
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
File: 0211335370D92B6E733E38A6FE83F1920BC863B5.mft (raw, json)
Hash identifier: dzJZJmH8+qEG0xhPaYxcEwv6aIu1Kfb6QfW6Ae1x+6o=
Subject key identifier: 2F:A7:AC:B0:1C:9C:1D:D3:C4:61:D1:9C:FF:C9:19:1A:7C:6A:11:F5
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 5E84AD0D192F985CEE7D8E5B906AC53111388D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
Manifest number: 48
Signing time: Thu 05 Nov 2026 01:27:38 +0000
Manifest this update: Thu 05 Nov 2026 01:22:38 +0000
Manifest next update: Fri 06 Nov 2026 03:51:38 +0000
Files and hashes: 1: 3138372e352e322e302f32332d3234203d3e203336353330.roa (hash: ImNR7I3qCj3VybLOJ64a9gsJO9gRGCsCF2YSjnFpDdY=)
2: 3230302e3138302e3136302e302f32312d3234203d3e20313531333331.roa (hash: Lm1R07YGu002nCkpfGa4ICNj7dqJkFC8RKuIECKNPgw=)
3: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer (hash: t8m+GVm5KBL4s0C+gqYGKbQ+nFGT+lTw0+urN/zNeTU=)
4: 3230302e3138302e3136302e302f32312d3234203d3e20343031373736.roa (hash: 49txmzZNLvCPr15ARV3WbmTYeadLhmZy34zOlOEzRrU=)
5: 3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa (hash: 5CdjtZRYnbutA3BKpPju7cbxaX8M66Lp/8wxC1V973w=)
6: 3230302e3138302e3136302e302f32312d3234203d3e20323132323539.roa (hash: mRrktVVzgp9WLxvIVxjZObNrqYbtAS12PHB9uq/IM8c=)
7: 3138372e352e342e302f32332d3234203d3e203336353330.roa (hash: dIuywrzSNbCCEekBSaoXmgU86wOlt/vDAicT0m2wq8s=)
8: 3137372e3137372e38322e302f32342d3234203d3e203430393239.roa (hash: iWdaGQnxhL4Kyq5sRcP+nJQ7jeI4VD01lzRIxG9VX90=)
9: 0211335370D92B6E733E38A6FE83F1920BC863B5.crl (hash: m4z/N0po2xuK2Z/CoGoWO/OZj5AtqN1qPH/dnWHWrGE=)
10: 3230302e3138302e3136302e302f32312d3234203d3e203336353330.roa (hash: 9gFp7L4EVR2AOnCZNx3rjlrEioLeoEoqktUxPRG+wjI=)
11: 3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa (hash: b+aRVPGdn8VjyVWg6D+nOEaa2NWDotR+0eAXSQ+Dtls=)
12: 3138372e352e302e302f32332d3234203d3e203336353330.roa (hash: ynR5uBaLkLiRAgIe6f14NNnd7rYuTbTNx6eEfjYbyd0=)
13: 3138372e352e322e302f32332d3234203d3e20343032363238.roa (hash: ssHgplBujnGQyFL04QKXLfebdjoomF4Omf3lnrq3DKA=)
14: 3138372e352e302e302f32332d3234203d3e20343031373736.roa (hash: ggrPZGJNFvRaNdu29nW6qD/tbIXrA9UCiA3GSM/ljmQ=)
15: 3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa (hash: Y73eMeFRShzAPcM5FCCx+xJJkFDRtiEZGY1+8ydp6k0=)
16: 3230302e3138302e3136302e302f32312d3234203d3e20313939343336.roa (hash: 6VlSy78EXLts3m52KdfH1bvFr0WCFgj7yOOFdiifcTE=)
17: 3138372e352e302e302f32332d3234203d3e20343032363238.roa (hash: sOWwN1iWOUxq1OKmqE9tetEROxDx8Lf4GbCjWEk5Fiw=)
18: 3230302e3138302e3136302e302f32312d3234203d3e20343032363238.roa (hash: VX52D13T3rJk+Y+H+h/oenE4mh7mWRd72nOjMprbcBw=)
