
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier: N1s3bfJb/glzEiKJNQoTZzEWHAiM9E+2873b6H/6AsM=
Subject key identifier: B4:A3:58:C0:6A:4C:DC:9E:70:4E:1B:90:03:91:CE:C1:21:4A:20:90
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 5044BDC8ED0DF715A2ED0C647DB744CE868F1BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number: 0379
Signing time: Thu 05 Mar 2026 23:05:38 +0000
Manifest this update: Thu 05 Mar 2026 23:00:38 +0000
Manifest next update: Sat 07 Mar 2026 02:35:38 +0000
Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: b5JwG7HW1wE/cvslS2VmX2g9uzXtYSPBKpDW+UtlMN8=)
2: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=)
3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=)
4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 02:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:44:bd:c8:ed:0d:f7:15:a2:ed:0c:64:7d:b7:44:ce:86:8f:1b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Mar 5 23:00:38 2026 GMT
Not After : Mar 7 02:35:38 2026 GMT
Subject: CN=B4A358C06A4CDC9E704E1B900391CEC1214A2090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:0e:0a:d8:8b:5c:4b:74:f4:45:df:a1:25:
87:b5:00:32:f1:b1:99:85:ed:ef:e1:f4:f7:87:b7:
74:80:dd:33:1d:0d:58:2c:fe:52:24:24:9f:06:15:
dd:0a:09:d1:41:20:cb:36:48:bd:50:fd:ea:69:e0:
a5:e7:97:05:fe:7a:3a:ab:2f:1a:de:f6:0f:9e:ea:
f6:5a:58:43:3d:c9:31:85:4f:76:9a:25:d6:a4:17:
51:38:79:ea:cd:f3:95:b4:29:80:af:4d:d0:62:17:
04:fb:df:cd:e9:45:c4:d3:56:87:6b:55:38:ab:7c:
9a:e7:3a:54:ef:59:d4:e2:6e:8d:bd:2c:0c:63:2b:
e5:10:56:8f:2f:41:f3:90:49:8e:3a:73:22:8a:7a:
30:de:7a:35:58:8e:ae:ba:3b:f8:35:e9:53:d9:64:
28:80:33:36:76:b2:86:45:94:16:eb:b0:8d:57:e0:
18:80:71:dc:49:5c:d6:d2:a0:56:54:e9:90:6d:dc:
a8:5a:85:c6:ca:3a:52:7c:e1:e5:7f:0b:2a:c0:47:
20:06:f7:b9:fa:c5:f6:30:c9:74:8a:5c:32:e5:d4:
04:63:af:98:2a:2b:39:56:f0:a7:41:94:9b:5a:b5:
a3:d0:f9:79:bd:95:14:19:39:42:cd:76:b1:a5:5c:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A3:58:C0:6A:4C:DC:9E:70:4E:1B:90:03:91:CE:C1:21:4A:20:90
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:c0:33:1b:a1:0f:6c:43:34:c3:de:12:ec:0a:6b:cc:e1:
96:1a:84:6e:05:76:69:64:56:4d:53:64:f0:98:24:07:35:5c:
4e:ca:24:56:4a:3c:bc:58:8b:fb:ce:a7:58:6a:b7:75:12:6a:
02:7b:05:3f:29:47:2a:9b:63:84:5c:94:72:54:04:e4:56:95:
90:ad:eb:d5:84:80:0f:39:86:a7:32:12:eb:43:28:ee:33:2e:
c0:fb:83:7d:04:03:8a:21:7d:67:de:cb:b4:69:87:62:8f:8e:
cc:3d:3c:0a:b5:9b:e2:72:b4:e7:4f:0a:12:31:0f:46:bf:9b:
b5:60:09:fb:c0:2e:68:78:26:4c:1d:7f:91:8f:06:04:94:2b:
42:2c:d2:c1:c5:37:91:ed:65:b6:26:a9:03:96:f0:8b:de:d7:
01:7d:7c:d1:50:2d:9a:5e:b0:e1:fb:04:46:9b:96:5a:c6:d5:
b1:b3:c0:5c:75:cf:d9:9f:45:4b:c2:9c:ee:35:41:cc:30:65:
0a:c5:9e:d0:6f:03:ae:17:af:8e:e2:71:75:a5:8c:a5:d5:96:
76:bd:0e:be:00:2d:bb:f1:85:87:f9:3a:81:d6:b7:18:c8:46:
21:27:c3:e4:f1:0d:8f:e5:f2:48:85:7f:f3:ad:85:1c:a9:41:
69:48:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 20:20:28 2026 by rpki-client