
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json)
Hash identifier: HA6MZ5Ct6zcHVQkkg4LLZxhWS+TJ7TvPxKxnSVkFMFE=
Subject key identifier: D7:83:2D:31:7F:F3:42:EE:B0:B2:91:72:00:44:7B:60:FF:0F:32:F9
Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Certificate serial: 711ED6292C6F28C926315416B707DB7E34AEC34D
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
Manifest number: 80
Signing time: Sun 24 May 2026 22:43:55 +0000
Manifest this update: Sun 24 May 2026 22:38:55 +0000
Manifest next update: Mon 25 May 2026 23:59:55 +0000
Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: QUnXhWCskz0g3013N1oq4XGbsAbBdpdow2157cKCH7Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1e:d6:29:2c:6f:28:c9:26:31:54:16:b7:07:db:7e:34:ae:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Validity
Not Before: May 24 22:38:55 2026 GMT
Not After : May 25 23:59:55 2026 GMT
Subject: CN=D7832D317FF342EEB0B2917200447B60FF0F32F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:72:a6:41:69:33:97:cf:82:92:6f:47:e5:
0e:ab:97:c6:f9:45:59:71:af:dc:2c:a8:1d:7f:c1:
ac:e2:7e:60:7a:28:b4:98:40:01:c9:97:bc:8e:d7:
e6:df:9c:93:2f:0a:65:ef:e0:13:0c:c5:02:f6:d1:
63:8d:81:be:dc:2a:11:9f:9a:47:ae:0e:be:df:c9:
98:28:90:14:68:d5:39:8d:c1:04:2c:5e:c3:4a:8f:
97:a1:0a:d7:bc:fb:7a:05:40:56:d2:6e:8a:a0:16:
15:86:c9:50:9a:97:a7:b7:be:f8:33:ff:9b:c1:b8:
09:24:5c:62:f9:67:76:9e:58:7c:69:ca:0a:4c:c3:
bf:b5:42:4a:37:85:fc:90:73:e7:97:b5:ab:5b:2c:
69:c0:35:b3:79:0c:1d:12:f6:f5:3f:d5:35:07:62:
80:3f:40:61:67:fd:c4:96:7b:56:72:00:d3:f7:5d:
ce:52:14:f0:37:23:a3:08:6e:87:a8:c2:80:0e:db:
80:0a:d3:f0:d6:a0:14:26:4f:66:8d:3c:87:28:66:
1e:65:37:c1:fd:9e:9c:34:79:e7:c2:f0:41:34:33:
f0:22:dd:db:02:89:1e:06:7e:bb:da:e7:69:f6:45:
1c:39:16:a5:e7:5c:79:06:71:c7:c6:7e:c2:dd:0b:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:2D:31:7F:F3:42:EE:B0:B2:91:72:00:44:7B:60:FF:0F:32:F9
X509v3 Authority Key Identifier:
keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:01:01:cd:f8:b7:c5:c8:73:9f:e6:2c:19:73:96:8d:7e:67:
af:97:60:04:e8:7a:12:ea:77:81:95:4a:19:27:aa:49:69:ff:
37:bf:cb:ce:55:cb:ef:37:10:78:a2:67:14:f6:24:ce:c2:37:
36:16:af:06:32:a8:27:3e:85:b6:76:1d:57:4b:0a:b2:9e:0c:
84:4a:d4:da:5f:2a:98:4c:63:94:68:94:59:79:14:9d:d9:d0:
f7:0a:d1:43:dd:bc:34:e0:f6:29:47:ea:bd:76:ad:29:59:f8:
5e:65:e8:e0:1b:6b:8d:a6:08:e0:73:73:8a:15:35:0b:44:71:
44:c8:36:e5:24:34:d4:c3:15:88:69:b9:65:d5:e3:67:c4:1d:
7e:b4:f1:bf:db:5c:2e:95:af:75:bc:48:04:f5:8f:f9:33:b6:
e6:5d:7d:d5:2b:4c:66:5d:93:06:84:bd:d6:38:ea:6e:d2:01:
30:8c:dd:00:59:c2:b5:37:27:1c:0c:a8:0b:ae:f2:e0:56:bb:
40:ad:8f:46:83:01:c4:68:d1:8c:b3:17:f2:a4:0b:ff:a3:94:
b3:e9:23:49:78:fc:e3:d2:75:2b:01:f7:34:39:f1:14:00:26:
9f:f0:28:a9:a2:41:e6:40:47:60:0f:b0:ee:f9:dd:6d:14:5c:
9d:bc:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 15:45:45 2026 by rpki-client