
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json)
Hash identifier: pdnee5QcZ0nKtu2vLuNxxltf3h3FMteqRzRkSdtwNpo=
Subject key identifier: 92:BF:CA:74:31:DD:4C:04:8A:03:76:33:6F:48:91:B4:60:74:55:FF
Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Certificate serial: 3167DEA43072DA11DAA7DD5B9FDB8B3D2AF64222
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
Manifest number: 27
Signing time: Sat 07 Mar 2026 07:10:22 +0000
Manifest this update: Sat 07 Mar 2026 07:05:22 +0000
Manifest next update: Sun 08 Mar 2026 08:04:22 +0000
Files and hashes: 1: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=)
2: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: G/nOuiTiD/ZStJrTi5HEpxJn70wm2dHi34175Rlc/N0=)
3: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=)
4: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=)
5: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 16:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:67:de:a4:30:72:da:11:da:a7:dd:5b:9f:db:8b:3d:2a:f6:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Validity
Not Before: Mar 7 07:05:22 2026 GMT
Not After : Mar 8 08:04:22 2026 GMT
Subject: CN=92BFCA7431DD4C048A0376336F4891B4607455FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1b:5a:dc:9e:63:af:7b:ac:0c:38:c4:0a:0d:
3f:f5:84:0d:2f:5f:d4:7a:7f:c3:9d:f2:f9:79:11:
34:e2:3a:47:31:b0:2b:63:12:df:f7:fe:c0:bd:cb:
56:1e:cf:95:e0:71:cf:6a:9c:46:a3:ca:f9:ad:83:
f7:98:2d:4a:ee:18:5c:f0:c5:ce:fa:31:8a:e1:44:
47:a1:ec:5a:dd:d6:1e:19:a9:0c:18:ff:ab:55:b1:
25:10:1f:ee:cb:56:6f:f0:89:90:05:65:e8:6a:d2:
81:cf:77:6f:99:de:16:e4:ab:82:c4:55:bf:95:0e:
04:db:3e:4f:96:4a:a2:40:0b:f5:b1:76:c1:08:72:
25:41:58:08:45:ed:6a:59:ac:d0:4e:cf:6b:aa:e3:
c8:51:05:bc:cf:fb:65:f3:66:4e:e7:11:16:93:59:
d2:b5:92:f7:ea:ed:31:af:25:7f:c3:f7:09:41:1d:
5e:e4:ce:48:bd:ff:e6:db:e7:3f:5c:7b:72:cc:15:
19:9a:5e:ac:4d:ac:fb:8f:89:57:d3:01:8f:b5:2b:
71:0a:21:f5:aa:44:a6:90:10:3b:4e:a1:75:1c:5e:
02:bb:b1:9c:0c:ba:61:b8:93:3e:0d:66:15:c0:45:
c7:fa:e1:aa:7c:f5:32:93:1f:2e:b7:5a:c6:56:71:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:CA:74:31:DD:4C:04:8A:03:76:33:6F:48:91:B4:60:74:55:FF
X509v3 Authority Key Identifier:
keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:06:0c:d6:28:14:bd:cb:33:ff:8b:d0:98:0a:68:8e:ec:b9:
07:e2:1a:93:96:1a:df:0e:ca:7d:86:6a:07:07:d9:66:10:ea:
de:6b:91:ef:08:a7:f3:52:6a:a5:f0:9a:ae:3f:3f:eb:63:27:
56:66:73:9e:8a:2b:9e:bc:aa:a9:f4:76:b5:2f:40:65:1f:f7:
7b:27:3b:a2:69:7d:c8:33:51:d7:66:df:0c:6d:c8:3f:a3:61:
3c:74:a7:9b:a8:7c:9e:63:41:86:1e:34:5d:87:66:4a:71:51:
71:70:d5:d7:23:64:e0:42:e5:61:7d:25:c9:34:f3:2c:2d:0d:
89:1d:3f:57:01:fb:04:bb:98:cd:cd:39:75:ff:f1:e2:bd:0e:
ba:f3:09:69:8b:54:c6:45:09:81:cf:7c:4f:8d:5b:fe:82:b1:
1d:32:4e:80:c2:a8:0d:84:5e:7f:8b:12:6a:8d:a7:26:8d:d4:
fd:48:49:9f:8d:14:cf:8e:d8:9e:eb:f1:da:3b:b4:71:69:41:
ec:10:d5:14:a9:6e:41:e5:1f:c5:a1:04:8d:57:4a:42:95:76:
99:1b:a1:ad:0e:2b:4b:5b:33:f6:ed:5b:f7:9e:d8:4d:18:1b:
60:63:11:6f:92:1e:6e:47:9e:f6:e9:49:ed:2a:d7:67:6d:f7:
66:5c:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 09:35:33 2026 by rpki-client