
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
File: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft (raw, json)
Hash identifier: 92fWy/jooPr+F1if4HvrLyO82wiNUwiIuNGUkKDg/8M=
Subject key identifier: FF:3C:D9:FC:28:77:9D:0B:4E:8B:1B:29:14:8D:14:F2:9F:E2:74:3B
Authority key identifier: C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
Certificate issuer: /CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Certificate serial: 2C15612FBED456E57D068E7814EC037E56D9D312
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
Manifest number: 0145
Signing time: Tue 13 Oct 2026 09:50:06 +0000
Manifest this update: Tue 13 Oct 2026 09:45:06 +0000
Manifest next update: Wed 14 Oct 2026 12:51:06 +0000
Files and hashes: 1: C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl (hash: B12UugDyYXd0PnL915tdE2gRmHAQxzAs9TEjx07g15Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:61:2f:be:d4:56:e5:7d:06:8e:78:14:ec:03:7e:56:d9:d3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F02C2AF382377ADA9B51F2EA370E745412D1DF
Validity
Not Before: Oct 13 09:45:06 2026 GMT
Not After : Oct 14 12:51:06 2026 GMT
Subject: CN=FF3CD9FC28779D0B4E8B1B29148D14F29FE2743B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:13:5e:7e:92:95:ec:66:96:fb:54:d5:69:
d3:46:e5:db:a8:6b:e6:1b:48:ec:00:14:36:35:ea:
2d:06:3b:de:e8:bd:a2:3a:1d:6d:06:79:34:9d:0a:
7c:33:5f:c7:0c:64:8d:be:fd:cb:f2:e9:9c:62:b4:
db:cf:5a:49:7a:4f:26:74:cb:90:44:fd:9b:65:be:
f8:ce:38:d8:09:2a:76:27:ae:72:e3:5b:fa:06:3b:
03:ad:ff:ba:fc:ad:96:51:fb:10:95:16:1b:68:e2:
69:aa:d6:61:1a:88:f5:12:00:0f:14:6e:0f:e0:bb:
ca:5a:31:94:04:91:7f:73:9d:0e:45:53:fa:b1:d0:
c9:4f:16:46:f4:b5:a4:d0:51:35:46:52:36:98:73:
af:6d:fe:f2:bb:8e:00:8b:df:21:25:d5:d8:4b:7d:
23:0f:e1:f5:6e:f7:9f:16:7f:75:85:13:52:8f:ec:
4f:65:b7:f8:62:25:c4:1c:79:b0:8f:91:49:1c:e3:
4a:82:9c:7f:04:33:27:37:a5:8d:85:ad:dc:ee:79:
6b:28:7a:f2:38:de:cc:15:e4:6a:03:ee:b7:8e:ee:
03:83:eb:14:4e:14:3a:82:e8:0f:a0:86:9e:45:8e:
09:29:6a:f2:07:cd:58:ce:11:43:db:ff:8b:28:4c:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:D9:FC:28:77:9D:0B:4E:8B:1B:29:14:8D:14:F2:9F:E2:74:3B
X509v3 Authority Key Identifier:
keyid:C3:F0:2C:2A:F3:82:37:7A:DA:9B:51:F2:EA:37:0E:74:54:12:D1:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/C3F02C2AF382377ADA9B51F2EA370E745412D1DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:00:74:b7:5b:61:4e:63:73:a6:ec:44:f0:41:98:54:a9:
07:9c:39:82:83:63:87:50:ab:f7:8f:6e:36:fb:b9:62:79:55:
73:67:ab:12:9e:b9:89:5b:27:6c:e4:f2:9f:7a:3f:9e:bd:21:
1c:8c:97:86:3a:b4:2f:ea:35:34:14:2c:da:c9:d7:8a:20:73:
f2:14:a5:7c:c0:4a:ab:56:3c:5c:ab:14:6a:9b:e4:8b:b2:b5:
16:8e:d8:ba:9c:76:2d:4d:99:c4:13:f1:61:f9:bc:fe:6e:09:
13:82:cc:6a:d4:5b:25:5b:9e:05:1c:c6:40:91:2b:10:8b:28:
37:4a:76:34:a5:4d:6a:94:35:94:1b:11:a3:30:09:1c:ee:8f:
71:5b:d1:a1:20:60:b7:ef:64:96:c5:27:9b:b1:ee:74:b4:9b:
cb:0f:9b:87:88:a0:c8:bf:52:94:53:ec:ff:fa:05:78:a3:e3:
40:d4:0e:22:84:f2:0d:ec:5a:5c:43:a8:d0:c5:04:f8:82:01:
c8:17:90:97:32:f8:63:98:c9:b7:b5:ee:7e:00:dc:27:dc:94:
62:6f:5f:66:7e:84:58:0d:aa:b1:8b:aa:04:8e:61:8b:9b:93:
3f:5b:35:77:d8:0c:c4:1b:33:10:d5:f3:fc:1d:b6:44:14:1a:
e7:d7:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:01 2026 by rpki-client