
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
File: 4158AB6E76F847695C8FEB594CB05DE3191E7877.mft (raw, json)
Hash identifier: tBsq8k6F4PjND1pyRqk4eOSUtSnjdjuAcFQfFoSgByY=
Subject key identifier: 30:1E:F5:22:E1:CC:DE:58:0A:85:A4:AD:68:BE:B7:57:BF:85:7A:5D
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 47649629E1A7FED2089F6E56D4843523B1FD43E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
Manifest number: 0309
Signing time: Sun 11 Oct 2026 17:58:06 +0000
Manifest this update: Sun 11 Oct 2026 17:53:06 +0000
Manifest next update: Mon 12 Oct 2026 21:17:06 +0000
Files and hashes: 1: 4158AB6E76F847695C8FEB594CB05DE3191E7877.crl (hash: C/I/uf0hFDjHVXRtLy+EQ7lHysBK17lrCcMyg+tOzR0=)
2: 3230312e342e33322e302f31392d3234203d3e2038383838.roa (hash: 88uKKmosMU8QWurDK/eF4tR2RZHe7yQN2jm6tp8Qx98=)
3: 3230312e342e312e302f32342d3332203d3e203136353039.roa (hash: ox9/J9tAboo2XRgTvirVB5Q0oV+/xLNvFO2aInogmMg=)
4: 3230312e342e312e302f32342d3332203d3e203530303639.roa (hash: yCPwiHlSYGyN7DUJMOMTwc4KlrDr6ee2eRkrRvYrukw=)
5: 3230312e342e33322e302f31392d3234203d3e2033323134.roa (hash: RqpDVwFKUVJ4KXL9OMqnTfidvT/47+lHjhOmK+YPi50=)
6: 3230312e342e322e302f32332d3332203d3e203530303639.roa (hash: ere/v3sb0RHIzq2vnbrgSDPEImJtyblbjxi3tF1BIoQ=)
7: 60D5CF86368D32D8BD736410814916DA300E83CF.cer (hash: h9K1/FoQIn4IQ+Pj55UDAEkL6w9NDH2w/iYJJkzSELI=)
8: 3137372e3137372e3232342e302f32342d3234203d3e203630333236.roa (hash: IN+YllwkR1FWZAEbAPZjDy8pp86M2J4Vo+MuthHkyLk=)
9: 3230312e35302e33322e302f31392d3234203d3e2034373835.roa (hash: GhLtRoDjlqNHphHRdRApCsni62HttlSYQnl4FDsPCxk=)
10: 3137372e3137372e31392e302f32342d3332203d3e203538333432.roa (hash: uhL5qKKRO2qWA9YVVLwXgDMutAoJMmazOlzWjeSTGTY=)
11: 3230312e35302e33322e302f31392d3234203d3e2039333132.roa (hash: cjeOGY6nCjdAT/hEk3/0FGXwsaf/Bg3Zzc4O5AGGMT8=)
12: 3230312e342e352e302f32342d3332203d3e203530303639.roa (hash: EEXiCogld0jiCpGpaGf8puqkOYyieyMdz+HB/WP5ab4=)
13: 3230312e342e33322e302f31392d3234203d3e2034373835.roa (hash: HzdUv+l0E/f7AUZqSmhM8rTExNCjiFWuqHPsfDzLrYM=)
14: 3137372e3137372e372e302f32342d3332203d3e203530303639.roa (hash: UDM9uAdn5LfzILf/mJRfKDKeql8VK1sk34KeXiw7cEI=)
15: 3230312e35302e302e302f32302d3332203d3e20393137.roa (hash: LV5vXg1tBVGVGbGvuwuejlVcIl0gybi5ijTXlVnWnYs=)
16: 3230312e342e31322e302f32322d3332203d3e20393137.roa (hash: dM5HSwOUNmEnlGbv7ZT9pdO1x5lxVVoCWSo1pXl1GwY=)
17: 3230312e342e33322e302f31392d3234203d3e2039333132.roa (hash: l48ICNEOZSUFsv60Oe/8RzlWGIiclCXu4mnDrM98Rag=)
18: 3230312e35302e302e302f32302d3332203d3e203233393631.roa (hash: x1nzhHbSXkkPXE9Cj4iypMmjIOnW38aYFhMxIaEDc4c=)
19: 3230312e342e312e302f32342d3332203d3e203134363138.roa (hash: mvQmoRedgx4S6LRwa0SlJVlpATt4GGTM28ypKNbLfkw=)
20: 3230312e342e302e302f32332d3332203d3e20393137.roa (hash: 3XwO613XjTcJvibqlowu29uDf0sqrqGl9LF3k3R7qN8=)
21: 3230312e35302e33322e302f31392d3234203d3e2036323333.roa (hash: Lv+ZvhTtVlYc/JvDCP4pL2DuKvKs1Y5SiCDu8gR+7Ns=)
22: 3230312e342e382e302f32312d3332203d3e203233393631.roa (hash: S33h+aDRfgdvF1EOJk6OEOLimNuns4MAvwGMN64MpPI=)
23: 3137372e3137372e302e302f31392d3332203d3e203335343837.roa (hash: FhNumEvNBAPQ2E3f+BoZr2srux+Hc8OraRoB9QFpC2c=)
