
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json)
Hash identifier: bfs7vSfnxmDxFWeCW1hZn8CaypynfzvN3XalJQ4zad0=
Subject key identifier: 71:0B:00:D3:E8:0C:7A:06:15:A6:F1:47:E0:77:FA:68:53:1C:03:8A
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 773269A974751860F986AF57861DAAE30BBA911E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
Manifest number: 0794
Signing time: Thu 10 Sep 2026 06:34:31 +0000
Manifest this update: Thu 10 Sep 2026 06:29:31 +0000
Manifest next update: Fri 11 Sep 2026 08:41:31 +0000
Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: lngtiBzHx3HiYH1R9m8CVwIHFlJZCjK9NhEPVTMSHiU=)
2: 3138352e3231332e3234312e302f32342d3234203d3e203230343733.roa (hash: ME9v7cOeLgqdWL4SWS9m0HsfFEm4m9vPx70KgvsaHKM=)
3: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=)
4: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=)
5: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=)
6: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: uCL1WpQqTZHx28v635AJc2UxBy3JsNUOhCCjsYiSzdI=)
7: 3138352e3231332e3234312e302f32342d3234203d3e20323031393037.roa (hash: H+hJVSb3SoCTrrahZtJtGrpdA3V7alBDYoRJDY20rZ8=)
8: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=)
9: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=)
10: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=)
11: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=)
12: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: S1/Y/6EPQQnfPCOtjeEUzrWHJ84koF95fYG1w/Kcp2o=)
13: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=)
14: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: NGEavlC9krxVQb4oA8xeNjVMdvRiumafje1lIvRB/hg=)
15: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: Msloifrt/kLCe0SjqxgGF92lnUxKU95znivEpNjSmVE=)
16: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=)
17: 3138352e3234342e39352e302f32342d3234203d3e203330303538.roa (hash: 18I/ng9HI5XuObuxE8W3wRTkaWJpr3T1qz3Rt9UUAds=)
18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: Iq7mX+2Gdzh11Cz+eab6E5JpoAS8/V5c+VHbjbSnpR0=)
19: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: iEuXNsbf+xsxf1NL3afxi/eNCMhpHPndZJ3OWTl2z+U=)
20: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=)
21: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:32:69:a9:74:75:18:60:f9:86:af:57:86:1d:aa:e3:0b:ba:91:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 10 06:29:31 2026 GMT
Not After : Sep 11 08:41:31 2026 GMT
Subject: CN=710B00D3E80C7A0615A6F147E077FA68531C038A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:95:16:ec:d9:9e:87:b0:12:13:e0:d0:54:
9d:b2:f2:32:99:6c:56:41:69:af:f8:10:9d:3b:ac:
ea:a5:a6:1e:2c:8a:4e:e6:f4:05:e6:1d:8b:6d:64:
4b:ca:42:b7:40:93:44:34:2f:62:b0:a7:ef:85:15:
49:ae:15:06:67:47:10:4d:cc:df:b6:66:60:b4:4a:
44:e0:6b:ba:f7:83:15:4f:2c:cc:c0:65:2f:41:c0:
4c:42:b4:be:ee:32:f0:e0:4d:63:bd:01:43:40:8b:
c7:08:8f:69:63:69:aa:eb:a2:cb:78:ab:6e:78:c2:
26:0e:19:e4:db:dd:c8:4c:83:7a:6e:53:e3:9b:ef:
56:b6:49:81:aa:81:12:a1:b2:b8:69:77:5c:83:35:
83:fc:d1:b3:d2:aa:fc:c6:20:3d:2b:de:92:f7:cb:
a3:2b:a9:c5:43:d8:7c:ba:7e:ae:84:43:bd:f9:f7:
a7:c5:7a:b0:55:96:4d:9c:1a:e3:23:57:ba:23:85:
3f:6c:ff:74:c1:5d:c9:2c:cb:b3:dc:cd:9a:12:02:
b7:9d:87:9c:14:cb:ef:cd:d2:12:67:26:fe:fd:0a:
a0:f3:18:a1:23:1c:d2:eb:07:54:49:b9:b4:a1:10:
69:ec:a2:1e:73:9b:b6:b6:c2:75:57:81:f1:59:10:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:00:D3:E8:0C:7A:06:15:A6:F1:47:E0:77:FA:68:53:1C:03:8A
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:e3:ec:00:c9:27:30:35:5f:ef:5d:90:a7:e8:5c:b2:2b:
60:d6:b1:28:89:20:90:15:16:88:ae:83:dc:53:f3:ff:c3:2a:
a3:e6:cc:9e:3a:80:9a:5d:45:83:08:9a:73:a8:f0:5e:82:c4:
97:91:97:fd:cc:52:8c:d1:55:ee:47:eb:ef:1a:39:c3:41:01:
f1:8a:a1:b5:4a:93:c8:b3:3e:2d:1c:d1:e5:e1:20:ad:cf:59:
02:a7:a9:e2:15:44:14:a0:42:68:de:d8:38:17:22:f5:ab:5e:
32:ee:44:47:10:e8:a8:65:81:ab:97:f3:85:d6:f1:d3:44:ec:
89:31:26:26:c0:38:f8:c5:b2:8a:32:86:5c:f4:e6:55:44:d2:
cb:ee:17:6e:85:77:a2:98:40:a3:62:66:5e:8a:40:59:3a:84:
04:49:6d:d2:c9:3a:26:f1:ba:b7:f0:f9:b1:c8:a2:5e:11:97:
24:6b:64:c0:59:fb:32:c7:ec:73:1f:8f:c9:ea:16:a8:87:81:
e5:f4:af:a9:f4:7d:be:53:89:02:61:7f:27:88:80:53:ea:4c:
eb:3c:75:cc:fd:e4:d6:6e:a8:4e:85:97:fa:a9:8e:c7:91:4b:
80:d4:c3:08:38:69:c3:1f:6d:47:1b:c0:5d:97:ee:45:2c:fe:
8e:0a:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:09 2026 by rpki-client