19: 3138372e352e342e302f32332d3234203d3e20343031373736.roa (hash: 7j0B7rf5zied0Vm/Xuqc90kNHgJ3FCl1+jRdTQYQqAo=)
20: 3138372e352e322e302f32332d3234203d3e20343031373736.roa (hash: t7e8Ue+dmD4MWVhuJTygPEfP31EkS4IaHfWcKSvt9EQ=)
21: 3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa (hash: OfR2OfwKIEIccuBrvJ/24hfOmX9MQXaTnvRCeGTvD0o=)
22: 3138372e352e342e302f32332d3234203d3e20343032363238.roa (hash: kqadylwDPfdhFybl/OD7ZR5o6+1amL3GEF8IhVwvMN4=)
23: 3230302e3138302e3136302e302f32312d3234203d3e20323135303233.roa (hash: JgQLWhOybdMoYCTT8Z4Dr3ScDMDO1QSUBy27ch6mucg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:84:ad:0d:19:2f:98:5c:ee:7d:8e:5b:90:6a:c5:31:11:38:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Nov 5 01:22:38 2026 GMT
Not After : Nov 6 03:51:38 2026 GMT
Subject: CN=2FA7ACB01C9C1DD3C461D19CFFC9191A7C6A11F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:83:e9:76:62:bf:d8:63:a3:04:bb:93:50:
61:0e:d2:36:5d:d2:b4:04:67:d3:84:b0:f7:19:d2:
7d:82:6c:4b:e2:d3:eb:f5:32:fe:5c:ab:1a:ca:72:
79:44:d2:05:b4:7a:9d:72:ad:7b:35:f7:be:0e:62:
7b:fc:df:bc:0a:51:f5:33:6d:fc:d1:09:36:16:32:
ec:fe:43:1f:9c:94:c2:3b:86:2a:c3:b7:7c:5b:86:
99:b1:97:ad:47:53:8d:3a:14:07:03:35:7b:e7:7b:
dc:96:4a:37:5f:61:69:e5:51:4b:b6:10:98:4f:77:
70:6b:9e:c5:e5:a8:48:2d:6d:1f:3a:1e:9e:44:cb:
28:14:bf:40:af:62:e3:d9:d6:b7:1e:c7:23:14:01:
30:b8:a2:ac:8f:60:90:15:f8:e1:bb:5b:a9:a8:c3:
03:d3:ea:e9:59:91:9b:f9:89:5b:db:83:f8:ff:2a:
5e:05:7f:84:f9:6f:ef:eb:c3:86:f7:76:30:ac:7c:
3b:7f:6f:10:98:7f:f4:2a:f7:33:90:9c:85:d2:a1:
a6:e2:b3:1f:6e:7a:ea:6b:41:fb:e2:8a:a8:a7:57:
86:43:92:a7:b3:5f:da:a5:6e:16:ea:4b:e5:21:b4:
84:ab:ee:a2:5e:8e:b3:fe:64:6b:aa:1a:14:cb:2e:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A7:AC:B0:1C:9C:1D:D3:C4:61:D1:9C:FF:C9:19:1A:7C:6A:11:F5
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:3b:75:8b:9b:46:81:dc:47:18:ca:77:82:f7:59:44:93:
5c:a1:95:6c:e7:24:a2:9d:d3:31:97:4c:c9:b9:1e:94:f4:4b:
af:f5:db:3e:ff:10:c8:31:80:e9:c6:21:b8:50:4d:c7:36:a3:
77:f8:a8:89:8b:30:c1:3d:8b:76:f5:a3:50:8b:bc:58:c3:c7:
53:29:a1:cc:50:50:79:1d:3e:3d:b6:d2:e2:66:5b:a1:eb:66:
d3:c3:3d:ae:09:46:0a:4f:a5:3e:4d:64:01:a5:47:5f:8f:75:
c7:d0:c7:1f:d3:b2:4d:14:c3:83:24:79:04:00:c5:a3:b6:12:
f4:a3:a9:d8:11:b9:cb:42:5c:19:e0:35:5a:2a:25:ea:c6:4a:
21:34:9d:8f:e0:74:3c:0b:de:ca:94:89:9b:c0:ff:8e:d8:a7:
b7:fc:68:d8:a1:bf:ac:97:6a:ed:f1:96:2a:6a:66:d1:32:12:
0d:82:17:f2:f2:ca:2b:cc:b4:06:7d:2e:b4:c3:ee:2b:86:20:
84:f1:cf:0c:1b:36:25:c5:4d:ce:e6:57:aa:ab:74:08:76:11:
91:6a:2b:fc:b1:2d:8f:ac:e0:3d:66:4a:f7:97:7d:58:e5:d6:
5b:fb:f0:b0:93:d5:61:ac:10:d2:55:49:5b:39:c3:0f:b0:17:
0c:3a:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 06:15:04 2026 by rpki-client