
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json)
Hash identifier: HGeNL5i013RFiz/FCjgxKdFkWx6upUVCPlk1yG7xmdY=
Subject key identifier: A1:F2:E7:50:92:16:5A:6E:37:8D:7D:8A:BA:E6:90:21:30:EC:1E:4C
Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc
Certificate serial: 7C41A380D3202BB9E9E021CE7EEE85A53388699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
Manifest number: 0373
Signing time: Sun 29 Mar 2026 08:50:51 +0000
Manifest this update: Sun 29 Mar 2026 08:45:51 +0000
Manifest next update: Mon 30 Mar 2026 10:31:51 +0000
Files and hashes: 1: 3138352e3133342e3139312e302f32342d3234203d3e20323037343837.roa (hash: wMCy3m1h75GfC2ATV5bYCJD7S6jjiI8Si5ikYie+OUI=)
2: 326131343a313463303a313a3a2f34382d3438203d3e20323037343837.roa (hash: nCuZ5ADJB2e8lGpTQQDYT3/JtyMvU82Myd2okt8I23s=)
3: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=)
4: 326131343a313463303a323a3a2f34382d3438203d3e20323037343837.roa (hash: lVUTv9ePxFs76NYMpRch/wm8DFit0p7cLkwe+1lgWxI=)
5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: AULHfw30fC5JPuaDQ09QijzFEojRfFb5/T1vtTj7hIM=)
6: AS207487.asa (hash: Ha+forEe+xS82UGSV4B7j+UWBj+/I05XFS+Ojajx3y4=)
7: 326131343a313463313a3230303a3a2f34302d3438203d3e203138363037.roa (hash: eBGi76bk+i5KfnHGqq9jtzpn0gh813x0+GlA90AUkZI=)
8: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: 60knyTGGZfnUmt0sLF9XZ1prCqI3FfvJziWxAbi1kNA=)
9: AS18607.asa (hash: ol8lct09PZ1pqBOGDq6LTNV0i5NYMmiHGhSWuOi+FwQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:41:a3:80:d3:20:2b:b9:e9:e0:21:ce:7e:ee:85:a5:33:88:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc
Validity
Not Before: Mar 29 08:45:51 2026 GMT
Not After : Mar 30 10:31:51 2026 GMT
Subject: CN=A1F2E75092165A6E378D7D8ABAE6902130EC1E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:2e:e2:13:26:06:65:67:8a:99:b5:97:2c:
a9:39:3d:9d:b7:58:08:e3:74:60:9f:63:b4:30:f9:
58:6d:72:87:50:45:66:23:41:e7:82:0d:6a:09:c5:
0d:60:53:ba:c9:d4:a1:94:c7:b4:36:46:61:c2:e5:
4c:40:6b:86:7e:bf:57:de:f3:f7:99:30:68:a4:d0:
6d:30:fc:5c:77:fe:06:9d:a8:3f:8b:75:88:56:bf:
f7:1a:83:0b:53:d5:08:52:cd:ff:9b:aa:16:1a:58:
a9:d7:c0:b9:c8:4e:d6:a4:77:fe:2e:38:c3:73:cb:
c3:d7:0f:7e:fc:f3:9e:d7:4c:d9:ca:81:33:15:27:
65:fb:ee:ec:ec:66:28:ec:6f:09:fd:9f:03:f0:0a:
3a:71:86:23:33:b2:a2:d7:7e:3f:08:99:d5:00:bd:
a9:5d:fa:6f:a3:91:e4:5a:c7:80:a8:38:42:48:78:
d1:3e:5d:de:94:86:6b:05:05:9a:ec:b2:a3:56:14:
e4:96:0b:4f:2c:57:c9:76:40:0e:7e:f0:40:8a:8b:
09:7d:7f:f3:75:08:a4:05:f3:fd:38:6a:ca:f8:66:
a9:4f:27:56:e0:d6:93:8c:fd:ee:51:19:0a:ce:95:
d3:60:d0:40:14:b4:04:ee:6f:38:8f:74:a6:af:89:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:E7:50:92:16:5A:6E:37:8D:7D:8A:BA:E6:90:21:30:EC:1E:4C
X509v3 Authority Key Identifier:
keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:51:6b:c6:eb:50:e7:51:15:2b:00:25:39:71:cd:b5:ca:e4:
6d:d6:77:21:8d:2d:6b:49:27:53:97:64:0e:0d:9c:76:1b:15:
ec:7d:41:6b:5c:8f:ae:6d:75:d6:fe:3b:13:04:46:97:90:7d:
83:1b:e8:79:d6:6b:e7:fb:a1:5b:68:c7:0b:29:d5:a0:15:28:
f5:74:3d:6f:11:a3:61:5f:00:4d:0c:e0:2b:04:72:8c:e2:4a:
1c:ab:c0:82:d3:c6:ce:23:24:f1:bb:12:10:85:e6:9e:52:b7:
48:13:ad:68:da:9e:77:d8:e1:4b:27:0b:36:a5:8c:5e:7a:b1:
43:e5:f3:c6:6d:54:73:5a:8d:a4:5d:7e:4e:29:28:e2:ec:07:
e8:f8:3f:83:a8:9a:37:16:1e:5d:90:6b:15:21:dd:0c:fe:2c:
ed:22:fd:78:0b:fa:52:10:be:ba:0e:c9:fd:e6:c7:c7:2e:24:
9e:a8:8b:0f:30:d8:e0:20:7a:d1:6b:d0:fb:6e:b9:7e:c9:b6:
26:9c:5c:45:ae:16:b8:9e:b2:64:92:62:93:86:b6:d6:d0:25:
a3:30:18:2d:d7:8e:ef:3c:3c:62:a8:9c:81:6b:3c:97:35:aa:
19:ac:54:c2:d2:a3:b9:fd:ab:b3:1d:3a:35:7c:63:74:22:f7:
e1:42:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:37 2026 by rpki-client