
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json)
Hash identifier: CM0rg/bF4P7bkbWVnyGvTCcMlzU+ZDE3wG+BSvGOjX0=
Subject key identifier: E0:A9:48:88:43:16:99:1B:1E:4C:04:11:D8:D4:2F:5E:B7:14:D2:37
Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19
Certificate serial: 098A49BDE22C2962D1B9AF4FE1D031E575C3BD12
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
Manifest number: 0193
Signing time: Thu 11 Jun 2026 13:58:37 +0000
Manifest this update: Thu 11 Jun 2026 13:53:37 +0000
Manifest next update: Fri 12 Jun 2026 15:13:37 +0000
Files and hashes: 1: 326131343a373538333a663436653a3a2f34382d3438203d3e20323131353735.roa (hash: 4zMeFak+3ClZhwivG2q5oRcVFKqGYFgGU+fXsaRbNAY=)
2: 326131343a373538333a663431313a3a2f34382d3438203d3e20323131353735.roa (hash: T+RdHDe5NeQheGE3D7vM1SaQKENF6nLzJfru8VF2DHI=)
3: 326131343a373538333a663436303a3a2f34342d3438203d3e20323034353339.roa (hash: eK2I8NNfEPTCbHsIoeKMUzU2EbiQp+1aLucAqTV09UA=)
4: 326131343a373538333a663436303a3a2f34342d3438203d3e20323131353735.roa (hash: LMFmuLJ4IgxIQCv2slhgNeKFDMCx6rSWhmkOn3RblbI=)
5: E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer (hash: ttIHeVow2IErbUXmp4n67KjX2H68UmfVMTfPkOmulDw=)
6: ECC2D1AF90663968C0983906E34503A5F531FBA9.cer (hash: 7yhtiP6LYY9iuIZqKiSw4vGWqamY84tAaUqjWikPsq8=)
7: 326131343a373538333a663436303a3a2f34342d3438203d3e20323134373230.roa (hash: 4YEjtMXLVEjj9+5CMQ85BeokEYmpgzJkQtl+GYY10z4=)
8: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: VoOAmQn+5RvevCAgEbfzctlydeTPmhrWeD/RW5LNGGE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8a:49:bd:e2:2c:29:62:d1:b9:af:4f:e1:d0:31:e5:75:c3:bd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19
Validity
Not Before: Jun 11 13:53:37 2026 GMT
Not After : Jun 12 15:13:37 2026 GMT
Subject: CN=E0A948884316991B1E4C0411D8D42F5EB714D237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:75:97:b0:cd:6d:ae:c2:26:5a:cd:a4:30:
72:c7:51:f6:fb:e2:f4:01:e9:34:dc:c3:d3:ae:6c:
c6:a9:dc:dc:50:f3:d7:00:d0:f8:0e:b6:e0:d3:84:
72:92:de:64:88:ca:79:f8:f5:eb:ba:d3:f5:b6:c6:
cc:3e:90:73:cf:6a:71:2a:92:bf:d0:e7:8a:55:c0:
60:8c:7c:f9:6a:52:7e:83:4a:bc:17:6f:95:36:8e:
77:13:98:d3:15:1e:25:5a:06:d9:14:30:28:a5:bc:
1d:fe:18:e1:be:19:a3:da:44:ee:b0:ae:86:1e:9f:
25:ad:35:c8:5f:a3:55:a8:8e:c7:05:8c:6a:c5:99:
bc:12:f7:4c:2f:27:be:00:2d:f3:7b:f0:6b:1d:62:
5b:0f:51:9f:fc:5d:6c:f4:8f:63:45:28:59:9f:de:
8d:8c:b3:75:4f:a4:25:1a:a5:ab:45:1a:82:0f:50:
d0:5f:e3:70:3c:45:8f:3e:c7:2b:a9:06:0a:5e:f5:
50:a8:d3:7d:17:6b:56:0f:8e:46:50:e8:66:ca:45:
a9:55:f0:d7:cd:56:84:44:2c:6a:ee:ae:44:af:06:
a5:79:f2:17:bc:b5:07:e6:92:61:0e:ec:a9:40:56:
db:1d:2c:bb:f4:48:0f:d0:05:c6:e4:a5:57:57:dd:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:48:88:43:16:99:1B:1E:4C:04:11:D8:D4:2F:5E:B7:14:D2:37
X509v3 Authority Key Identifier:
keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:73:5b:47:ec:8d:c1:49:20:3e:b2:75:fc:77:3b:24:c7:f0:
74:23:f3:e1:36:01:79:69:e4:81:ab:52:e5:5f:cc:d3:25:69:
bc:66:7e:bb:62:2b:8a:00:6d:a6:05:f2:6a:51:0c:3a:81:85:
6a:2e:e5:56:f7:0a:b6:46:5f:d0:4d:af:9e:10:69:5d:a6:d0:
b9:42:97:06:a7:30:3a:41:07:07:7f:3d:2d:9e:05:88:9b:ee:
84:e3:b9:0c:f1:15:50:f8:04:3f:00:b4:7a:5c:a6:9e:b4:07:
e7:e4:c7:01:f4:61:4f:3f:6b:77:53:12:19:c1:93:8e:86:2f:
0d:da:f7:62:f5:76:d2:93:f4:95:88:0e:fd:cb:a4:a6:c8:e5:
e0:d1:b9:16:41:cb:17:c0:48:cc:60:e7:72:30:22:8b:8a:e9:
3a:91:10:e5:ff:5a:89:84:8c:33:27:5f:04:6e:33:e7:ae:a1:
8f:d9:07:1a:73:d3:0c:19:c5:c2:14:da:92:1c:0c:a9:30:b3:
c9:70:5d:cc:3d:51:15:9c:8d:d2:13:3a:6a:c6:30:02:64:8c:
33:76:d9:c2:96:3c:27:ed:87:8e:f6:f2:c8:6e:23:b5:a1:3b:
35:58:d0:65:ff:70:1d:65:fc:ec:f9:e2:af:dd:95:63:57:7b:
ac:31:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:31:45 2026 by rpki-client