
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
File: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft (raw, json)
Hash identifier: I/eUQ6xGi26b/eLcPx+5xDUocsHqwYJlAE5w1YEmfOw=
Subject key identifier: AB:A6:EB:12:B8:21:E2:56:22:E5:10:DA:8E:E2:BA:51:E3:A5:D9:2B
Authority key identifier: 79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
Certificate issuer: /CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Certificate serial: 1D67E10BB9BB2806DD022DCDB4DC25BFCB7BD8CF
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
Manifest number: 63
Signing time: Tue 21 Apr 2026 06:20:22 +0000
Manifest this update: Tue 21 Apr 2026 06:15:22 +0000
Manifest next update: Wed 22 Apr 2026 09:21:22 +0000
Files and hashes: 1: 79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl (hash: E7rFkVS2KsHHYrCGuqiHAklbA0obth9dp93A6NE8qXg=)
2: 326130623a346530373a363130333a3a2f34382d3438203d3e20323130363332.roa (hash: R8edTsZwje2HhgGaCzDrUpKv5hszBEq9JO3MDKNHPqg=)
3: 326130623a346530373a363130303a3a2f34302d3430203d3e20323130363332.roa (hash: UaVUawxyo7vEGzTJHFQ6hbv9VSPWBwLtWGhp7ONFPXo=)
4: 326130623a346530373a363130323a3a2f34382d3438203d3e20323130363332.roa (hash: kZt+v+XPycP4DQLvFhNN3zKIerdJLT8fmEhn3Kh8DJ8=)
5: 326130623a346530373a363130313a3a2f34382d3438203d3e20323130363332.roa (hash: IoCPHkitPh6npsPsb3Bqa9FNQf1sEQWU+tTBPtB15HE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 21:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:67:e1:0b:b9:bb:28:06:dd:02:2d:cd:b4:dc:25:bf:cb:7b:d8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79AA12BAD7E2C50278890F2DF9CCE02B88E18484
Validity
Not Before: Apr 21 06:15:22 2026 GMT
Not After : Apr 22 09:21:22 2026 GMT
Subject: CN=ABA6EB12B821E25622E510DA8EE2BA51E3A5D92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:59:b7:ef:18:dd:15:46:66:c7:36:2e:e5:dc:
45:8c:21:fa:8a:9a:37:6a:19:28:8b:1a:cc:a4:74:
38:96:a6:f0:02:dd:43:fd:4b:26:fd:5a:77:17:cd:
e4:1d:4b:32:45:39:7e:f9:f1:7f:9e:ba:77:15:92:
d8:0f:d6:30:19:62:3c:31:c5:8e:01:7a:db:a4:e8:
fa:ec:1c:30:ee:fc:33:a1:53:04:5a:4d:97:b8:4f:
a3:2c:5a:5f:fa:20:6d:07:04:01:73:6c:ad:50:1d:
98:cc:82:00:c6:33:de:9d:14:c0:7b:13:ef:79:d0:
71:5b:32:74:4b:9d:bd:34:ed:2d:74:05:43:64:9e:
2d:16:5f:d0:3f:75:cc:f0:81:b1:96:0d:2d:28:19:
f5:d5:60:65:04:97:b1:b2:3c:2c:ce:04:41:52:71:
40:6e:5c:9a:75:18:44:c2:4f:16:ea:9c:42:75:ac:
02:03:6b:7c:25:2c:30:15:31:83:23:f4:86:68:2d:
b3:b3:f3:be:6c:8a:d9:d7:6d:97:4b:68:73:10:7f:
14:61:b3:32:6a:6c:49:c3:38:93:64:d5:08:9b:76:
20:77:f1:ed:02:a0:f7:b7:92:1c:f4:10:b5:b6:0f:
5d:66:36:7a:ae:27:1d:eb:69:9f:f5:aa:cc:03:fa:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:EB:12:B8:21:E2:56:22:E5:10:DA:8E:E2:BA:51:E3:A5:D9:2B
X509v3 Authority Key Identifier:
keyid:79:AA:12:BA:D7:E2:C5:02:78:89:0F:2D:F9:CC:E0:2B:88:E1:84:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8f169a7a-e043-4337-aeec-24d2ab91f138/1/79AA12BAD7E2C50278890F2DF9CCE02B88E18484.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:eb:57:22:7e:12:04:bf:97:95:a4:c8:1d:82:63:35:66:c6:
61:8d:2c:ab:c4:e0:ad:fa:44:c3:1c:14:70:9a:d6:a7:d6:41:
19:5a:16:36:dc:90:12:bf:59:cb:0e:0e:dc:c3:54:b3:27:cd:
21:4e:21:c2:bb:bd:ba:a6:f9:41:d0:b5:e6:17:0f:48:8d:49:
de:0d:1e:15:e8:8b:0c:b3:d2:df:85:1f:01:b1:68:cd:fe:dc:
7e:98:9f:bf:0c:8e:90:ee:8f:64:db:35:23:14:b2:66:37:45:
92:6a:5a:8b:8c:46:4e:3d:5c:63:32:5f:3e:70:71:21:1b:a2:
f7:13:72:00:68:6f:6f:81:e2:73:7b:2c:14:a0:6e:2d:0b:f1:
20:80:a0:8c:f0:71:bf:5c:ef:2a:18:82:55:0f:00:95:63:2a:
41:44:e2:7e:50:57:6c:18:19:11:95:0f:5e:4a:bb:73:5c:74:
d6:06:25:a5:00:b0:df:38:16:18:b3:26:0d:57:7f:93:13:0d:
dc:ae:d8:b3:b3:77:9c:62:be:07:da:7f:69:ff:6d:d4:d7:d6:
61:5c:bf:09:fa:11:b8:49:9e:23:ce:2e:9a:40:d8:cf:88:fb:
bc:df:60:c7:ba:f1:31:6c:6e:ea:43:01:d6:7d:7c:ba:63:06:
1b:b7:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 13:37:51 2026 by rpki-client