
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
File: D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft (raw, json)
Hash identifier: K9Gcguz8wLR6cQz/mcFvt8m85GihIpIKokmlGLJnst4=
Subject key identifier: D0:77:24:D9:30:6A:89:99:89:9D:9A:8C:55:45:0F:61:27:84:13:AB
Authority key identifier: D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B
Certificate issuer: /CN=D7770473EB8533D901B96CE41EC2543FE56C7B1B
Certificate serial: 5E67C5C9955360A2E1503875E65AD9DE1CE73955
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
Manifest number: 0A
Signing time: Tue 06 Oct 2026 13:37:19 +0000
Manifest this update: Tue 06 Oct 2026 13:32:19 +0000
Manifest next update: Wed 07 Oct 2026 15:59:19 +0000
Files and hashes: 1: 3231362e38362e36392e302f32342d3234203d3e20323031333932.roa (hash: i15hfC4YFDQG4Z9rpiP+uVuh8FN1IQV11dqaS+xgTNQ=)
2: D7770473EB8533D901B96CE41EC2543FE56C7B1B.crl (hash: 1S6Ng2El5SC8PeGrFmRxO8cFMqSFqYPumIfH9jPWeVc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:67:c5:c9:95:53:60:a2:e1:50:38:75:e6:5a:d9:de:1c:e7:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7770473EB8533D901B96CE41EC2543FE56C7B1B
Validity
Not Before: Oct 6 13:32:19 2026 GMT
Not After : Oct 7 15:59:19 2026 GMT
Subject: CN=D07724D9306A8999899D9A8C55450F61278413AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:71:0c:17:7a:1c:b8:d3:06:0d:b3:58:01:
d6:e9:9c:fa:ed:f8:d6:09:3c:a6:04:22:d4:f0:a3:
01:12:df:90:ef:54:84:b2:69:0a:07:9d:90:f4:2e:
49:86:cc:54:a8:fd:ab:10:58:4d:a3:87:54:0a:f4:
b5:50:b6:c5:29:05:ad:93:2f:c1:6f:1d:24:73:09:
2d:44:9d:71:2e:61:2d:a0:d0:98:6f:b5:79:1b:38:
81:83:a2:81:c9:d4:3f:d4:36:e9:42:24:e2:5b:87:
47:15:7d:71:8d:3e:9d:bd:23:08:a4:13:12:86:60:
25:a1:89:29:9a:b5:fb:82:49:86:39:99:1d:17:fc:
40:e3:2e:f7:d9:0c:87:cc:b6:e4:c8:f7:74:9d:a6:
65:62:78:14:99:d5:0c:ee:e2:35:27:70:75:8a:a2:
52:59:20:a5:0b:79:41:db:c7:8b:cb:cf:a6:00:da:
ce:e2:41:65:25:60:28:f2:94:4b:02:f9:dd:41:5c:
62:87:38:93:e7:07:c4:96:8a:fc:69:bd:98:f0:98:
4a:68:29:9f:39:3a:29:40:fa:86:2e:8f:36:2b:31:
7e:68:c7:bb:93:d3:2c:fc:16:96:31:9e:d8:f2:da:
fe:de:90:b8:f6:2c:fd:7c:7c:96:fe:b7:a6:84:a1:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:24:D9:30:6A:89:99:89:9D:9A:8C:55:45:0F:61:27:84:13:AB
X509v3 Authority Key Identifier:
keyid:D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b0:91:cb:dc:79:2e:52:91:bd:af:1b:6c:f8:5f:12:2a:74:
a4:bc:d1:53:ff:8f:65:a4:d1:15:73:08:47:7a:25:7f:8e:eb:
ec:ef:86:e4:15:38:48:f4:23:c4:13:df:bd:38:e1:43:9b:12:
82:58:b9:cf:19:04:b3:a4:ee:79:86:2a:7a:ed:4e:6d:21:b9:
4f:ea:8f:20:13:93:72:27:d5:2e:97:e4:46:68:72:ed:30:43:
5b:48:c6:3c:92:50:e7:db:f5:69:19:9f:44:f1:d5:63:d8:5a:
db:1a:67:b5:97:ea:01:97:28:32:42:bb:3a:ea:c3:e7:92:53:
d8:74:63:af:9a:a1:43:01:17:0d:ed:b6:ea:bc:4a:fd:2e:7d:
f4:4b:c8:d5:7c:3d:e4:d7:40:25:37:b3:23:28:29:76:ab:b9:
81:c9:f9:28:f7:aa:31:6b:fe:47:58:cd:73:e2:65:a7:ad:6e:
39:24:09:59:90:82:4a:74:fa:f7:e1:0d:a4:5e:9f:7f:f8:b4:
42:0c:22:20:66:da:1e:ce:84:8f:0a:c3:6f:41:0d:30:21:d9:
5d:f9:9c:bf:26:c3:61:ea:8b:4e:5f:da:2f:32:5b:c6:5a:69:
eb:55:18:bb:ac:1f:2f:ee:5f:f6:ac:17:bc:a0:b2:37:ed:5d:
bd:3a:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:08 2026 by rpki-client