
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier: AugrxxZg55jBLHEgobV34UWC2wkdvSWgN6VgmBnm/lU=
Subject key identifier: EE:5D:AB:7F:0A:AB:5F:22:D7:B7:AC:9F:EA:7F:3C:D3:BF:DD:B6:85
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial: 4CEA45BAF3FEDF2E34E97A350C2178453AE3D711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number: 0233
Signing time: Fri 15 May 2026 05:06:47 +0000
Manifest this update: Fri 15 May 2026 05:01:47 +0000
Manifest next update: Sat 16 May 2026 05:40:47 +0000
Files and hashes: 1: 3231332e3135372e3132312e302f32342d3234203d3e203331373135.roa (hash: I5j6fsClsT+fyd0Wi186EVr6Wo5+E40NjyrVgONGkdw=)
2: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: uXrdK0X7/NnmFTn32ldHmEE9aiPk6VWFQcLiW0WKLMQ=)
3: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: YU9Gu8DbwidmuJEj2bOkpyHE/QfDjQi5W4EwB2IqhYg=)
4: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 7naunA9RPIqhccGYvwU0A2JkKI+66+5ozdYj2Wwqfoc=)
5: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: O9XudG5Hna9EdsKz3NaxZpnBC6BtoYf94CzMXezJk5w=)
6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: seYrznt/EXPMYO3L1829ZbJQ4VyIGwcTFpihoLxVAh8=)
7: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: hiuvdGWkDUVa4rSBhYvM7ua/xqxtZdK1NbRIraGMMFQ=)
8: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: QIlDGQAR+BPaqMZSpuzOdDfZmoHzVS/KrbH1O77fni8=)
9: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: g4IGtUFHeDDC8WAjlZEZva8EecSiFWhZuJ5FIzjktM8=)
10: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: XYg9rq7u2qeQohZKrdmx+RfNgyAnLmLulXQ/wUuozA0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ea:45:ba:f3:fe:df:2e:34:e9:7a:35:0c:21:78:45:3a:e3:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
Validity
Not Before: May 15 05:01:47 2026 GMT
Not After : May 16 05:40:47 2026 GMT
Subject: CN=EE5DAB7F0AAB5F22D7B7AC9FEA7F3CD3BFDDB685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:e5:f4:00:fb:e3:38:d6:3a:a6:9a:25:7c:
19:e1:ec:3c:e4:5e:97:ee:ce:6e:49:8d:9d:7c:f7:
9b:b9:d5:fb:1b:d5:06:60:d1:fc:75:70:e3:53:e3:
70:de:0e:21:a3:fc:36:d4:32:4b:d8:df:48:8e:36:
be:b9:c0:14:ec:59:33:d6:9a:b2:eb:bc:ef:66:b6:
c4:85:02:aa:3a:4c:88:8a:76:ca:44:22:0e:ee:3b:
20:6e:4d:81:41:8f:8c:e9:8a:68:56:1a:25:d4:d3:
df:05:69:73:c7:77:53:4f:61:ce:06:28:85:29:f1:
85:fd:e1:2c:76:56:b6:c8:7d:2c:fe:59:a6:41:80:
21:e9:ec:3c:83:11:80:2d:82:cb:ec:80:99:ab:ed:
48:74:94:ba:8a:b9:d8:8c:af:2a:60:22:7f:42:1c:
79:2e:77:93:64:92:d4:59:fc:4f:bf:e3:30:80:4e:
d7:50:6f:7b:65:8a:1d:86:38:62:98:b6:84:92:bc:
b4:44:82:4e:8f:4c:c0:ec:83:ae:1a:8d:ba:5c:e5:
8e:04:85:dd:de:f5:58:10:39:5e:e9:e1:06:4d:b7:
7b:dc:cd:6c:3f:39:cc:11:07:de:2b:ec:bc:18:3e:
65:63:54:92:f7:55:1a:6b:75:90:f6:28:d1:2e:12:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:AB:7F:0A:AB:5F:22:D7:B7:AC:9F:EA:7F:3C:D3:BF:DD:B6:85
X509v3 Authority Key Identifier:
keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:53:07:c3:c3:54:84:28:b2:85:30:d2:a0:39:a7:dd:72:
50:c9:1f:e2:27:e7:a3:1d:db:b4:ff:f8:3f:5b:fb:85:17:06:
80:6a:24:5c:17:42:12:a6:89:36:a5:3f:22:a2:3d:ea:14:57:
de:dc:7c:d6:e0:98:69:58:78:b4:e4:41:10:7b:61:ee:f8:2c:
64:38:ee:24:0b:c8:0c:fd:9a:3c:6b:5b:19:b4:87:d6:41:b9:
30:e8:a1:85:7e:40:69:29:b7:be:2d:f9:3b:03:99:6e:c3:7f:
70:cb:97:fb:13:c5:bb:be:7d:1b:e0:90:3b:39:4e:29:b2:39:
f5:19:da:09:c7:93:fe:8b:a4:9c:e6:c9:8d:ae:86:28:b3:10:
4c:73:78:5a:bd:70:b9:b9:f9:bc:ae:55:7d:04:b3:38:f8:c7:
2f:e1:23:b5:c6:f3:83:16:07:3e:fb:7d:d6:80:07:16:da:bf:
e1:25:cf:d0:f3:c7:de:30:c9:72:a2:88:6b:12:7d:31:a9:53:
3f:a3:c8:c2:22:6c:b2:40:f1:a8:1e:69:43:7f:14:c5:de:0f:
a8:42:ca:3c:e3:05:c0:eb:37:8b:88:f3:33:10:ed:5c:86:eb:
a2:3e:4d:e3:09:dd:66:70:5a:86:bb:0c:18:5b:1e:ed:21:e6:
72:a1:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:14 2026 by rpki-client