
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft
File: AD29F7F191997039ACFD9760F915FEE62892E578.mft (raw, json)
Hash identifier: y2z1YaTf/BaqRkkWefCa5neuTTYe38F4WNrYbTlkqOE=
Subject key identifier: BA:4B:EF:7A:E1:88:22:07:B6:91:1E:CC:5E:30:60:18:B2:DE:99:33
Authority key identifier: AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78
Certificate issuer: /CN=AD29F7F191997039ACFD9760F915FEE62892E578
Certificate serial: 3A7A1D39B302A40F71CB2AAD6D2A589FDED29E7F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft
Manifest number: 72
Signing time: Wed 26 Aug 2026 15:41:27 +0000
Manifest this update: Wed 26 Aug 2026 15:36:27 +0000
Manifest next update: Thu 27 Aug 2026 18:29:27 +0000
Files and hashes: 1: 326130613a643638353a3166643a3a2f34382d3438203d3e203230343733.roa (hash: suEMvsRkOdgU7KXcZY6xsLsXfy/ps3v5egW1Mfg9jJg=)
2: 326130613a643638353a3230303a3a2f34382d3438203d3e20313937383137.roa (hash: +Bzn0imBvQ3Dm0XfkE2a2wG1dPY04xOf0M1OUTVWvjc=)
3: 326130613a643638353a3166623a3a2f34382d3438203d3e203230343733.roa (hash: ABe5A3mD6+5sUmTPIKiP8LXgad6xlm2khWtM/7ZQFnQ=)
4: 326130613a643638353a3230313a3a2f34382d3438203d3e20313937383137.roa (hash: EglxgVjZeYL21zAN5f1qTpSdvc9u/IUyk5p/E9eciNM=)
5: 326130613a643638353a3166633a3a2f34382d3438203d3e2038303735.roa (hash: pzk6WrpU95NH3nDY1p6p+h+OtvnL7o8c4WwCtkG1BTk=)
6: 326130613a643638353a3166663a3a2f34382d3438203d3e20323139333332.roa (hash: D74S6x+CX7pIkmyrYc8C0iPdqtxDPmFuGT9pYsyXb5o=)
7: 326130613a643638353a3166653a3a2f34382d3438203d3e20313937383137.roa (hash: TspdqNLxsfL6dp4xdPseIhhfwq7xkWofsgu2VL8cf5s=)
8: 326130613a643638353a3166643a3a2f34382d3438203d3e20323034323131.roa (hash: mRQ9Wvw7RquChlSk4KS6y3F9cazB20zeuVq3yeejZnA=)
9: 326130613a643638353a3165303a3a2f34382d3438203d3e20323034323131.roa (hash: gxxOao4ftafq33QRBG+PpfOKheoCtYzj2f7hrMr47mQ=)
10: 326130613a643638353a3165313a3a2f34382d3438203d3e203230343733.roa (hash: rE1SpPJswTDC0zkT8N3FCsmpMJAK1wSE9lpjiIqQGp8=)
11: AD29F7F191997039ACFD9760F915FEE62892E578.crl (hash: 8o3RVE4Zyc0YW3l+B8ENV8a+sgwMOq8/9HyoeLTi0zc=)
12: 326130613a643638353a3166623a3a2f34382d3438203d3e20313937383137.roa (hash: i3JPYdFiKaoucKD0n63fM055+ZwLCpQhkyb2yOyuTSU=)
13: 326130613a643638353a3165313a3a2f34382d3438203d3e20313937383137.roa (hash: bJOeQxOmMqd6vowOnt17tapfyPa/lGn86y9za8nAofA=)
14: 326130613a643638353a3166643a3a2f34382d3438203d3e20313937383137.roa (hash: mk1+QD98FZCmkzNl/od218+WYX6Y0yx2KqgewbP5fAM=)
15: 326130613a643638353a3166643a3a2f34382d3438203d3e20323139333332.roa (hash: Gnn4/NA/NGNqZlXN1P9CBPUC0f7ywVy+TuLKIHQPkDg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl
rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7a:1d:39:b3:02:a4:0f:71:cb:2a:ad:6d:2a:58:9f:de:d2:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD29F7F191997039ACFD9760F915FEE62892E578
Validity
Not Before: Aug 26 15:36:27 2026 GMT
Not After : Aug 27 18:29:27 2026 GMT
Subject: CN=BA4BEF7AE1882207B6911ECC5E306018B2DE9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:d3:b5:cb:65:3e:ef:56:21:dd:e0:3a:c6:
f5:50:e4:38:e6:69:b4:3d:47:c3:27:24:90:96:fd:
1e:37:2a:a4:33:ae:52:c1:67:35:e1:64:ee:e0:e2:
ab:5f:80:06:10:9e:62:9f:55:65:17:c0:fe:89:59:
15:c0:06:cd:d2:e8:e3:f5:e0:bc:90:3e:e2:88:b6:
e5:08:cf:b9:1c:6c:ec:79:38:23:62:f6:66:b3:03:
d0:fe:25:7f:a5:93:b8:87:9e:da:2a:b7:0b:b2:34:
32:6b:4a:da:43:5e:22:bf:5e:c3:d6:d1:b0:5a:98:
4f:a7:a0:65:7f:ea:d0:85:11:0c:02:2b:f8:03:49:
72:35:09:5f:29:e1:88:f0:cb:c6:da:0e:6a:4a:cd:
b0:ef:2e:71:cb:ea:91:08:e6:50:be:fe:ff:93:65:
2a:74:95:b2:89:c0:d5:2e:a6:a8:ad:2e:4f:30:13:
47:56:85:56:c7:3b:29:ab:36:16:0a:2d:58:40:39:
95:68:9e:19:e2:3a:d5:10:1c:93:34:39:72:54:24:
1d:08:33:0c:62:a3:c9:aa:8f:c7:70:f2:ae:a1:c4:
6f:1f:9e:b1:54:39:a5:94:5e:8d:10:3a:6b:aa:c9:
a7:4a:f9:b3:d6:b0:e3:9b:7e:e6:13:dd:84:cb:92:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:EF:7A:E1:88:22:07:B6:91:1E:CC:5E:30:60:18:B2:DE:99:33
X509v3 Authority Key Identifier:
keyid:AD:29:F7:F1:91:99:70:39:AC:FD:97:60:F9:15:FE:E6:28:92:E5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/AD29F7F191997039ACFD9760F915FEE62892E578.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2550caa-e392-4848-92fb-a3d5828e3695/1/AD29F7F191997039ACFD9760F915FEE62892E578.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:c7:9f:94:22:54:2f:02:b7:ec:d7:51:9e:13:84:31:03:
b2:67:51:4d:7e:5b:ab:59:ee:96:3c:30:19:ef:64:b9:82:fb:
20:81:9d:68:50:75:9d:84:f5:2b:fd:0a:f1:0b:58:f4:3e:1b:
5b:20:4c:85:1f:dd:00:96:98:cf:44:a6:4f:5b:43:92:c9:6e:
c0:ae:bf:0c:23:b4:d4:55:03:41:ae:b7:c9:37:61:b5:20:0e:
0a:be:a5:2b:14:88:b3:53:10:19:82:17:1b:9a:a8:72:92:55:
71:36:5c:01:e5:2f:54:05:cf:8d:28:b2:c2:5a:ea:06:2b:90:
08:68:be:aa:9e:ad:e7:4e:d8:69:81:0b:ba:0f:60:da:cc:14:
66:7f:b8:65:15:94:af:14:9d:32:9d:46:ac:cc:72:ec:02:6d:
ca:8d:76:43:19:05:68:f2:36:8e:d7:7d:c7:39:8d:df:19:7f:
bf:dd:a6:b5:4b:e3:bb:0b:96:42:ce:db:79:05:5c:79:71:b2:
ca:a8:5d:47:50:4d:1d:06:bd:5f:25:aa:f0:6c:cc:05:7e:be:
b6:07:7c:7e:95:45:b4:92:31:14:f1:89:62:6e:32:5f:17:ce:
3d:df:00:6e:37:51:86:e5:cf:31:b0:f0:08:1c:5c:1d:45:2d:
54:cf:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:28:00 2026 by rpki-client