
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json)
Hash identifier: 5Xuq9oDRlvR9JIhmF0LVAZxi95iAAs6dkakcQu4hsu0=
Subject key identifier: 15:CF:AE:2F:43:4E:E1:57:30:AA:8A:93:12:F1:AA:BA:F6:C8:69:14
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 6A9BBE9CB5EA208BF98CF6CE87E90BA75FA849F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
Manifest number: 0376
Signing time: Fri 05 Jun 2026 19:32:21 +0000
Manifest this update: Fri 05 Jun 2026 19:27:21 +0000
Manifest next update: Sat 06 Jun 2026 21:22:21 +0000
Files and hashes: 1: AS202301.asa (hash: siRTvesU6WdTtpKDFLSJurV8GA1NYikKKo3zst2Ebk8=)
2: 326130623a346530343a343966353a3a2f34382d3438203d3e20343032353336.roa (hash: pWY9PAU1e4HYq/0yecEeibEgLvdjkG+Q4SYrRpaltss=)
3: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: 8EDsHf/SAE82N/+Y9Pl1wzWzsVPi9qPG6SyIOSaqcP4=)
4: 326130623a346530343a33623a3a2f34382d3438203d3e20323032333031.roa (hash: /T7WczgnoPSjI//jnXYULT7F08gKxrzvE+poPqlF4Do=)
5: AS26954.asa (hash: GJbuxOOIwYdyKeNuY3ueZtcbp7hkyah5TRoeVRKV13c=)
6: 36322e3138322e3139322e302f32312d3234203d3e203432353332.roa (hash: k22wzf+MNF3rdZwWDi2NJmXkW92pMk1IiR0y5N9dN8c=)
7: 326130623a346530343a33613a3a2f34382d3438203d3e20323032333031.roa (hash: PxM9g8iygtPE0W8UaxD6VQbthErf6scMW5Q5B330XGE=)
8: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: fq8cKG3FCekp48D1swkENDVMZbqOd/tdZKmMqkcozss=)
9: 326130623a346530373a6234333a3a2f34382d3438203d3e20313937333234.roa (hash: /NicVI9ZA6HI/WOoAhhTorEr85yfvxle9J9tMstWWS8=)
10: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (hash: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=)
11: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: F+gO6ZKYcboOFSJKnCm81psNizqbMEENngfXl2NTHEQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9b:be:9c:b5:ea:20:8b:f9:8c:f6:ce:87:e9:0b:a7:5f:a8:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jun 5 19:27:21 2026 GMT
Not After : Jun 6 21:22:21 2026 GMT
Subject: CN=15CFAE2F434EE15730AA8A9312F1AABAF6C86914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:67:b9:a8:de:63:44:2b:e0:cb:35:24:21:
02:0f:72:9b:da:90:ba:cf:85:94:bb:38:21:bd:33:
e8:f8:e4:8b:a4:4f:f4:b9:2c:fb:cb:5d:e5:c7:ea:
c2:88:fe:5c:9a:74:6b:03:e3:85:58:8f:9a:9c:69:
25:33:75:07:b6:8b:72:45:76:29:bb:63:94:c4:71:
52:42:38:fa:fe:03:84:1d:26:e0:b7:b9:7a:94:e6:
68:61:b0:66:27:28:e0:5d:98:5e:a9:a6:28:e6:b5:
72:2e:6f:5a:2c:6d:07:07:8a:1a:64:5c:68:a7:69:
7f:41:8b:40:2e:af:34:cc:9a:00:60:8a:20:14:12:
54:4d:14:fc:60:ee:a4:ac:23:54:59:14:71:80:03:
d5:20:73:a5:9e:83:bb:ea:d0:98:e5:bd:a4:e6:c2:
