
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json)
Hash identifier: pUMjXAkNi+chdVqcY15ohknUv1exsXQBxdcOVO619oU=
Subject key identifier: 1D:03:0F:78:D7:E7:69:19:3B:F7:97:EC:83:E7:BE:C5:CC:19:89:2B
Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Certificate serial: 02B9E68A878CB03917E1791E4FEF1E1B36D9890D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
Manifest number: 0612
Signing time: Mon 29 Jun 2026 02:29:53 +0000
Manifest this update: Mon 29 Jun 2026 02:24:53 +0000
Manifest next update: Tue 30 Jun 2026 04:32:53 +0000
Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: IMnniPIY6X5azrPbaU90wKqgUnjw0IdH6XHNG/Yy7Qs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 20:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:b9:e6:8a:87:8c:b0:39:17:e1:79:1e:4f:ef:1e:1b:36:d9:89:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30
Validity
Not Before: Jun 29 02:24:53 2026 GMT
Not After : Jun 30 04:32:53 2026 GMT
Subject: CN=1D030F78D7E769193BF797EC83E7BEC5CC19892B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:0d:46:eb:88:de:1b:a7:da:3b:66:d8:7f:
39:02:9c:27:01:8a:c4:33:d9:e6:5a:cb:3a:0f:46:
1e:40:fc:62:0f:35:6d:a2:2c:c3:c6:1e:46:87:a4:
99:e0:fe:b1:1a:e6:1b:61:11:73:ed:ae:d2:a5:11:
98:43:31:dd:32:d0:cd:b3:03:0d:a7:50:9e:00:09:
c6:de:56:c6:20:1d:c5:87:7f:5b:0f:be:29:90:0c:
bd:66:8e:d8:f7:0f:81:f6:a5:c5:e6:11:5f:36:9f:
10:39:e3:68:b0:e7:b9:06:1e:28:07:56:2e:fd:cc:
b6:d3:7d:a3:f1:c1:fc:db:91:45:67:ff:b9:00:e9:
5c:f7:8c:95:0e:9d:ad:4b:3f:39:7f:18:32:e2:33:
29:16:b1:e1:7f:d6:d0:d3:2f:22:a9:32:fd:c2:36:
02:aa:ae:88:44:6b:2b:dc:d4:58:83:a7:ae:86:88:
94:13:5d:73:6c:c6:28:85:d7:df:25:b5:3c:b3:93:
67:ab:6c:d4:bb:94:fe:ba:ec:23:ea:42:38:55:d4:
54:4d:38:e3:ca:02:c1:65:b8:b4:da:e9:f8:11:ab:
65:80:25:f2:d6:a2:b4:06:4e:a2:6f:e6:84:fb:d8:
99:87:fe:7d:bc:3d:99:75:24:9a:e6:a5:bf:42:1c:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:0F:78:D7:E7:69:19:3B:F7:97:EC:83:E7:BE:C5:CC:19:89:2B
X509v3 Authority Key Identifier:
keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e8:1f:b2:58:b1:f3:9f:b8:ec:32:d6:01:af:04:2f:82:c2:
63:32:d5:2d:86:71:f9:30:d9:16:96:c0:2e:4a:6b:d9:b7:2f:
7a:be:9e:96:5a:85:3f:0d:6b:2b:42:a5:96:1c:dc:0a:fd:8b:
9f:cb:d1:7a:86:9f:87:99:18:24:8f:46:c2:45:ec:d1:f4:9c:
9b:76:cd:28:52:62:b2:9e:a1:68:4a:e5:f0:f0:29:53:b9:a9:
61:25:e3:d1:bd:83:69:a7:3e:5b:69:d6:d8:aa:fd:30:63:b8:
80:da:db:10:c5:9f:2d:a1:14:91:8b:28:41:92:3e:70:df:29:
e8:95:c5:62:94:6d:42:05:56:c6:d3:dc:ad:71:8a:ac:6c:50:
c5:1d:d3:bd:18:a8:46:8e:b0:af:5b:9d:24:e4:4b:39:88:7c:
71:e2:63:20:3e:35:86:1e:18:68:22:5a:ad:99:c4:ea:a8:97:
f0:e0:0f:ca:81:87:44:11:1e:ab:d5:52:56:2b:62:c3:bf:9e:
47:b8:33:20:ab:b2:8e:42:eb:23:83:ab:ad:03:13:a0:35:c1:
8d:61:20:18:2a:c5:39:fb:af:c4:d5:43:37:67:73:e5:a2:12:
74:91:82:f0:39:c0:fe:c8:ba:4b:c6:c4:cb:28:ac:d8:63:5e:
28:6f:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 13:44:16 2026 by rpki-client