
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
File: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft (raw, json)
Hash identifier: WF4OEUiO7QMwJcVQRjzH6+YYPVSeD7fm8H8hBFwGNVA=
Subject key identifier: 52:51:57:7B:30:06:71:14:7E:02:DB:82:36:EC:2A:2E:DF:97:7E:07
Authority key identifier: 2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
Certificate issuer: /CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Certificate serial: 7EB9A18D482A2A1277E5B3FD8E559C55CD0B2C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
Manifest number: 0202
Signing time: Fri 20 Feb 2026 13:20:18 +0000
Manifest this update: Fri 20 Feb 2026 13:15:18 +0000
Manifest next update: Sat 21 Feb 2026 17:01:18 +0000
Files and hashes: 1: 326131343a623430303a3a2f34382d3438203d3e20323133323739.roa (hash: Nc5etJGF6V1MhXz6BJTwE4uruzNAtPHTBPUBd5SZlN4=)
2: 2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl (hash: kEuPCJpbTb8rzADNJBdxmh8WzsqO1K7BQdUWqzwYVGw=)
3: 326131343a623430303a34393a3a2f34382d3438203d3e20323133323739.roa (hash: riIdsxtRctFPDHrFJWh54sUuVf2OxjI79zxryuANdmE=)
4: AS213279.asa (hash: Cafjx2sc9KF1bemlOMSC/Wvjj7P0Gkri+D5Y13trzvs=)
5: 326131343a623430303a3a2f33322d3332203d3e20323133323739.roa (hash: rT8I95NhPW9Za7rv+7019qgMOggIgHAYWlE3AUdlN/w=)
6: 326131343a623430303a3a2f32392d3438203d3e2030.roa (hash: NhcbptlixcA3mbsPTqMiibAOrNSU1BYwO66fMNiKSfA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b9:a1:8d:48:2a:2a:12:77:e5:b3:fd:8e:55:9c:55:cd:0b:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c12f0a080f021f2ba25bc0c6ea7e06b67aad05e
Validity
Not Before: Feb 20 13:15:18 2026 GMT
Not After : Feb 21 17:01:18 2026 GMT
Subject: CN=5251577B300671147E02DB8236EC2A2EDF977E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:2f:9a:c0:a6:1f:b1:3b:bf:79:52:39:d0:
32:78:80:6c:36:3e:2b:20:66:ec:b7:db:c3:65:18:
44:a6:0a:e7:88:8e:4e:e9:aa:a9:77:75:6e:9c:42:
0d:d9:55:77:20:51:70:2f:9b:5e:0d:e3:a7:79:aa:
53:38:43:ea:31:6b:10:45:42:97:41:7e:d2:50:9f:
e4:f7:fc:f6:ee:ec:04:82:f8:40:27:53:2f:58:24:
fd:3c:01:9c:4a:9d:10:63:17:62:b8:32:5e:bb:bd:
99:54:8b:6e:8f:a0:e7:e9:88:df:a1:6e:f8:a6:b9:
02:01:60:4e:c7:5d:19:fa:1d:20:5c:68:c6:82:13:
21:e7:23:0a:75:d5:84:f0:fb:30:25:46:44:18:5a:
42:d9:a7:93:85:ed:f9:e1:79:3b:03:62:32:b9:5d:
c0:d5:f1:b4:1b:ba:05:ca:ba:e3:d2:4e:59:6a:77:
f6:2a:63:98:b3:8b:6f:72:bc:7a:96:96:b4:9f:b0:
42:17:ad:47:59:93:df:19:04:fa:99:43:73:1f:bc:
07:a6:90:33:df:34:21:4e:31:19:dd:52:82:4e:6e:
54:84:06:aa:ff:63:78:d2:02:ba:db:42:0e:cb:0a:
cc:26:64:ec:58:68:a9:6b:3e:f0:f2:43:b2:6e:9f:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:57:7B:30:06:71:14:7E:02:DB:82:36:EC:2A:2E:DF:97:7E:07
X509v3 Authority Key Identifier:
keyid:2C:12:F0:A0:80:F0:21:F2:BA:25:BC:0C:6E:A7:E0:6B:67:AA:D0:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBLwoIDwIfK6JbwMbqfga2eq0F4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8070615f-d26d-42e3-a145-5c7b67b2b64e/0/2C12F0A080F021F2BA25BC0C6EA7E06B67AAD05E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:33:4d:a6:ad:b9:6d:dd:87:c7:3e:2a:74:a6:d5:e1:1c:03:
93:f5:66:d8:72:a3:04:99:96:82:2c:f0:0d:e4:9d:c5:7b:b6:
41:b9:33:02:96:28:37:c1:2e:ec:da:60:bd:d4:3b:a0:92:da:
d3:49:2c:7b:f2:ec:f9:f9:6f:6c:35:5a:23:1b:1f:b1:16:37:
ea:00:c0:e2:2e:9f:83:19:2c:19:4e:93:7d:e7:21:2d:c8:6a:
20:6b:bb:b6:6f:d5:ff:75:d1:9f:9f:7d:81:28:9e:bf:26:70:
e2:51:5e:96:1b:39:f3:9c:8e:31:06:77:7a:70:74:1d:a4:4c:
6f:fe:48:e4:cb:30:ed:bc:5b:9e:3f:86:16:25:95:b0:cd:d2:
5a:28:4a:50:be:de:09:be:95:86:31:67:68:a0:93:60:5c:50:
d3:f5:76:ec:d8:02:54:58:d0:d4:37:a7:d1:33:72:1d:7c:e5:
bd:22:ec:c4:f9:e1:95:57:a3:cd:1a:94:8a:3e:f3:f5:fb:5f:
ad:43:06:02:aa:c9:28:9f:f5:78:07:ee:01:89:00:df:e2:b1:
aa:c7:d3:71:9e:86:95:64:23:13:7b:19:63:ce:c4:6b:09:84:
8d:09:fc:7b:64:3f:84:52:1d:13:f9:a9:59:6c:13:d7:e6:aa:
93:6c:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:59:05 2026 by rpki-client