
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier: w+9qi5pvbEzgV6VfelRpaTzhYRAYViUsjVYcdVXm89A=
Subject key identifier: AC:A1:8F:78:2A:4C:E1:CA:E0:70:08:D6:78:6C:88:D0:58:D9:28:C6
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial: 5E0637F3EDE072E2512A982CE1672BF156B0A3C0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number: 065C
Signing time: Wed 19 Aug 2026 04:09:58 +0000
Manifest this update: Wed 19 Aug 2026 04:04:58 +0000
Manifest next update: Thu 20 Aug 2026 07:53:58 +0000
Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: nDHBgpRMsY3HhuRMGYN51FeIBXFS7YaYqWmaqY59PwY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 21:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:06:37:f3:ed:e0:72:e2:51:2a:98:2c:e1:67:2b:f1:56:b0:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Validity
Not Before: Aug 19 04:04:58 2026 GMT
Not After : Aug 20 07:53:58 2026 GMT
Subject: CN=ACA18F782A4CE1CAE07008D6786C88D058D928C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:3b:f0:53:6b:ad:e7:98:83:e8:e7:bc:b0:
9e:1b:f2:ca:7a:31:11:75:1b:1a:84:2e:a3:eb:20:
e0:dc:68:33:f3:c5:79:e2:ea:c8:8c:6d:76:44:c6:
7c:87:6a:0b:85:93:2a:26:e3:69:10:11:df:ca:24:
8f:4e:3b:f4:28:e4:5c:af:9e:d7:9f:3a:27:b7:58:
6d:fc:a0:fc:d9:99:77:a5:c4:e6:e2:ee:92:c7:79:
a0:fa:97:ad:09:da:91:d2:42:81:8e:b0:c7:d9:87:
08:f9:9a:09:7a:44:47:d0:34:7c:ed:65:09:69:81:
31:57:2e:bd:78:f9:e2:94:3f:0b:b6:27:c4:0a:a1:
18:f6:3c:5a:44:dc:14:83:18:70:d4:b6:f5:98:98:
48:d2:45:51:4c:3e:75:be:36:11:cd:59:dd:a4:f0:
81:70:be:e9:fd:00:59:e4:9d:22:9f:d7:a2:fa:e0:
90:9c:ed:f6:bd:92:44:a6:4b:96:6a:02:8a:5d:42:
47:64:e8:8e:04:f7:2e:a5:6c:80:26:0b:fe:72:82:
72:09:21:da:85:50:58:ac:74:bb:be:a5:63:82:17:
17:df:01:55:dd:9a:83:28:0a:7a:86:66:40:4b:ad:
2e:4e:83:f9:36:ee:bf:79:ee:6e:0d:9c:1d:69:5e:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:8F:78:2A:4C:E1:CA:E0:70:08:D6:78:6C:88:D0:58:D9:28:C6
X509v3 Authority Key Identifier:
keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:b2:9e:df:43:3e:f3:03:b6:2e:79:59:33:ea:9e:5d:37:
f5:9e:a2:c6:fd:73:bd:90:45:c4:54:da:9c:81:9d:62:db:63:
6a:08:8a:f5:88:fa:e1:d9:88:41:49:a1:f2:fe:3b:f8:f1:20:
d2:0a:f9:21:1e:e4:2a:e4:7e:6c:b7:5c:df:70:2d:6d:d9:92:
ef:6e:2f:aa:eb:42:91:b6:c2:14:3a:d4:59:02:4f:2c:b3:41:
f6:28:a6:98:54:62:bf:34:12:b6:4e:d7:65:94:83:0e:14:5b:
71:9c:2a:6e:1f:81:fc:5c:28:99:d0:34:25:33:59:07:5c:db:
87:12:14:c3:07:25:55:b4:ba:45:2f:db:f1:48:38:01:f6:96:
45:14:75:10:95:c7:df:a4:54:4a:5a:12:f6:2d:eb:b2:b0:e2:
bf:d8:0a:4d:7c:ff:33:3c:06:68:cb:68:d4:7e:17:1b:6a:29:
33:53:0c:29:31:56:e6:8d:4b:78:b7:1f:27:83:b2:c1:92:f5:
88:b2:15:2e:8b:40:e9:21:b1:d6:55:f3:35:34:d0:c6:f2:0b:
19:8a:27:d6:dc:9b:90:f5:fb:18:cd:6a:7b:0f:e3:fe:a8:65:
43:cd:b4:36:8d:c4:01:66:80:4f:ed:84:d3:13:7f:aa:0d:9d:
bc:b3:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:11:04 2026 by rpki-client