
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: ykxWFAG/wBWN/2eN5Kh/a1UToXU0SC1NCo1ndVTG+ok=
Subject key identifier: 72:EC:50:E6:0C:EA:CA:A1:F5:69:F1:90:DC:3F:D3:4A:95:0F:6D:CD
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 22CAB235CEA1C50B647D088DA769D7934D0833AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: 0182
Signing time: Wed 03 Jun 2026 14:07:41 +0000
Manifest this update: Wed 03 Jun 2026 14:02:41 +0000
Manifest next update: Thu 04 Jun 2026 17:23:41 +0000
Files and hashes: 1: 3138352e3139302e3232382e302f32332d3234203d3e203534323532.roa (hash: sZFQBZdBZHG+LxDLkg7xE6HoKkP9FywXWpCF+8QUNCA=)
2: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: j0k17JKnpbWk2+W7IrKo6n1KhEvDoYQRg/dGE17/17o=)
3: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
4: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=)
5: 3138352e3139302e3232382e302f32332d3234203d3e203634323637.roa (hash: 2kT+9B/A73HgiDRsVM67yiwhxTHl0CNzJa5JlwqD97w=)
6: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
7: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
8: 38302e38332e3138382e302f32322d3234203d3e20323039323432.roa (hash: wR1ots0KV1BStFiGqKk2l3iZgyPIrhhcn8rzZHOEx3E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:ca:b2:35:ce:a1:c5:0b:64:7d:08:8d:a7:69:d7:93:4d:08:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Jun 3 14:02:41 2026 GMT
Not After : Jun 4 17:23:41 2026 GMT
Subject: CN=72EC50E60CEACAA1F569F190DC3FD34A950F6DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:f0:9e:46:e7:fa:b4:7f:0e:a9:cd:99:4f:
59:00:88:d7:f8:fe:d1:54:14:ec:9a:d1:34:12:66:
18:67:76:ad:05:10:68:d8:60:34:56:66:ed:c8:71:
9d:9d:ee:5d:6f:b3:95:8c:9b:1d:25:3e:2d:08:59:
c8:3e:4f:4e:50:18:12:30:d8:64:d0:4a:04:33:06:
a1:83:da:63:24:f9:ca:f0:a7:69:07:09:b8:b3:61:
e1:e7:29:79:c4:0d:76:1e:68:6d:4f:bf:3b:26:30:
f2:84:02:93:c9:d7:27:4c:87:e4:fc:3c:f2:95:f5:
da:5c:36:29:be:dc:90:2d:6d:fc:a9:81:d4:67:8a:
90:ee:41:f2:26:f2:60:b2:a6:c2:9d:9b:73:9d:ff:
c2:82:bb:7a:6c:1e:37:8f:46:d0:01:ff:e2:fb:f6:
e7:7c:80:77:34:7b:c3:c5:f1:0e:2d:ad:31:41:25:
4f:8a:0e:0d:29:a1:a5:93:e9:4e:19:b1:d9:1f:3c:
ae:e2:05:d4:a3:ab:ee:32:b7:7c:aa:41:b4:ff:66:
c4:2c:f4:97:33:1c:df:11:bc:ab:67:39:27:81:5f:
48:1a:81:76:74:a4:5e:53:33:1a:a1:70:ef:1b:c7:
80:55:d3:9e:0a:5a:97:53:60:70:fe:df:15:4e:e5:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:50:E6:0C:EA:CA:A1:F5:69:F1:90:DC:3F:D3:4A:95:0F:6D:CD
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:b5:bb:5d:5c:5d:0d:83:1d:48:7f:e7:85:9f:be:0c:89:
9d:a3:ee:98:ec:0a:cb:4f:36:2b:05:03:18:4e:fa:87:f7:97:
c2:23:3a:57:b5:4f:4f:2b:54:49:da:9e:4e:f9:a6:9e:d7:ae:
f7:9f:66:e2:9e:b6:81:e8:31:81:aa:07:ea:f4:d5:2e:6f:4b:
3c:ed:a5:19:2a:ac:a4:91:83:6e:71:ae:c3:b9:74:6c:b1:d2:
7c:a5:ca:5d:ef:49:bb:8b:97:b4:a3:37:b0:00:f4:35:9a:9a:
3a:ef:69:80:da:e3:74:ba:f4:cf:a2:fc:4b:c2:f4:ad:cc:91:
b8:ed:d7:48:4e:22:50:8d:d8:6b:4e:3c:e1:9d:dd:42:91:43:
73:9a:5e:21:0d:e9:af:ba:c8:c2:e4:c7:b9:7f:cf:3a:9c:bb:
84:46:3c:25:84:7c:f7:b2:1a:1f:91:38:2c:d7:f3:a5:59:34:
e4:b4:a5:4d:04:d3:2c:70:13:ab:d5:ca:62:16:37:26:44:a5:
76:7c:8c:a4:c8:10:47:0e:de:bf:4a:8f:28:17:f0:30:6f:8a:
9e:29:1a:ca:92:50:79:e8:9a:45:9c:aa:67:fe:24:80:c6:3e:
e4:39:cd:09:6e:b6:9b:db:c7:e5:77:7f:c0:e2:d0:a8:81:e3:
aa:8d:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 00:05:26 2026 by rpki-client