
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json)
Hash identifier: e0ug/P9ETO064ZVNjC6aRTungehqq06ll7gEJFXIE0s=
Subject key identifier: 57:F0:C7:CC:B8:E1:47:D1:58:85:4E:34:BA:15:64:04:44:89:4F:30
Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13
Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
Certificate serial: 6B3F50576B2B5D9083D2A5D4F24E80B12B7194F9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
Manifest number: 0283
Signing time: Wed 15 Jul 2026 10:34:27 +0000
Manifest this update: Wed 15 Jul 2026 10:29:27 +0000
Manifest next update: Thu 16 Jul 2026 13:05:27 +0000
Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: l6u5XB9L1cFhAuk7SqG0H2O+pRScBuAZbj5/x2e9WU8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 09:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3f:50:57:6b:2b:5d:90:83:d2:a5:d4:f2:4e:80:b1:2b:71:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513
Validity
Not Before: Jul 15 10:29:27 2026 GMT
Not After : Jul 16 13:05:27 2026 GMT
Subject: CN=57F0C7CCB8E147D158854E34BA15640444894F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:7b:84:42:be:35:1b:e8:03:2e:13:18:a2:
a6:40:4f:08:4a:74:bb:4f:92:5d:00:c1:01:ff:3e:
2f:fe:dd:b9:ae:6a:ed:26:25:4f:02:70:38:54:ba:
b0:48:70:a9:97:85:53:ff:79:28:c2:2b:47:19:04:
8c:49:fd:6b:9b:73:cf:7e:48:94:68:a2:5a:9a:a4:
a2:3b:22:b4:60:14:d8:50:cb:b8:db:17:8c:cd:01:
fa:56:51:7b:da:bb:56:56:c0:4f:9c:c8:00:67:21:
15:4b:02:41:ee:27:4f:41:19:d2:a8:da:e6:83:3f:
7b:7e:5f:22:0c:c3:3d:76:eb:21:b3:c1:40:77:63:
0a:66:bb:24:39:a3:dc:9e:be:fa:c4:a3:23:6c:50:
43:1e:f5:bf:4f:ac:dc:4a:14:69:0d:cc:23:6e:28:
27:02:ed:23:68:85:ac:3d:42:41:b0:a7:2c:83:f9:
80:13:cf:5c:39:98:0c:62:41:e6:21:3e:25:3b:f6:
1b:ec:b4:ca:36:fe:32:fb:d7:d8:aa:e3:2f:2b:79:
95:ae:9d:b4:7c:af:00:82:04:7d:73:8b:c8:03:7c:
e4:b8:f3:14:e6:d0:df:1a:62:92:71:18:8e:51:b9:
60:4b:ce:98:e5:47:fa:40:72:ab:bc:6d:e4:1c:24:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F0:C7:CC:B8:E1:47:D1:58:85:4E:34:BA:15:64:04:44:89:4F:30
X509v3 Authority Key Identifier:
keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:a5:b8:fd:a1:9c:1e:44:58:05:94:b7:6d:30:0e:53:37:
aa:a6:cd:3c:53:7a:02:ed:72:12:4c:28:94:ff:66:ce:ac:61:
0c:15:9c:4f:70:21:bd:42:df:f9:38:09:3e:26:05:2d:be:cd:
d8:f8:a4:1b:b4:97:d0:88:d7:41:84:28:ec:3e:ad:d1:1d:a0:
8a:4d:15:e3:de:8c:e7:3f:a3:72:b9:3f:8f:98:0e:e9:92:e9:
33:81:bd:0b:e9:4a:6a:2c:4c:7f:13:6c:3f:7d:0e:68:ee:34:
ec:60:c3:b6:73:de:63:1d:c2:69:eb:2a:72:48:3e:0d:f0:a6:
13:9d:cf:a1:32:5c:7d:7e:8d:4c:23:79:ec:2e:64:1a:c7:f6:
36:12:3b:f8:4f:3f:7d:a4:04:fc:d2:cd:17:4c:28:83:40:4d:
47:c0:46:14:7a:69:22:6d:6f:1a:ba:d5:1d:b0:b5:9c:f7:12:
56:37:1e:83:f0:47:2f:df:55:5c:c7:75:2f:60:a8:7e:40:53:
09:72:4c:ed:3c:d5:4e:e0:c6:41:eb:a6:f9:1d:06:06:e4:15:
41:36:6b:11:3d:40:a3:8e:c4:3b:ba:a3:94:30:b8:9a:a3:a5:
79:f5:68:6b:90:4b:03:90:51:6f:0d:02:11:5f:21:87:1f:61:
56:e8:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 16:41:11 2026 by rpki-client