
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier: mLulzNrvV3drUVooSxGxRB5Fj8GkKgDqgfmDfvK9jPI=
Subject key identifier: 4C:84:74:A8:78:E7:66:7D:56:1C:09:9F:8C:E3:A8:8F:85:AC:4C:51
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial: 23604F981743A7D1EEBCB36F50A755C1E75C3B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number: 0378
Signing time: Thu 05 Mar 2026 05:39:53 +0000
Manifest this update: Thu 05 Mar 2026 05:34:53 +0000
Manifest next update: Fri 06 Mar 2026 07:04:53 +0000
Files and hashes: 1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=)
2: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: 6TKocCsJfXuJ5Y5H+DSKw7ettUwVJz5qHy8EAcMtquY=)
3: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=)
4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 07:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:60:4f:98:17:43:a7:d1:ee:bc:b3:6f:50:a7:55:c1:e7:5c:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Validity
Not Before: Mar 5 05:34:53 2026 GMT
Not After : Mar 6 07:04:53 2026 GMT
Subject: CN=4C8474A878E7667D561C099F8CE3A88F85AC4C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:00:a5:ad:d2:7f:3e:d8:ce:53:90:c8:c9:
7b:d9:4e:1c:17:db:98:38:bd:87:41:99:19:d0:09:
3a:29:30:13:b1:4c:75:c8:c4:51:77:c4:ae:1c:a5:
64:4a:1f:07:b8:a3:b1:49:8e:13:aa:e9:6b:4f:b0:
9f:90:a8:4e:81:05:e6:57:c7:9d:db:15:98:8d:ed:
cd:1f:22:58:68:a9:7a:45:54:e7:0a:1a:e0:6e:a3:
b2:bb:0d:bf:c8:b7:45:0e:3d:ee:0b:48:fd:75:78:
ad:ee:47:cb:96:d5:63:7c:85:da:18:f2:a5:3a:da:
14:20:c4:aa:75:e5:b6:9a:4b:6a:ab:9e:6c:02:14:
eb:b5:73:17:c2:43:cb:68:8a:f8:c3:a5:b3:7b:02:
3a:55:b0:1a:85:5f:2e:da:80:f6:27:9c:15:3a:4d:
5d:a6:00:6d:6b:db:71:be:f1:50:ae:18:3c:7c:c7:
b7:ae:a2:bc:99:fc:22:38:4c:54:64:bd:87:0a:6b:
93:e6:a6:16:79:4b:fc:5c:8c:9c:01:f3:87:c8:e9:
97:d6:b5:64:c5:84:00:54:f6:18:66:23:bf:df:b9:
2e:f7:11:f1:24:58:a9:55:3c:10:fc:4e:52:f8:03:
8e:80:cb:e2:ba:0c:27:11:4b:5d:9f:c0:d5:9d:6c:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:84:74:A8:78:E7:66:7D:56:1C:09:9F:8C:E3:A8:8F:85:AC:4C:51
X509v3 Authority Key Identifier:
keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:4e:a8:d3:d6:83:01:f1:0a:1a:1b:74:df:d6:a6:fb:86:
f8:28:38:b5:0e:71:2a:5a:f5:92:e3:f5:5f:f8:76:6b:cf:01:
b3:01:b1:c4:b5:b3:c2:6c:8c:f9:32:2a:82:4c:90:fc:ef:ed:
cd:9d:f8:0f:7d:36:d0:3f:fe:a6:fd:88:6f:62:93:95:7b:62:
a0:2f:57:6e:a5:1d:13:81:e1:b4:fb:fe:d8:b3:cd:13:ca:d0:
27:28:09:45:71:14:48:17:ef:d8:d0:cb:20:9b:a8:91:67:23:
9a:4b:8a:15:b5:45:b9:bd:c8:21:d1:2c:de:7e:b5:0b:a6:40:
c6:0e:06:37:e3:05:a2:21:2e:80:02:b3:35:bf:dd:34:c3:d7:
16:4b:a3:f3:6a:03:98:39:5b:09:ea:7f:3c:1b:cb:f3:49:e4:
6b:e3:0a:fa:54:98:11:3d:d4:1f:dd:06:97:b2:8f:d2:a9:81:
e5:9a:35:85:35:ec:a5:78:d6:90:11:10:60:35:d8:bf:76:04:
b3:3f:fe:56:a8:0b:63:4a:d4:0c:86:8d:bb:6d:06:f6:f3:a2:
1d:ee:fa:28:83:76:1a:6b:f0:7b:f0:43:e5:78:42:bc:7c:ce:
a6:3f:8d:85:31:2f:d0:8d:c5:2e:70:ea:b5:ac:5d:a4:c9:a2:
96:ef:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 18:07:02 2026 by rpki-client