
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier: +QPKILC8fJKrcDj1WLBhtL9cXh+JTjI8Biaoi8oQTGs=
Subject key identifier: 74:52:7A:36:FC:E2:27:64:91:06:A9:E9:CF:B2:65:FE:9A:E9:7E:B4
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial: 5625631752CC5BD8EE8202046B45A1E9ECA7FAA9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number: 0158
Signing time: Tue 29 Sep 2026 03:28:22 +0000
Manifest this update: Tue 29 Sep 2026 03:23:22 +0000
Manifest next update: Wed 30 Sep 2026 03:39:22 +0000
Files and hashes: 1: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
2: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
4: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
5: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
7: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: xBbg/pN9pn4WCPtz2oIlRfRvj6a5QC6mhv482DWM2Ek=)
8: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
9: 326131343a373538313a366336393a3a2f34382d3438203d3e20323136313233.roa (hash: HgdPJda6r5W610xVzMNjTKP68bG2jdXcdcTL6VaTf2E=)
10: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
11: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
12: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
13: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:25:63:17:52:cc:5b:d8:ee:82:02:04:6b:45:a1:e9:ec:a7:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Validity
Not Before: Sep 29 03:23:22 2026 GMT
Not After : Sep 30 03:39:22 2026 GMT
Subject: CN=74527A36FCE227649106A9E9CFB265FE9AE97EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:66:0f:f6:1a:f4:a5:96:a4:7c:c0:5a:ff:
90:7b:03:40:68:75:83:bf:78:d3:65:a9:4b:8a:47:
39:1c:94:ad:5e:00:3c:17:f9:8b:8f:63:b9:a1:d3:
e6:06:09:e2:4e:50:f5:b4:df:a3:a9:28:d5:9a:69:
a2:a7:12:94:92:8b:26:f5:e4:2e:7f:a0:8b:08:4a:
f9:14:84:2b:cb:84:cb:56:b4:37:ea:89:b4:56:e9:
b0:08:69:ce:7c:63:39:c6:2d:7b:f2:38:ec:77:d1:
1b:72:e2:f2:02:0c:19:ed:3c:74:e8:bc:5e:38:4a:
4e:f0:86:54:69:cb:2d:2c:05:e9:34:28:9b:84:69:
c5:6f:e8:d5:6f:c1:c8:97:26:bd:af:52:33:19:35:
be:9a:f3:62:8e:2e:ca:4f:5d:5a:1a:e5:e6:87:e9:
1d:0f:fa:22:18:8c:c3:59:51:ea:8a:4f:80:a9:b2:
c0:47:2a:5b:a7:97:33:54:be:6d:ba:ee:d7:79:49:
6e:6d:ef:b6:8f:cd:d3:1e:b2:b5:d4:09:8c:c6:aa:
e6:87:d0:a9:ec:d5:29:2c:61:03:93:fa:b1:2a:1b:
2b:6b:cc:29:b2:48:9e:3c:0c:62:64:07:5f:c8:1b:
52:ea:f5:ac:56:76:66:16:c3:b1:71:03:bf:c7:50:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:7A:36:FC:E2:27:64:91:06:A9:E9:CF:B2:65:FE:9A:E9:7E:B4
X509v3 Authority Key Identifier:
keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e1:53:80:77:6c:a4:e9:db:ed:e3:38:71:0e:a5:14:2a:30:
14:a1:1c:07:3d:ff:41:09:0d:fd:af:2c:86:a9:6c:7b:69:2b:
a0:17:3e:dd:46:c7:89:a0:20:a6:02:0b:60:0d:83:0d:5d:4c:
e4:78:5d:eb:7c:55:28:10:99:05:54:aa:a6:68:37:e1:e9:b5:
ab:7e:bf:e7:24:57:8b:dc:61:b8:c5:c7:dc:65:2c:4e:9f:26:
aa:35:c4:e7:3b:03:c0:65:b4:06:16:b8:1a:e1:a8:55:8d:ad:
bb:b0:3e:05:df:ea:69:83:15:3c:b7:8d:cd:e8:66:36:6e:81:
54:24:0a:18:4b:1c:2b:70:aa:1e:81:f6:cb:bd:a9:63:b7:78:
05:f0:05:e6:32:d5:53:a3:23:99:25:ab:0d:42:bf:3b:c2:f7:
3c:92:8d:99:31:35:8f:54:3c:7f:5a:97:17:a5:c0:20:81:4e:
47:c4:50:4d:12:84:c0:fe:17:6b:de:b2:42:61:58:39:e2:70:
6c:83:59:7d:c8:26:41:11:13:55:66:78:21:6a:e0:43:7d:58:
eb:24:69:b7:46:a4:2a:ee:17:0e:f4:a6:94:c7:5e:65:1a:f3:
a3:cd:01:54:bb:da:dc:5e:68:64:13:b2:3a:6c:d5:72:ce:99:
00:37:ce:20
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUViVjF1LMW9juggIEa0Wh6eyn+qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYx
RjA2NDNGNjAeFw0yNjA5MjkwMzIzMjJaFw0yNjA5MzAwMzM5MjJaMDMxMTAvBgNV
BAMTKDc0NTI3QTM2RkNFMjI3NjQ5MTA2QTlFOUNGQjI2NUZFOUFFOTdFQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv52YP9hr0pZakfMBa/5B7A0Bo
dYO/eNNlqUuKRzkclK1eADwX+YuPY7mh0+YGCeJOUPW036OpKNWaaaKnEpSSiyb1
5C5/oIsISvkUhCvLhMtWtDfqibRW6bAIac58YznGLXvyOOx30Rty4vICDBntPHTo
vF44Sk7whlRpyy0sBek0KJuEacVv6NVvwciXJr2vUjMZNb6a82KOLspPXVoa5eaH
6R0P+iIYjMNZUeqKT4CpssBHKlunlzNUvm267td5SW5t77aPzdMesrXUCYzGquaH
0Kns1SksYQOT+rEqGytrzCmySJ48DGJkB1/IG1Lq9axWdmYWw7FxA7/HUMdfAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUdFJ6NvziJ2SRBqnpz7Jl/prpfrQwHwYDVR0j
BBgwFoAUiSwsWZDfTXBFu1WgEfRzJh8GQ/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzFiZWRmNmMtY2M5MS00YmYwLTlkNmUtN2U5YjNjYjk5
MDVkLzEvODkyQzJDNTk5MERGNEQ3MDQ1QkI1NUEwMTFGNDczMjYxRjA2NDNGNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTJDMkM1OTkwREY0RDcwNDVCQjU1QTAx
MUY0NzMyNjFGMDY0M0Y2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzcxYmVkZjZjLWNjOTEtNGJmMC05ZDZlLTdlOWIzY2I5OTA1ZC8xLzg5MkMyQzU5
OTBERjRENzA0NUJCNTVBMDExRjQ3MzI2MUYwNjQzRjYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy4VOA
d2yk6dvt4zhxDqUUKjAUoRwHPf9BCQ39ryyGqWx7aSugFz7dRseJoCCmAgtgDYMN
XUzkeF3rfFUoEJkFVKqmaDfh6bWrfr/nJFeL3GG4xcfcZSxOnyaqNcTnOwPAZbQG
Frga4ahVja27sD4F3+ppgxU8t43N6GY2boFUJAoYSxwrcKoegfbLvaljt3gF8AXm
MtVToyOZJasNQr87wvc8ko2ZMTWPVDx/WpcXpcAggU5HxFBNEoTA/hdr3rJCYVg5
4nBsg1l9yCZBERNVZnghauBDfVjrJGm3RqQq7hcO9KaUx15lGvOjzQFUu9rcXmhk
E7I6bNVyzpkAN84g
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:00:48 2026 by rpki-client