
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier: paRFUDEcPo9nH6zUQDyS2Q9Q1TJfQXbFVDy05uMQhNs=
Subject key identifier: 32:DD:93:43:79:62:75:2A:99:BE:0E:C0:42:6F:3C:6B:72:7E:1F:52
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial: 28D5DA8374CECCE74D794862F83FBE83D2841229
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number: 0490
Signing time: Tue 27 Oct 2026 09:00:56 +0000
Manifest this update: Tue 27 Oct 2026 08:55:56 +0000
Manifest next update: Wed 28 Oct 2026 11:47:56 +0000
Files and hashes: 1: 326131343a373538313a643630303a3a2f34302d3430203d3e20313531363630.roa (hash: jpXfTb+KklgwI1bE6gc3LhYNvDTBoCVcWcWoyRdLs10=)
2: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
4: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
7: 326131343a373538313a643530303a3a2f34302d3430203d3e20313531363630.roa (hash: SusIlM5PXddnSUL6Cx9YM0CLkPPxyDOatE0KFrN1v5w=)
8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
9: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: YASUyUWqG3DBoMcAep9oiJeoB5L/6emN5tvNxbDS168=)
10: 326131343a373538313a643430303a3a2f34302d3430203d3e20313531363630.roa (hash: 0AwAEanklKkVfpMZ0UBVRSpRAdbMemkORRhs15qJVmk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d5:da:83:74:ce:cc:e7:4d:79:48:62:f8:3f:be:83:d2:84:12:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Validity
Not Before: Oct 27 08:55:56 2026 GMT
Not After : Oct 28 11:47:56 2026 GMT
Subject: CN=32DD93437962752A99BE0EC0426F3C6B727E1F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:df:53:67:51:57:1d:6f:a6:09:1b:f8:a1:
10:be:6d:c2:66:4b:31:9a:86:1a:ee:43:6c:49:c6:
de:dd:10:65:1f:f6:09:cc:38:c1:7f:06:ff:d9:88:
a8:b3:cd:f4:95:a4:0e:33:60:ec:7b:05:ee:c4:78:
1a:30:43:2c:19:ce:3a:31:26:91:e0:5c:5d:b5:8f:
d7:05:44:bb:fe:f8:5c:09:06:f0:c0:82:88:d4:c3:
4d:97:3c:62:0b:cf:23:9d:b0:03:a8:81:c2:ab:84:
96:60:88:d9:48:65:80:97:89:63:81:79:dd:54:9e:
0a:04:e6:f0:4e:3a:4f:f7:71:e0:35:39:a9:e0:e9:
bd:35:5a:59:d7:23:c7:d2:c7:9b:e0:c3:0c:d3:a0:
45:38:49:70:2d:73:96:29:6d:dd:53:41:21:31:29:
cd:60:41:f9:f4:2e:48:49:c4:41:ec:bd:a4:cb:6b:
e9:47:cf:4d:00:67:e8:cd:2a:9e:5a:38:d3:a4:e0:
7a:42:77:92:32:3e:ea:8a:c2:91:af:bd:ed:12:80:
60:8b:1d:62:d4:59:68:52:36:81:08:67:d6:7a:ac:
91:8c:b5:6f:c7:e8:ef:99:52:2b:c0:04:af:f9:52:
25:89:67:e8:3c:ed:48:96:3c:c3:c8:96:c9:76:57:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:93:43:79:62:75:2A:99:BE:0E:C0:42:6F:3C:6B:72:7E:1F:52
X509v3 Authority Key Identifier:
keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3e:70:c9:da:87:a2:61:9a:8b:61:83:54:2b:1b:ac:76:d2:
c4:61:92:a1:ee:c2:6c:28:76:9d:38:5a:a6:50:7c:e3:fc:12:
41:4f:38:6c:76:2a:16:11:94:38:7c:99:16:09:70:fb:f6:c0:
bc:53:d2:6f:a2:79:36:aa:f3:4e:5c:fd:e0:d4:11:2c:2b:be:
9d:5d:f8:3a:45:86:78:d9:ff:35:ae:52:97:8e:8f:ba:ed:95:
74:2a:be:93:a6:1d:67:e2:10:5d:bc:26:95:37:b0:3f:79:09:
f2:e1:a4:4a:f9:4a:34:83:98:9a:ba:35:f0:0c:3b:02:78:7f:
97:a7:73:f2:8b:52:7c:63:c6:95:46:a5:e2:a9:5c:56:02:37:
04:35:a6:7d:18:ea:ca:f6:94:25:3a:5d:f4:b4:30:13:92:af:
35:60:1b:7f:8f:ab:09:35:a9:86:81:c7:15:72:b6:0e:cc:f3:
c7:43:29:09:bd:70:f0:81:4c:29:f6:36:cc:f2:c6:1a:5c:05:
06:f4:5b:e9:22:65:89:2c:55:66:32:c8:27:47:f0:da:72:47:
67:b5:79:9d:c5:e8:fa:c4:ec:bd:e4:59:bd:b7:7a:55:8c:6d:
0e:4f:21:37:7a:59:93:c9:d3:25:76:0a:9b:f7:87:53:af:07:
36:10:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:32 2026 by rpki-client