
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft (raw, json)
Hash identifier: yM2CcQ5HhOlYspR8aV4/CFsXf1mzxGUv8GREPxV04Mw=
Subject key identifier: 7E:87:DC:C8:79:C7:B6:C1:F3:9F:E4:99:30:6D:CC:FA:A2:3C:76:46
Authority key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8
Certificate issuer: /CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8
Certificate serial: 250103634C1DF85A818B216B0FCE839A5C76C5F6
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
Manifest number: 58
Signing time: Fri 05 Jun 2026 12:57:40 +0000
Manifest this update: Fri 05 Jun 2026 12:52:40 +0000
Manifest next update: Sun 07 Jun 2026 02:37:40 +0000
Files and hashes: 1: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl (hash: eiWr8Gtdpt5QoeNH7ZQiEhBkInBEG8noGVsRPtMuM4Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl
rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:01:03:63:4c:1d:f8:5a:81:8b:21:6b:0f:ce:83:9a:5c:76:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8
Validity
Not Before: Jun 5 12:52:40 2026 GMT
Not After : Jun 7 02:37:40 2026 GMT
Subject: CN=7E87DCC879C7B6C1F39FE499306DCCFAA23C7646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:d3:3d:aa:4d:5a:61:4a:42:4d:bf:63:e7:
b3:ad:2a:f7:81:30:e2:da:8a:4b:dc:a1:10:bc:76:
2b:f0:9f:0f:e8:6d:10:8b:71:b5:ae:b8:53:0e:35:
b5:03:fc:75:00:e5:b5:39:b7:2c:01:4b:a6:d2:40:
f0:e4:9a:cc:26:2e:89:a0:76:73:6b:29:d4:bb:4d:
3f:7f:d8:4b:f3:2b:be:1c:0c:83:2b:94:32:c6:50:
cd:c9:db:3a:cd:72:f8:50:2f:72:f5:25:50:9d:f1:
a1:17:0b:91:8b:54:b4:3d:03:0d:c1:94:ee:37:35:
dd:0a:e2:d0:04:f4:76:55:77:d2:92:14:e3:67:97:
aa:52:28:32:0c:ef:6d:7e:51:6f:f7:56:e3:b3:fe:
41:6f:00:d0:44:bb:8e:48:c5:2b:71:fc:19:85:09:
4e:f7:42:05:ff:45:b1:c4:b3:0e:13:8f:f3:b5:5c:
e6:29:bb:f7:d1:c8:09:92:e7:27:7e:c5:f5:37:54:
78:a2:b8:7c:6a:6e:8f:6e:41:68:9a:11:cf:9a:10:
b9:d5:75:6d:83:af:80:ac:78:b1:27:33:2c:be:4b:
24:26:80:80:52:47:cc:5e:fa:00:62:47:77:23:32:
bb:9a:1b:8d:a4:55:17:36:3b:47:f8:6e:7a:52:ed:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:DC:C8:79:C7:B6:C1:F3:9F:E4:99:30:6D:CC:FA:A2:3C:76:46
X509v3 Authority Key Identifier:
keyid:10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:52:c2:8e:77:71:bf:04:c2:98:3c:45:16:bb:1e:aa:d8:73:
e1:94:63:43:41:c6:c4:a4:b9:dc:75:06:6b:5f:a2:58:67:9d:
a7:7b:50:b5:bf:1d:00:5f:45:80:21:0f:48:67:5d:cb:d0:e9:
5f:4d:2b:66:b0:7f:84:78:e3:05:c7:bd:a9:88:dd:45:96:5c:
89:3f:42:ae:ad:69:71:d7:0c:cc:b0:31:75:10:d1:21:55:0c:
b1:f1:b9:b5:21:ea:c4:db:c3:8d:35:9b:48:33:d5:08:b5:51:
8a:74:18:a7:7e:73:7d:11:50:c9:cd:10:6f:47:c4:40:6b:c9:
c8:56:60:ea:2d:4a:0b:b6:a9:c8:d8:6c:e2:c9:8b:34:48:72:
fc:a5:2c:9a:0d:3b:d8:84:48:b6:b6:0a:d3:e6:24:ae:bc:94:
30:d0:22:d2:61:81:44:9d:ee:b9:ae:2e:6c:51:15:4e:08:f6:
51:3a:0d:7d:bc:28:b8:99:c9:d9:cf:5d:26:86:af:c9:cf:c1:
e8:8f:c1:0e:73:76:c4:f5:b1:79:24:9d:d5:ae:82:97:de:9c:
a0:e9:6d:8f:3c:2d:df:a1:89:9c:97:a6:b0:89:26:2d:85:41:
cc:ec:38:eb:d1:a4:d9:e4:89:46:1c:16:55:6b:9d:7d:6b:a2:
6a:e5:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 03:55:26 2026 by rpki-client