
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json)
Hash identifier: +QwMGWuBYjA4TrvF29yHtjKE6bhRWNtsief47iRFI8I=
Subject key identifier: 30:64:98:6E:43:28:8E:F3:99:AF:B3:1F:6C:F1:01:5F:3F:3C:31:1D
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial: 28439A6FD4415BC05225C0E1909CA72EF62497DB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
Manifest number: 95
Signing time: Wed 04 Mar 2026 16:08:42 +0000
Manifest this update: Wed 04 Mar 2026 16:03:42 +0000
Manifest next update: Thu 05 Mar 2026 19:30:42 +0000
Files and hashes: 1: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=)
2: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=)
3: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=)
4: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=)
5: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=)
6: 326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (hash: q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=)
7: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: OWuToAouMBN6iR9HAFisaiyZRkZ6Z3CPRb1YPOlmVYQ=)
8: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=)
9: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=)
10: 326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa (hash: VcVUsrYac0pzWJK2F7lpmFfvFDL2ZKG/uypN2LdY9f4=)
11: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=)
12: 326130363a313238333a383931363a3a2f34382d3438203d3e20323133343133.roa (hash: xUGvIyx/a5N+LcKm4jRlraXDt9i9y3juhfko91grU4U=)
13: 326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa (hash: VEluBfu+UVgZrxSe1UipoTLy1fiGHxv2QDcCVFCjUkc=)
14: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=)
15: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:43:9a:6f:d4:41:5b:c0:52:25:c0:e1:90:9c:a7:2e:f6:24:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Validity
Not Before: Mar 4 16:03:42 2026 GMT
Not After : Mar 5 19:30:42 2026 GMT
Subject: CN=3064986E43288EF399AFB31F6CF1015F3F3C311D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:d6:95:12:4e:5c:e0:1a:44:d6:3a:73:17:
9f:e2:ff:83:ce:f9:d5:85:87:f1:52:34:ea:e3:1f:
c9:67:42:1b:4d:38:1c:81:14:77:06:fa:cb:70:2e:
37:ad:0f:ec:a1:d2:7f:dc:df:c8:f4:b9:64:39:50:
7f:67:d6:cf:fd:4b:5c:04:8d:fb:e5:c0:d6:41:61:
4c:79:ab:8e:f7:c9:6b:d0:a0:09:8b:8d:93:1d:db:
c2:3a:44:69:c7:c8:fc:01:a9:2d:6f:6a:08:fc:08:
4c:0a:e6:b4:a5:19:4b:bb:7c:bb:62:78:bc:b5:0c:
26:0e:a3:08:cc:42:ed:c7:4d:84:eb:3e:fd:8e:b2:
aa:89:9e:80:6f:aa:ba:a4:da:af:be:98:93:1b:6f:
e3:a3:9f:29:07:a6:9d:34:81:cc:7b:9d:0e:19:cf:
1d:d4:88:e2:0d:bc:fd:bd:b3:84:72:df:c0:af:30:
b3:90:a4:ef:11:f1:19:25:c4:46:a3:ef:e3:cd:1d:
9b:43:2e:c2:0a:b5:28:4b:53:d0:fa:dc:b1:c5:b5:
e2:a0:0c:6a:f3:c2:3b:b6:a0:7a:05:fd:f1:f2:68:
1c:5e:c9:25:91:eb:39:64:18:c9:4a:77:8b:b5:b9:
b1:88:96:32:37:6b:05:e0:1d:18:7b:6c:96:a5:ff:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:64:98:6E:43:28:8E:F3:99:AF:B3:1F:6C:F1:01:5F:3F:3C:31:1D
X509v3 Authority Key Identifier:
keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:13:d7:2e:bb:e1:10:70:c5:e0:96:d1:5f:c6:f7:b4:95:a3:
40:f6:a3:1b:9f:83:52:5b:57:e5:3c:9c:8c:f1:1c:3c:ff:95:
a6:c2:22:0d:28:b5:3d:31:36:f1:8f:1f:bf:86:bc:e9:46:9f:
5a:9e:02:17:74:c2:9d:b5:d1:81:58:d7:c6:1b:cb:0c:18:62:
32:ff:3e:1a:ba:b0:38:0f:7d:2a:e6:ea:52:8d:03:b4:50:40:
8e:ee:1b:4e:6c:83:be:f8:2e:a3:c6:67:78:b3:0f:13:ee:3c:
24:96:2f:d9:12:fb:43:40:6a:b7:9a:19:7f:2e:ad:1a:83:ed:
d3:2c:5e:77:a2:13:d5:70:f7:06:37:ea:16:b0:9f:c3:df:63:
fe:fd:50:2b:4e:35:2e:12:a2:37:a0:1e:53:c4:36:44:43:04:
c5:b3:57:ca:e8:ed:59:f2:e7:89:82:8d:3e:a6:7d:f4:f4:71:
75:73:40:d1:ad:c8:d5:78:03:5d:9a:ed:06:dc:7a:90:f7:24:
2a:90:f0:9c:6e:d0:92:df:f7:84:2d:76:09:51:15:66:0f:fa:
c3:b1:1b:ea:b9:32:cd:2d:82:f3:48:76:90:92:bb:28:91:56:
f5:9b:b1:bf:4e:bd:b7:93:71:ae:86:62:3f:f9:63:27:9b:77:
25:9a:5b:e4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKEOab9RBW8BSJcDhkJynLvYkl9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE
M0NEMTNDOTAeFw0yNjAzMDQxNjAzNDJaFw0yNjAzMDUxOTMwNDJaMDMxMTAvBgNV
BAMTKDMwNjQ5ODZFNDMyODhFRjM5OUFGQjMxRjZDRjEwMTVGM0YzQzMxMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXNaVEk5c4BpE1jpzF5/i/4PO
+dWFh/FSNOrjH8lnQhtNOByBFHcG+stwLjetD+yh0n/c38j0uWQ5UH9n1s/9S1wE
jfvlwNZBYUx5q473yWvQoAmLjZMd28I6RGnHyPwBqS1vagj8CEwK5rSlGUu7fLti
eLy1DCYOowjMQu3HTYTrPv2OsqqJnoBvqrqk2q++mJMbb+OjnykHpp00gcx7nQ4Z
zx3UiOINvP29s4Ry38CvMLOQpO8R8RklxEaj7+PNHZtDLsIKtShLU9D63LHFteKg
DGrzwju2oHoF/fHyaBxeySWR6zlkGMlKd4u1ubGIljI3awXgHRh7bJal/w1BAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUMGSYbkMojvOZr7MfbPEBXz88MR0wHwYDVR0j
BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2
OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk
ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0
QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz
RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2E9cu
u+EQcMXgltFfxve0laNA9qMbn4NSW1flPJyM8Rw8/5WmwiINKLU9MTbxjx+/hrzp
Rp9angIXdMKdtdGBWNfGG8sMGGIy/z4aurA4D30q5upSjQO0UECO7htObIO++C6j
xmd4sw8T7jwkli/ZEvtDQGq3mhl/Lq0ag+3TLF53ohPVcPcGN+oWsJ/D32P+/VAr
TjUuEqI3oB5TxDZEQwTFs1fK6O1Z8ueJgo0+pn309HF1c0DRrcjVeANdmu0G3HqQ
9yQqkPCcbtCS3/eELXYJURVmD/rDsRvquTLNLYLzSHaQkrsokVb1m7G/Tr23k3Gu
hmI/+WMnm3clmlvk
-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:06 2026 by rpki-client