
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: E9rVeNvLvI12y6gFVzS0XwBALOxV0UlW7saf6DFW5Ic=
Subject key identifier: BF:1E:5C:18:44:FC:6B:A3:F6:03:CD:23:6E:E7:E8:EA:F8:B8:23:AE
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 0A1A9C0FA72BEDC4C7FB2D8D96E69882A504C296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 02F5
Signing time: Sun 28 Jun 2026 20:41:33 +0000
Manifest this update: Sun 28 Jun 2026 20:36:33 +0000
Manifest next update: Tue 30 Jun 2026 00:26:33 +0000
Files and hashes: 1: AS215248.asa (hash: Xm55WBowrnIjTmXkppi0KmQQ4lxlvFPH8o7ZdE9YhK8=)
2: 3139342e3131372e36392e302f32342d3234203d3e20323030353538.roa (hash: bnShsDW1be2bODK39k9j4f1BlMu3O894jpQkGkz2kLA=)
3: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: 7gGIPAnlG4b/UkUjKnAxgbeLd3KfOqg2CBMhQZ58dWk=)
4: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: ePbF2vyH2L99pKVYNfid/LRmeBkCDC+g6PeSrnBn10Y=)
5: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
6: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: 4ywChVru+Mr51BXc7GfSQJrEjIwczwnAeZX2cm5y+x0=)
7: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: R5Epn5BQnUqfS0avyFJajv46KVwt1XNS+Hn4NVwwElQ=)
8: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
9: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: LW6kn7JmXaDtlgwub/TPDMUxsW78GAEBeOP03pg/4Ko=)
10: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
11: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
12: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: i/cX6lQlTJGwnE6H+YCxQ9GOxa5PQSUkSRvWXrHtbS8=)
13: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
14: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
15: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
16: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: G4G7qpeiXc1dZVsN/BNStkgkB9ctxJY8dVaZnuFV5eA=)
17: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: Gt/gvNKWEvpZiOgSTjOiNmwq6g9bcdEcu0fhoPo4ZiM=)
18: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 2Y7g86EFYmRjYHm/PCJbxHez84M+RXOM0JMrqGLLldg=)
19: 3136372e3130342e35352e302f32342d3234203d3e20323135323936.roa (hash: SV9ucGr+4h+fuaELn2IQUJABWEK0Rjvz/iTGykXuEuY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:26:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1a:9c:0f:a7:2b:ed:c4:c7:fb:2d:8d:96:e6:98:82:a5:04:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jun 28 20:36:33 2026 GMT
Not After : Jun 30 00:26:33 2026 GMT
Subject: CN=BF1E5C1844FC6BA3F603CD236EE7E8EAF8B823AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:48:05:0c:92:b7:8e:fd:21:d3:ea:81:87:
71:4d:a7:ee:4c:8f:9d:75:9d:f4:52:f7:79:b6:c6:
21:7d:22:5f:99:f9:d2:7c:ce:4c:8e:34:7c:9c:2e:
59:19:c6:5d:2d:e0:98:13:d3:13:41:e2:b5:16:29:
07:d9:93:89:62:4b:c8:3e:a7:f2:fa:c2:e3:88:b1:
6c:71:17:aa:55:42:ed:47:5c:59:1c:63:f7:40:8a:
71:8f:98:8c:57:a8:0a:ca:b8:31:b8:f6:b9:43:4e:
e7:b0:6e:b7:2f:d9:2e:f8:54:d9:72:d3:05:90:08:
87:6a:1e:0e:57:02:c5:10:cc:92:07:13:cc:72:3b:
18:4a:fd:27:e6:26:27:a7:21:b2:34:b1:84:c9:c4:
fa:28:a2:43:fd:db:14:56:f5:2b:1a:27:8f:f0:db:
4d:44:ef:60:96:02:75:3f:9e:48:0f:0c:29:95:9d:
26:89:68:9b:25:c9:c1:23:42:80:ef:bd:7c:9d:10:
af:46:e5:69:1f:14:b7:9d:88:43:09:b7:c9:1f:7d:
cf:e3:43:f5:ea:69:0b:1e:2e:a7:fb:e0:9b:6c:2a:
2e:6b:4d:22:7c:4b:b2:6b:40:0a:d0:4b:aa:73:33:
d7:19:d2:09:e9:71:8b:d7:b7:13:ec:1a:1a:d5:71:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:5C:18:44:FC:6B:A3:F6:03:CD:23:6E:E7:E8:EA:F8:B8:23:AE
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:b9:52:46:26:d2:9c:22:f0:33:f7:fc:ab:23:42:28:d5:
a0:0a:0c:52:1b:5d:58:d2:39:d0:de:6e:38:5d:87:f8:52:81:
39:37:e3:60:12:fd:f1:a0:90:46:9d:e4:be:1c:73:bd:7e:46:
30:7e:36:8f:87:85:54:68:ba:63:de:df:24:68:07:ef:23:90:
ad:52:dd:c5:ab:80:33:d0:14:fa:c3:a7:31:f8:c6:a6:da:d8:
75:04:96:b2:2c:f0:01:e0:4f:10:2e:0f:27:82:00:b7:b0:db:
02:4c:20:00:35:c5:89:e9:c7:7d:8f:fb:d5:e5:5d:d3:05:a8:
4a:5f:e9:78:9a:b9:55:84:c3:86:92:80:3c:ab:2f:a3:16:9e:
7c:0c:53:90:d7:0e:4d:b4:13:8b:ce:6a:fe:b0:ca:dc:c6:d9:
39:94:31:4e:58:eb:11:b5:28:53:ed:1d:be:aa:44:3d:12:0e:
a4:e5:7c:97:c3:be:b5:f8:2c:19:e0:65:bd:5d:5e:01:ee:6a:
5a:45:7e:c1:4e:9c:12:70:67:93:ab:4a:0f:9a:8b:fb:18:9a:
03:01:12:5e:3f:c2:b4:49:81:af:41:c8:a2:fb:c9:30:95:f7:
d7:3a:1b:4b:2b:f3:2b:9c:48:28:0e:e2:5e:6c:b3:4f:30:19:
d1:5d:45:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:04 2026 by rpki-client