77:be:9c:
78:ca:05:15:d6:3a:c9:de:5a:25:6c:28:0a:bb:52:
b9:f5:13:d4:bf:e5:4b:0b:92:79:18:71:6e:a3:ff:
82:38:25:56:0b:13:07:2f:30:7c:3f:1c:1d:9f:dd:
33:5c:c9:03:ea:d7:ff:57:e4:3e:26:dc:75:df:2c:
53:16:ba:37:ae:a5:be:9d:87:9f:b2:2a:a5:38:ba:
d1:96:7d:9c:ad:d6:80:c4:d5:16:be:c1:b3:e0:34:
2b:66:35:31:ad:c3:53:f9:6b:e8:f3:91:14:4c:67:
e0:2f:3e:84:76:aa:ee:f2:64:c4:45:24:05:8c:3f:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:E3:C4:C1:2A:9C:02:A0:65:B4:0C:EF:B4:40:1E:39:D3:90:C9
X509v3 Authority Key Identifier:
keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:a2:34:eb:ed:95:d8:c9:d4:ca:bd:02:97:51:34:51:68:
67:9f:38:f8:6b:2b:22:bc:c6:05:eb:45:e6:65:70:08:e1:80:
5e:a8:33:f8:58:4c:27:1c:9a:56:47:b3:b5:0e:14:b0:c6:58:
06:7e:5c:0e:9a:9f:b7:9a:4a:81:a0:13:66:3f:11:c9:1c:1c:
fa:9f:06:b3:e2:ba:6c:db:d6:e5:70:b7:22:35:c4:e6:da:27:
02:25:40:b1:a3:48:fc:e8:7f:1e:65:20:4c:b6:6d:a1:71:1c:
15:80:85:b0:79:02:ad:a1:98:0f:20:57:43:7d:73:93:89:c8:
33:18:0f:52:da:9b:96:71:e1:ca:33:d6:dc:13:f7:82:af:01:
39:f3:15:c8:66:43:cb:9a:df:3c:58:3e:30:1f:9d:9e:1c:af:
fc:ee:24:bd:79:4e:6a:dc:f5:7d:d4:74:40:33:1d:1e:c0:58:
67:d5:5b:5c:b7:3d:af:3a:a7:a6:f1:e4:03:89:87:ba:c1:cd:
05:0e:6d:15:e9:de:fb:35:28:7e:a5:84:b5:40:95:ab:bd:40:
e2:40:ed:a6:1b:a1:23:90:96:e3:f5:1d:ed:f3:1e:c1:17:03:
eb:62:6f:c8:a7:73:62:66:e0:68:9b:34:dc:3d:e2:d1:73:78:
2e:f4:8c:77
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIURRaf0PCBWdSZmEP2IOomFgfYnuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5
MUZCQjczQTAeFw0yNjA5MTAxNDMwMDZaFw0yNjA5MTExNzI2MDZaMDMxMTAvBgNV
BAMTKDI0NjBFM0M0QzEyQTlDMDJBMDY1QjQwQ0VGQjQ0MDFFMzlEMzkwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLivM8yVH0ehhdDDY0gKxc8hZ
STaH0NZkVfABafM0f6L6MK4YG2TEBN99zZvPKIk1m2FD/2nnwV0iaoTZvgFaB0SF
3yCu1K10aL0pDz4CQQ1l5Hw+KxihDILhUe48O5GbNH6VIhP9nzGN6FhMSmz8awI4
VhZmLYIZDExp0gMHubpY93e+nHjKBRXWOsneWiVsKAq7Urn1E9S/5UsLknkYcW6j
/4I4JVYLEwcvMHw/HB2f3TNcyQPq1/9X5D4m3HXfLFMWujeupb6dh5+yKqU4utGW
fZyt1oDE1Ra+wbPgNCtmNTGtw1P5a+jzkRRMZ+AvPoR2qu7yZMRFJAWMPxUrAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUJGDjxMEqnAKgZbQM77RAHjnTkMkwHwYDVR0j
BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC
ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC
QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEPKI0
6+2V2MnUyr0Cl1E0UWhnnzj4aysivMYF60XmZXAI4YBeqDP4WEwnHJpWR7O1DhSw
xlgGflwOmp+3mkqBoBNmPxHJHBz6nwaz4rps29blcLciNcTm2icCJUCxo0j86H8e
ZSBMtm2hcRwVgIWweQKtoZgPIFdDfXOTicgzGA9S2puWceHKM9bcE/eCrwE58xXI
ZkPLmt88WD4wH52eHK/87iS9eU5q3PV91HRAMx0ewFhn1Vtctz2vOqem8eQDiYe6
wc0FDm0V6d77NSh+pYS1QJWrvUDiQO2mG6EjkJbj9R3t8x7BFwPrYm/Ip3NiZuBo
mzTcPeLRc3gu9Ix3
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:56 2026 by rpki-client