a9:73:71:6b:5d:b5:02:d9:c1:8c:26:88:16:25:b3:
77:0a:34:f1:8d:4c:64:56:53:7b:9f:2f:93:8e:7d:
3f:ff:9d:ae:b3:f3:66:ae:5a:6f:ef:8c:ed:a1:53:
ff:b2:7d:2b:6e:74:28:a7:22:f2:08:1a:b2:25:42:
3f:e3:50:4f:48:8f:75:51:12:a3:b7:71:6f:09:25:
f5:ea:58:5a:3f:ab:ba:1f:49:6f:ea:d7:2b:86:8a:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:AE:2F:43:4E:E1:57:30:AA:8A:93:12:F1:AA:BA:F6:C8:69:14
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:a3:fe:0e:d3:7c:00:f2:72:80:66:2f:69:6e:69:a1:c6:
cb:bd:cd:4f:cc:74:dc:c2:8a:ed:be:8c:cf:85:78:cb:5f:44:
72:d4:80:84:35:bb:6e:08:08:5f:3c:0f:26:ab:09:c3:f8:40:
ab:1f:3a:b6:38:2f:3c:63:34:ba:e6:e0:b2:3c:27:36:a9:cb:
d9:18:f7:a7:c0:f0:62:3d:e5:ad:13:9f:ea:1f:6c:7c:84:f5:
2e:36:70:d8:e5:be:9c:e0:f8:40:b5:9a:d7:6f:b1:c3:a3:dc:
9b:f2:c9:8b:3d:10:31:3e:54:46:00:2a:34:8b:ed:8a:e6:fc:
5f:d3:22:e4:4e:f6:5f:85:2c:2d:b1:6b:fd:d1:47:30:e6:62:
79:2b:b2:42:b3:7e:2e:e4:a1:0f:bb:6d:1b:9e:93:5d:97:b6:
c0:93:9e:eb:89:b1:99:22:b3:09:fd:c8:d3:a8:8d:19:41:55:
e0:dc:34:0a:77:95:44:3a:f5:63:d6:3f:b8:36:30:cb:5f:1c:
09:0a:75:01:02:c8:be:36:82:37:34:5b:3c:68:c3:be:e7:9c:
92:a3:9c:ed:ee:8e:4f:08:66:8f:b8:f6:a7:75:2d:9a:4d:ab:
6c:b9:b4:19:bc:fe:65:d6:2b:10:83:00:6a:60:05:6f:b0:ed:
85:82:bc:12
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUapu+nLXqIIv5jPbOh+kLp1+oSfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNjA2MDUxOTI3MjFaFw0yNjA2MDYyMTIyMjFaMDMxMTAvBgNV
BAMTKDE1Q0ZBRTJGNDM0RUUxNTczMEFBOEE5MzEyRjFBQUJBRjZDODY5MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLf2e5qN5jRCvgyzUkIQIPcpva
kLrPhZS7OCG9M+j45IukT/S5LPvLXeXH6sKI/lyadGsD44VYj5qcaSUzdQe2i3JF
dim7Y5TEcVJCOPr+A4QdJuC3uXqU5mhhsGYnKOBdmF6ppijmtXIub1osbQcHihpk
XGinaX9Bi0AurzTMmgBgiiAUElRNFPxg7qSsI1RZFHGAA9Ugc6Weg7vq0JjlvaTm
wqlzcWtdtQLZwYwmiBYls3cKNPGNTGRWU3ufL5OOfT//na6z82auWm/vjO2hU/+y
fStudCinIvIIGrIlQj/jUE9Ij3VREqO3cW8JJfXqWFo/q7ofSW/q1yuGirWNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFc+uL0NO4VcwqoqTEvGquvbIaRQwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04
YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx
QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrij/g7TfADycoBmL2lu
aaHGy73NT8x03MKK7b6Mz4V4y19EctSAhDW7bggIXzwPJqsJw/hAqx86tjgvPGM0
uubgsjwnNqnL2Rj3p8DwYj3lrROf6h9sfIT1LjZw2OW+nOD4QLWa12+xw6Pcm/LJ
iz0QMT5URgAqNIvtiub8X9Mi5E72X4UsLbFr/dFHMOZieSuyQrN+LuShD7ttG56T
XZe2wJOe64mxmSKzCf3I06iNGUFV4Nw0CneVRDr1Y9Y/uDYwy18cCQp1AQLIvjaC
NzRbPGjDvueckqOc7e6OTwhmj7j2p3Utmk2rbLm0Gbz+ZdYrEIMAamAFb7DthYK8
Eg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 01:07:15 2026 by rpki-client