
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File: 892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier: Q3cULXqJttQtEkJW1EyPNIo8JPbvID0e6cdQuXfeTow=
Subject key identifier: BF:86:BA:0B:3D:F2:80:8B:4F:EE:3B:6B:7D:3A:29:AF:01:63:00:46
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer: /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial: 0BABC986125D77766ACA2FC492079D8646B3A41F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number: 95
Signing time: Sat 09 May 2026 12:45:51 +0000
Manifest this update: Sat 09 May 2026 12:40:51 +0000
Manifest next update: Sun 10 May 2026 16:22:51 +0000
Files and hashes: 1: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
3: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
4: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
5: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
7: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
8: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: EOmQmU12BVvheoWywTdeFVkWge0kyYNo33xzsPkutQk=)
9: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
10: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
11: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
12: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ab:c9:86:12:5d:77:76:6a:ca:2f:c4:92:07:9d:86:46:b3:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Validity
Not Before: May 9 12:40:51 2026 GMT
Not After : May 10 16:22:51 2026 GMT
Subject: CN=BF86BA0B3DF2808B4FEE3B6B7D3A29AF01630046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:24:ae:0a:76:dc:7e:de:13:25:a9:14:d7:
67:62:09:bd:3b:2f:93:d0:d9:21:fc:76:b1:bb:96:
27:d8:2f:49:d3:23:29:7a:af:6f:fa:e2:0e:52:d6:
e9:13:d9:32:b6:94:b9:80:b9:82:6a:e2:d3:df:64:
6c:da:86:d5:e3:7b:7b:a3:6a:27:5f:a1:4f:eb:a1:
a1:5e:99:83:38:f6:2e:c8:40:f9:24:81:e9:a1:b8:
66:9d:7e:d3:a7:21:21:64:cc:0c:43:1b:a1:58:fb:
45:49:4a:f1:32:e4:63:ec:de:cd:a7:79:8d:04:b5:
25:e5:6d:69:98:ae:ef:3e:dc:81:01:d0:4d:f2:1a:
0e:d8:01:eb:59:83:fd:7b:0a:5a:07:da:1d:83:80:
e2:a2:50:f5:48:66:a0:fa:25:62:31:71:51:ea:8b:
91:5e:9c:b1:a6:a0:77:96:d2:b6:4e:58:5b:e4:86:
66:75:81:a9:5e:52:2f:b0:3c:96:53:2d:04:28:32:
1b:f3:7f:54:8a:f2:3b:b1:d1:f7:36:50:34:c9:d8:
68:63:1b:aa:2c:fa:78:c6:3d:e0:53:73:35:da:a1:
a3:f8:17:e7:57:b2:60:24:0f:ba:54:44:fb:d3:8c:
83:de:a7:6e:e3:4d:0f:7f:46:71:59:18:3a:fd:09:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:BA:0B:3D:F2:80:8B:4F:EE:3B:6B:7D:3A:29:AF:01:63:00:46
X509v3 Authority Key Identifier:
keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9c:4b:27:52:d8:9f:8a:82:3b:ff:f3:63:a4:c9:bb:89:ec:
ea:8f:c0:15:7a:f7:3b:2e:2f:a9:fc:e2:34:6f:d0:e7:85:e0:
de:30:b0:a7:04:cc:6b:78:fb:84:37:2e:8d:2b:d9:b1:98:f5:
90:00:1c:d1:d5:53:db:74:a2:de:1d:b7:ce:f6:2b:9f:54:fa:
03:6c:36:30:31:98:90:d9:30:7f:40:98:48:c2:03:ce:7a:54:
72:e9:4b:be:9a:58:6c:45:39:cd:64:fe:bf:34:2d:a8:db:ee:
2e:a6:a5:de:88:12:7b:8e:af:35:4f:1a:37:fb:28:6e:9b:15:
9b:d6:73:d4:97:1f:f7:58:63:a8:dc:e4:b4:31:f2:c9:d1:38:
04:6c:60:76:fb:63:de:40:0f:6a:5a:00:5c:f4:41:9b:59:5b:
82:c6:07:13:28:43:5f:c5:f3:66:6d:af:87:7a:b9:85:e9:3f:
9e:55:00:30:53:a8:fb:ed:14:f1:18:21:2d:41:5f:ff:28:bb:
be:64:ab:ab:81:ca:c3:8c:c2:91:ee:c7:92:e9:21:ef:6f:7c:
89:51:00:ff:79:70:df:6a:93:31:fb:d5:4d:c6:bc:35:be:e9:
09:8d:61:0f:c9:9a:99:77:ab:33:9c:71:3c:77:ca:4c:65:85:
7d:a1:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 21:21:43 2026 by rpki-client