
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier: NQaKphFR+gcMevvLOm3ZqLNtjhSfRjj9u+GdOC+08ak=
Subject key identifier: 00:A0:A6:B0:89:0F:0B:2D:20:5A:00:6D:B5:4F:F9:DE:1F:E8:89:9F
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial: 493D3B861385F857589B9A8784D5FD9AB3689D58
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number: 05D2
Signing time: Thu 14 May 2026 16:22:52 +0000
Manifest this update: Thu 14 May 2026 16:17:52 +0000
Manifest next update: Fri 15 May 2026 17:32:52 +0000
Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 1qt8z+t8CLOIHxyxRQM5KavgrxSbdtOZ2mzNKfa5qi8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 17:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3d:3b:86:13:85:f8:57:58:9b:9a:87:84:d5:fd:9a:b3:68:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Validity
Not Before: May 14 16:17:52 2026 GMT
Not After : May 15 17:32:52 2026 GMT
Subject: CN=00A0A6B0890F0B2D205A006DB54FF9DE1FE8899F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:5f:36:79:cf:d5:61:dc:a2:43:d5:48:2c:
e0:41:8b:87:26:cb:8f:45:61:0c:b3:85:34:1d:62:
9d:bd:17:1e:50:5c:ce:72:3d:eb:9c:f9:b8:4f:23:
6b:d2:e8:87:c4:6f:13:f1:61:77:fb:38:05:96:01:
5c:60:a3:76:ac:7c:aa:aa:26:9d:6c:43:f2:0d:af:
77:b1:5e:1e:a7:4b:bd:2b:79:7c:5a:c3:d1:31:a3:
df:1a:36:19:10:e7:26:00:de:fc:98:56:1f:0d:df:
1e:d6:bd:19:23:40:84:7e:f7:36:68:e6:d3:27:7e:
c6:ce:33:7c:54:5d:8d:d5:5d:d4:7b:60:0a:eb:68:
f6:82:10:31:09:cf:d0:7f:a3:d2:07:48:a9:0d:8f:
b0:6b:9e:db:15:b3:ba:bc:de:2c:8a:7f:70:b8:51:
75:6f:cf:15:15:53:ef:04:20:ea:c9:35:a6:e3:de:
80:e1:51:1f:ed:4b:a1:02:d4:73:37:95:a7:7a:85:
2e:fc:04:30:c4:f1:0e:e2:4b:44:23:56:2f:38:82:
4d:43:ad:c6:47:97:71:2b:37:26:64:6f:68:b3:bf:
69:31:7b:a4:3e:86:0c:fe:3e:5f:0b:67:9e:73:30:
a1:50:c7:27:66:1d:08:ab:ad:9b:0e:f2:ff:23:80:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:A6:B0:89:0F:0B:2D:20:5A:00:6D:B5:4F:F9:DE:1F:E8:89:9F
X509v3 Authority Key Identifier:
keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:06:c4:79:d5:5b:37:8f:52:c6:27:9b:5f:75:cb:ea:fa:c8:
a8:bf:97:a4:f2:c2:0a:e6:ae:79:a9:1b:86:71:1f:db:12:71:
87:0f:17:5e:67:4c:91:6c:07:b0:a2:fb:25:d0:d0:69:22:cd:
2c:35:eb:cd:c1:d8:35:dd:98:1f:60:21:f1:97:fe:19:81:53:
bb:f7:ab:45:e7:54:8a:e6:55:b5:bf:3e:bc:b8:20:2c:41:fd:
77:34:e4:19:b9:d9:4f:bd:c4:04:f5:d0:d0:45:0b:ac:fd:fe:
0a:af:e1:e6:ca:02:85:e3:ea:f7:b0:04:de:5f:1f:02:8f:1f:
9a:38:54:75:b4:69:21:9e:74:e1:22:c5:72:82:86:8d:b8:13:
3a:4b:c5:d1:0b:71:f9:c8:6e:55:1a:aa:5a:35:4e:7c:c7:b2:
c7:b6:30:87:60:3a:aa:3c:78:90:e9:49:31:fb:5c:04:5b:c0:
97:bf:f4:8d:4b:31:50:d7:1c:f6:9f:15:1a:4c:dd:d7:f5:fd:
4a:ff:da:f7:50:33:f7:a3:7d:57:58:91:95:13:ec:d6:53:25:
20:04:db:fd:90:7f:d2:bb:1c:01:60:e0:aa:46:0e:1c:92:d1:
15:89:3a:b7:d4:89:15:cc:56:09:0a:eb:d3:cb:05:5c:bf:87:
72:97:cf:3c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUST07hhOF+FdYm5qHhNX9mrNonVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx
RDA0MEEzMDAeFw0yNjA1MTQxNjE3NTJaFw0yNjA1MTUxNzMyNTJaMDMxMTAvBgNV
BAMTKDAwQTBBNkIwODkwRjBCMkQyMDVBMDA2REI1NEZGOURFMUZFODg5OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcV82ec/VYdyiQ9VILOBBi4cm
y49FYQyzhTQdYp29Fx5QXM5yPeuc+bhPI2vS6IfEbxPxYXf7OAWWAVxgo3asfKqq
Jp1sQ/INr3exXh6nS70reXxaw9Exo98aNhkQ5yYA3vyYVh8N3x7WvRkjQIR+9zZo
5tMnfsbOM3xUXY3VXdR7YArraPaCEDEJz9B/o9IHSKkNj7BrntsVs7q83iyKf3C4
UXVvzxUVU+8EIOrJNabj3oDhUR/tS6EC1HM3lad6hS78BDDE8Q7iS0QjVi84gk1D
rcZHl3ErNyZkb2izv2kxe6Q+hgz+Pl8LZ55zMKFQxydmHQirrZsO8v8jgHE3AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUAKCmsIkPCy0gWgBttU/53h/oiZ8wHwYDVR0j
BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2
ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4
MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz
MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPBsR5
1Vs3j1LGJ5tfdcvq+siov5ek8sIK5q55qRuGcR/bEnGHDxdeZ0yRbAewovsl0NBp
Is0sNevNwdg13ZgfYCHxl/4ZgVO796tF51SK5lW1vz68uCAsQf13NOQZudlPvcQE
9dDQRQus/f4Kr+HmygKF4+r3sATeXx8Cjx+aOFR1tGkhnnThIsVygoaNuBM6S8XR
C3H5yG5VGqpaNU58x7LHtjCHYDqqPHiQ6Ukx+1wEW8CXv/SNSzFQ1xz2nxUaTN3X
9f1K/9r3UDP3o31XWJGVE+zWUyUgBNv9kH/SuxwBYOCqRg4cktEViTq31IkVzFYJ
CuvTywVcv4dyl888
-----END CERTIFICATE-----
Generated at Fri May 15 07:37:44 2026 by rpki-client