
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
File: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft (raw, json)
Hash identifier: CsNzHyBABLP1U/rYFgjc99EYM6T4NHkvX0Lgl3La24M=
Subject key identifier: F5:77:3E:89:09:F1:16:B4:CF:DA:84:C8:55:E4:0F:96:19:75:3C:B0
Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Certificate serial: 06CDB280002D1478C2B13E2681189B5C97726E0C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
Manifest number: 29
Signing time: Mon 17 Aug 2026 09:15:57 +0000
Manifest this update: Mon 17 Aug 2026 09:10:57 +0000
Manifest next update: Tue 18 Aug 2026 12:24:57 +0000
Files and hashes: 1: 5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl (hash: zHso4bgOF1tLh0eYGrf5mZhaNsfF8zGpgm/i+XYOTuM=)
2: 326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (hash: IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=)
3: 326131333a633863313a3131313a3a2f34382d3438203d3e20323135383238.roa (hash: 2lS2H8IBJxOyjnm2BZrwuj7Pk6jZjmGW1zgNbopUg+c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 07:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:cd:b2:80:00:2d:14:78:c2:b1:3e:26:81:18:9b:5c:97:72:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Validity
Not Before: Aug 17 09:10:57 2026 GMT
Not After : Aug 18 12:24:57 2026 GMT
Subject: CN=F5773E8909F116B4CFDA84C855E40F9619753CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:be:45:fa:c5:89:90:16:9f:62:bb:ba:b0:
bc:c8:06:4f:f5:bb:d9:1a:7a:33:a7:56:bf:b5:f5:
fc:97:47:1a:17:c6:8f:4a:70:64:58:7e:0a:71:09:
ad:26:b9:cb:f9:b7:f6:f5:36:9e:6c:a5:cb:03:b8:
3d:de:ae:cc:83:35:d2:84:72:77:1a:f0:71:37:fe:
c0:93:75:14:75:42:73:c7:1b:72:66:40:0a:e5:b8:
1e:e4:ab:2a:7b:94:04:bc:9d:4c:fc:69:33:00:36:
ec:ce:e0:6a:e4:43:05:fe:8a:cc:eb:06:72:c3:1e:
aa:92:f3:84:56:35:ca:d7:dc:39:e8:c7:c5:48:8e:
52:1c:fe:21:3c:11:2d:06:35:4a:b9:64:27:d7:1e:
e7:f8:97:55:46:4a:30:93:c1:10:a1:38:49:88:41:
9f:37:66:46:38:b0:40:da:86:b3:9f:df:df:ec:74:
83:05:be:29:54:e4:05:c3:ad:55:40:d1:ec:85:b0:
0a:2a:ff:8b:31:5c:1f:80:f9:8b:53:bc:ab:62:e2:
96:d6:4e:87:7e:b6:02:e0:5c:04:a2:27:f0:f6:dd:
31:d1:73:ab:1e:1a:ac:a8:14:f7:43:51:4a:a9:3e:
e9:5d:6e:65:d2:3b:81:9b:cb:f3:e5:b5:1b:91:3c:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:77:3E:89:09:F1:16:B4:CF:DA:84:C8:55:E4:0F:96:19:75:3C:B0
X509v3 Authority Key Identifier:
keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8f:0e:e9:ce:70:ec:9b:5c:46:44:63:aa:79:9b:c9:75:eb:
50:9c:79:21:d2:1e:86:12:88:d7:10:27:cc:3e:22:09:56:cb:
0c:14:03:b3:e1:68:b4:5c:6c:08:a2:8a:6c:b7:7d:06:7d:47:
50:ee:c6:2f:bf:7c:86:05:53:97:55:20:49:86:ce:1a:03:51:
7e:f8:5b:ee:8f:00:dc:e8:6c:91:33:9f:da:78:f7:68:9e:c4:
0c:dc:95:ec:e3:02:59:7d:a3:82:03:5e:23:ce:88:54:5a:29:
82:fe:29:8a:22:72:1c:98:30:8d:83:83:41:1c:18:b6:f7:17:
87:e2:87:b5:0d:f7:ee:56:ee:d6:41:8f:a5:25:cf:cb:00:4d:
7d:04:b2:d6:43:fa:c7:3f:d8:17:c0:ac:9f:65:c6:9a:76:1f:
7e:5b:ab:19:f9:aa:5d:b6:3e:e9:25:7d:62:99:18:f7:2a:99:
0e:7e:e2:6a:e8:dc:a2:79:9a:99:ec:4d:1c:67:f7:b5:12:e5:
e1:fd:6a:ad:2c:57:2c:d1:29:0b:61:c2:89:c6:9f:4a:e6:0d:
7e:91:16:17:f1:c6:6c:2a:0c:1b:ba:21:64:18:ca:c7:49:21:
f6:61:1a:70:23:53:23:07:77:b7:39:01:33:25:f8:f2:d2:b4:
12:bd:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:05:14 2026 by rpki-client