
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier: nAU+VfujZUCiQNd3Mlop2ChFTEHi6Zd+YlBH4HRnZao=
Subject key identifier: 40:BC:CA:FD:7C:27:CB:E1:99:18:70:99:77:53:9E:C1:17:49:30:92
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 13FFE3A56CCFE0C4D18A8EC89FEA8890AB7425FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number: 05C9
Signing time: Thu 17 Sep 2026 00:20:34 +0000
Manifest this update: Thu 17 Sep 2026 00:15:34 +0000
Manifest next update: Fri 18 Sep 2026 02:07:34 +0000
Files and hashes: 1: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (hash: 8VgwWSsnsM9p/J2+q6Eb6nFU9lWBzTkvoQCsZ4F1sbs=)
2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 4G5/fq7k63IRG4QNpaZmtn/WNNCDv5InPIXiV/lS1EM=)
3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=)
4: 39332e39352e3131332e302f32342d3234203d3e20323135343337.roa (hash: M7lEqE1+KGgF78w8mWdBggax3ZKunAR48q+d2JT/Oyk=)
5: 39332e39352e3131372e302f32342d3234203d3e20313532313739.roa (hash: ji2/MCdooHTpH3XVLgjAWg48dgwREbcRqJCa0SPFvoY=)
6: 39332e39352e3131362e302f32342d3234203d3e2039333034.roa (hash: plCfGSXPfhTajm4cdjMqyYr1YrnQY7w3e6xDMUQOQyY=)
7: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: RxEOrEQDuw8FdSr63g/e7GeuRwx0a/xo6StPeRUp3pQ=)
8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=)
9: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=)
10: 39332e39352e3131342e302f32342d3234203d3e203235313938.roa (hash: 924UCUNRr1o7SXVc+gUKT1SfFkm+pmuiOFGdc7vnnI8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 02:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ff:e3:a5:6c:cf:e0:c4:d1:8a:8e:c8:9f:ea:88:90:ab:74:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 17 00:15:34 2026 GMT
Not After : Sep 18 02:07:34 2026 GMT
Subject: CN=40BCCAFD7C27CBE19918709977539EC117493092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:13:04:67:45:3f:c5:b4:01:b2:eb:70:bf:
bf:b8:80:c3:9c:1b:9a:94:23:71:4b:66:a2:a4:2a:
28:e4:34:12:7d:a4:d0:88:b9:27:b9:c4:4d:ae:68:
cf:a1:8a:0e:ed:8a:79:ac:df:c4:35:ff:76:93:7d:
a2:1a:a4:be:0e:5d:40:44:ef:80:2e:50:fa:c2:85:
24:14:31:2d:32:a0:20:03:10:97:63:5f:93:66:08:
d5:8a:23:c7:43:d5:07:59:a1:95:84:63:17:41:84:
22:ec:d4:4a:e2:97:31:ef:50:a6:97:a4:6e:5c:14:
3c:5b:f2:cb:8c:0d:77:86:fe:dc:ad:8b:02:eb:d2:
ab:af:85:a0:3f:a1:cb:e1:fe:2d:b5:5d:7c:72:52:
07:f1:f6:06:02:e6:3e:ca:f0:00:33:5d:5d:b0:17:
c0:ff:4c:06:25:79:55:12:4d:f5:14:c0:e5:7a:f5:
6c:8a:27:86:b7:65:34:32:fb:39:d9:c2:a8:04:43:
8a:02:27:08:b2:19:97:20:86:5e:bd:81:02:1c:2f:
85:c5:5e:dd:be:9f:bc:a3:d4:27:e0:a8:12:a0:f6:
17:8c:9f:e6:ed:69:a8:77:e8:37:df:4c:cf:9b:78:
76:5c:f9:b5:7a:33:9e:65:c4:1e:12:2c:45:d6:7f:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:CA:FD:7C:27:CB:E1:99:18:70:99:77:53:9E:C1:17:49:30:92
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f9:03:d5:b2:6c:bc:18:20:d5:75:7f:e6:e8:b6:84:d8:cb:
4e:f3:df:02:8c:38:e8:15:a2:c5:dc:a1:fe:bf:03:4d:79:b9:
e3:f6:8c:fe:28:c4:fc:ae:25:57:55:e2:21:f7:a3:20:ed:84:
fe:d8:e2:a5:66:66:85:91:29:d0:09:91:e2:c8:ad:28:2e:53:
d2:02:5a:7b:22:ef:a9:ca:da:4b:4e:ed:00:a8:dd:e6:bf:67:
63:52:f0:ba:f0:f4:88:1e:d0:e8:13:cb:65:2c:ad:c0:45:96:
66:79:49:9e:97:7d:de:6a:e4:f5:ec:d0:09:d6:c9:5e:c1:d8:
7e:68:01:54:da:32:0b:fc:f5:2f:fc:66:2b:02:bf:fe:9a:77:
b4:3c:79:dc:01:b9:84:e2:c0:20:98:ff:4e:56:82:e9:64:2e:
ef:27:e4:e2:0a:99:fe:8b:b9:bc:b4:f0:38:a6:96:37:0b:de:
dd:62:f8:bb:12:04:62:be:47:94:37:0f:27:3a:e2:86:f5:26:
d1:39:3b:00:65:93:5b:37:a6:d1:b0:e4:5e:44:00:c6:e6:5b:
65:b5:33:c5:38:60:a2:0e:1a:cf:bf:c0:e8:e8:4a:22:93:10:
15:ad:22:5d:42:e2:c9:dd:0b:70:10:ce:ea:16:70:da:c1:e3:
99:d4:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:40:54 2026 by rpki-client