24: 3230312e35302e302e302f32302d3332203d3e203335343837.roa (hash: cxmy3kIvPh6s/1LnEwWKks49FiEuuQvkqmFi12hPpdI=)
25: 3137372e3137372e3232352e302f32342d3234203d3e203630333236.roa (hash: Mq/JzSvGU5lIzO/TaOmEgCjy319Aw/U4Udxf9FpuSFA=)
26: 3230312e35302e33322e302f31392d3234203d3e2033323134.roa (hash: ccY703myVDD41xHnGS5gI1MUGhj3xhz4NQq+ZVDdal0=)
27: 3230312e35302e33322e302f31392d3234203d3e2033323538.roa (hash: B+7eeENIirWUXLBYi6Gdu/QL872sGXdRYHqgd1hn4gM=)
28: 3230312e342e33322e302f31392d3234203d3e2033323538.roa (hash: mPkCpSJR7Ox8U53hcqwZhn2X5roIkg0pkz9RDiEMY8s=)
29: 3230312e35302e33322e302f31392d3234203d3e2038383838.roa (hash: Id0lD9Oi+RFE/S2xLodJ4oFQZxHVtg1X/xF7a5feNlk=)
30: 3230312e342e33322e302f31392d3234203d3e2036323333.roa (hash: WdBX9P0O+wUAyIeyoPquWCOx0wam+Enxn9GHVit4ex0=)
31: 3230312e342e362e302f32332d3332203d3e203233393631.roa (hash: 6dgSDcNhm53ie+bsgD7J8IGn5nBp0ZbLPHVHuPecMnc=)
32: 3230312e342e31302e302f32332d3332203d3e20393137.roa (hash: 7DbKYuvrYYcMc4FJjAjREZxF0j1+7/joCPmYoc/EHe4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:64:96:29:e1:a7:fe:d2:08:9f:6e:56:d4:84:35:23:b1:fd:43:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Oct 11 17:53:06 2026 GMT
Not After : Oct 12 21:17:06 2026 GMT
Subject: CN=301EF522E1CCDE580A85A4AD68BEB757BF857A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:d1:3d:bc:d8:15:7a:92:e5:4b:30:7e:ed:
f2:bc:4c:37:a4:21:68:93:3e:d1:7e:ba:a9:10:26:
9d:96:fe:62:34:24:5c:b2:c4:20:d4:63:9a:d4:1c:
f8:92:64:41:e2:27:c0:47:a2:f9:7a:27:21:69:60:
72:5d:00:47:77:90:f3:cd:35:56:f5:35:61:62:a8:
4a:b7:d9:8a:7e:f9:3e:ab:e5:98:12:f7:ef:c4:e6:
09:af:c5:31:55:c5:62:08:c0:b6:2f:92:ec:28:bf:
c5:6b:85:6c:e0:63:ae:40:41:89:4c:65:36:b3:d3:
76:fb:5e:be:9f:34:ab:17:07:3b:e1:d6:62:32:36:
67:82:a3:14:70:90:70:61:c2:c1:0a:34:98:aa:b5:
b0:a7:ab:2c:d2:5d:7d:5f:f7:e4:37:a8:a4:e7:51:
ba:ed:89:4d:06:6f:f0:cd:c0:db:3d:48:8c:ce:84:
b1:42:79:02:1e:13:1a:d6:9a:af:ef:8c:22:ea:fe:
af:ba:70:39:82:52:a1:b4:a7:af:f7:97:bd:35:e5:
ba:46:81:e8:e2:c4:76:a5:09:d6:aa:20:46:b3:2b:
84:8c:a4:a5:25:b9:a9:36:9d:1a:af:37:94:56:04:
21:10:4a:9e:0b:58:06:6c:a1:6d:74:ef:32:58:2b:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:F5:22:E1:CC:DE:58:0A:85:A4:AD:68:BE:B7:57:BF:85:7A:5D
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:74:ec:bc:a0:ac:e4:45:af:0d:f1:ec:d3:14:3f:ea:65:
82:7e:4a:45:7a:d9:11:1d:db:24:a7:8b:71:69:c8:33:b5:4d:
7c:70:78:26:dc:22:11:37:bf:b1:50:bc:d0:c2:a1:c2:a2:ea:
20:04:dc:32:51:20:76:8d:49:1f:a4:b9:e8:09:2b:eb:78:3a:
70:89:f3:42:2c:74:ad:8f:6b:9b:26:0f:cb:a8:f6:a5:2a:04:
e1:12:27:8e:76:9a:41:b8:e6:95:bc:71:16:11:ad:52:75:03:
2b:4e:cf:f9:17:bd:d9:fb:d0:d7:c1:fe:65:a4:f2:43:9f:aa:
a9:22:05:42:4a:2b:b5:70:bd:92:7d:6a:41:f1:72:60:72:40:
5a:2d:bb:91:c5:3f:18:70:78:3b:55:a5:e1:0a:39:a1:12:8a:
6a:17:5c:ea:df:f3:dc:56:7d:f2:04:79:93:7a:32:21:51:7d:
8e:12:cd:d5:e1:98:71:42:8c:d7:ff:0b:e8:f6:c7:85:05:30:
49:70:db:c2:42:cc:39:a9:c1:de:11:20:dd:ea:63:c9:cc:c1:
a8:ef:cd:fc:75:ff:ee:38:c8:63:50:da:93:da:b5:d0:03:dc:
4b:34:fd:10:d2:f5:8f:92:b4:a6:cb:b1:6b:d6:5b:b5:d1:e2:
9f:3e:d6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:42 2026 by rpki-client