
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: gf25DpTLNF/AoK0xeXXwyk4eFXxB/hpCDHHua40dJMQ=
Subject key identifier: 4D:C8:E9:EB:1D:31:7E:84:60:5E:D6:82:D1:E6:E2:20:8E:A9:A2:BD
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 7A758E95588894E8CD2DFC4542F2D71CB19653D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 0390
Signing time: Fri 16 Oct 2026 12:14:05 +0000
Manifest this update: Fri 16 Oct 2026 12:09:05 +0000
Manifest next update: Sat 17 Oct 2026 14:42:05 +0000
Files and hashes: 1: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
2: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
3: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
4: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
5: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
6: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: z+CH+oI+Hp/F381dhXEnc80+9gwH3lVem7Z/rJ0QrxE=)
7: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: 4FcEdfeTo0+Jky2+dtu3oW4JSykidOJrfRq9Wn0jmuU=)
8: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: PSyqDUSSGWFciwSkriMI3jwSQFjheGM8BVR6XqAmftA=)
9: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
10: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
11: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
12: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
13: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
14: AS215248.asa (hash: Ks58Ctz2hRVGrTaVNMmyrZzvbMUZa4toHgyrb8iY6Wc=)
15: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
16: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: +FxF5ga/DcrZOMgziw5lmi5GTuh0BVJJAfLmKy1lyC0=)
17: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
18: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
19: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: hXmtXtl9GXfZkTMFxLpLxRdTsVn4I7OwMy1faULzKXw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 14:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:75:8e:95:58:88:94:e8:cd:2d:fc:45:42:f2:d7:1c:b1:96:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Oct 16 12:09:05 2026 GMT
Not After : Oct 17 14:42:05 2026 GMT
Subject: CN=4DC8E9EB1D317E84605ED682D1E6E2208EA9A2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:d2:ad:41:2e:05:8c:d4:a2:19:67:fa:1e:
46:1c:7f:45:ba:ae:00:be:c2:6c:42:e9:3e:2e:62:
a2:7f:4e:49:bc:3d:13:b8:d5:3d:ee:43:40:26:8d:
01:1e:55:ee:2c:65:fb:f1:6f:2f:ce:23:99:82:04:
f5:b7:5e:c9:7c:23:38:23:f2:5e:ea:b2:bc:af:65:
1f:c6:33:98:15:3c:0f:3f:28:c7:89:83:2f:1e:5a:
33:ca:08:c2:d4:fc:b9:cf:7e:b0:2c:15:54:40:9f:
a6:22:e7:6a:34:8a:f1:e9:ab:bb:c2:16:6f:1f:e3:
9b:8a:11:f2:2c:15:02:e7:10:bb:1d:0f:0e:07:f0:
eb:3f:ca:d4:71:12:f3:3f:8a:66:27:4a:20:03:c1:
18:36:18:ad:c9:5a:e2:3f:9e:9d:54:7b:11:19:f6:
b3:9f:da:67:4c:d0:68:97:8f:9b:3e:2a:55:16:72:
8d:66:f7:c5:24:04:17:f0:5b:d6:44:22:9a:af:43:
fb:4b:af:15:4c:7f:98:f6:44:c2:37:23:be:ce:39:
9f:ce:35:17:c7:45:af:81:cd:92:31:27:e2:66:9a:
a4:03:f0:97:76:9d:ce:79:2b:d8:8e:b5:09:58:23:
50:59:0c:cc:f7:23:6f:24:a4:6a:01:20:9d:25:d5:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C8:E9:EB:1D:31:7E:84:60:5E:D6:82:D1:E6:E2:20:8E:A9:A2:BD
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ee:7f:68:82:bf:e2:18:c2:83:24:fe:20:e4:13:a5:da:84:
5e:1d:83:b2:89:57:38:0d:f1:7f:64:69:1a:62:d9:67:62:8c:
c0:27:17:70:66:40:18:f2:6c:01:df:7f:06:20:51:b9:44:53:
9a:82:c6:a8:94:42:3c:31:1f:6f:10:b6:08:bf:a5:cf:22:08:
f0:12:a6:8a:bf:78:66:02:9d:36:bd:f0:d9:95:24:e6:ca:37:
5e:1a:1b:a1:12:ca:51:a0:a1:e4:c0:fe:1d:c6:bf:a8:b2:40:
6f:f8:b7:6b:b4:d2:83:85:d2:b6:fb:e7:b0:18:34:49:60:6a:
0f:17:8d:6d:91:22:05:ba:22:49:63:bc:49:ad:10:ad:85:14:
4d:ac:bd:88:bb:63:40:2d:7f:39:af:dc:b6:88:b1:66:dd:5f:
31:ca:50:b0:32:3c:0a:62:e6:38:3b:b5:c0:82:ec:4c:1e:56:
2b:be:61:77:04:ad:2d:97:48:d1:36:7e:57:ff:73:d9:ac:e2:
8c:c2:7d:6d:47:1a:22:71:99:f7:e1:3a:a1:a8:db:c2:92:b2:
9e:c8:8f:76:12:73:a0:aa:48:c8:cf:e0:62:38:e3:be:0f:c5:
74:21:a8:fa:20:43:fe:b0:74:4f:ec:5e:78:e8:7d:8f:ee:f0:
95:fe:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:07:28 2026 by rpki-client