
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier: MFryIFwA68S72ftsgpwbNdC4x/xc0pl2d+scGYrcluU=
Subject key identifier: 72:27:14:E3:EC:11:A0:51:DA:8D:D1:C1:2C:A1:87:56:80:A6:BA:1D
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 47B62A3C2E2DAFADF256EACFFE5AD212D25A7686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number: 0748
Signing time: Wed 04 Nov 2026 12:19:03 +0000
Manifest this update: Wed 04 Nov 2026 12:14:03 +0000
Manifest next update: Thu 05 Nov 2026 16:10:03 +0000
Files and hashes: 1: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: gynzAiIZs2pSvfvh20hqbyxR5tUfGwUrALrw3I8ilrA=)
2: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: YkectCN3PwHXIUFvI6rErHB+GqYj62wKkXppDp93mWA=)
3: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: R6SF9O6E9YPrIRgc7zaf7hxSGxOFZzNzJPknoonE5y8=)
4: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: 5MtBkdNTpZ938xlW09/xBkP2lUiJZGy2AiCo8woEVNw=)
5: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: y0wXpV0FK7p0gj289yuBKhdBMbU7WqcUSNT/1+hV8BA=)
6: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 72O3M08TYSpTDlojnTt+mRlscbLgVOXQCHXBZP39kmI=)
7: 3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa (hash: cAakJn9uvoUMXZcUb5f3QeJYFtOG/tvLTFzKc+z86q8=)
8: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: F98d/FympCBtN9lHMDCUVdUPWLgbnNgcKgQazPb2R2o=)
9: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: N3YBfd28y8iYdxt+Kp1kf5UGnREI4b8dE3gb1+i/k38=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b6:2a:3c:2e:2d:af:ad:f2:56:ea:cf:fe:5a:d2:12:d2:5a:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Nov 4 12:14:03 2026 GMT
Not After : Nov 5 16:10:03 2026 GMT
Subject: CN=722714E3EC11A051DA8DD1C12CA1875680A6BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:4a:c3:e1:49:98:cb:4c:88:8e:81:78:03:
69:9d:f0:a2:2e:d1:b7:67:9c:e3:1c:4a:f2:36:48:
68:d4:da:a9:7b:ac:7a:e5:8c:77:13:ff:1f:39:5c:
47:c3:c8:a3:ae:85:67:c5:dc:e6:07:ee:ed:85:f5:
2f:94:8f:78:a0:d3:9f:6d:b8:52:e5:c7:30:55:cd:
60:ff:bc:db:54:2a:13:a1:6f:fc:e6:0a:74:be:1e:
16:dd:1b:74:6c:fc:5f:02:09:8c:a1:1c:d9:ef:47:
4e:4b:cf:6c:3b:e8:17:e6:b5:02:e0:e5:19:d6:cf:
6e:c7:f3:8f:ec:fc:34:c8:66:69:63:95:73:ce:ca:
33:d7:22:20:57:63:89:7b:e6:70:30:1f:02:25:c5:
f9:ee:4f:ae:f1:b7:f1:e2:24:c0:f9:dd:c8:76:98:
56:b4:b5:df:e3:7f:05:1c:b6:d5:5f:a5:5f:83:7e:
62:31:c9:67:1b:e5:2f:07:e3:fc:d4:34:f6:34:c2:
aa:80:c5:d7:8f:70:96:ae:06:48:d5:68:1c:74:16:
2e:fc:08:04:7a:d2:21:88:3f:45:ca:08:33:4b:40:
7a:70:48:5a:00:67:ab:00:35:5f:80:b6:81:5b:9a:
f0:fa:0d:92:db:1f:32:0a:88:00:8a:d7:34:1a:ab:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:14:E3:EC:11:A0:51:DA:8D:D1:C1:2C:A1:87:56:80:A6:BA:1D
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:e9:9e:ae:8e:54:25:1a:0b:cc:dd:c3:30:8a:e4:41:82:
8f:39:df:87:53:29:b3:af:6e:83:fb:b2:67:14:2a:3e:ae:73:
46:3b:24:4c:d7:9f:b1:b7:08:7d:a9:4f:f7:72:fe:30:3e:9b:
99:c0:03:f7:c4:01:0d:7a:6b:cd:7b:98:96:05:6e:d9:36:03:
fa:6b:68:57:37:6b:bd:1a:ff:fb:e4:d5:9b:cf:81:6f:94:ac:
03:d2:80:95:55:44:83:0c:09:ce:04:cc:7e:69:94:56:a7:b6:
3d:18:e5:57:59:0c:63:d9:6d:3f:c6:e4:7c:75:51:74:73:8f:
07:1c:87:9e:e3:c2:b3:6d:cb:e5:79:29:ae:b8:5f:e4:f3:06:
77:d6:51:41:cd:c0:88:3c:1d:e6:d7:3d:39:5d:29:ab:cf:bd:
4e:3a:e6:85:cb:cc:2a:72:30:44:a3:a2:84:a9:50:48:61:5a:
6b:a5:85:b1:22:a3:51:cc:40:91:0f:49:40:eb:34:5e:f4:48:
87:aa:11:fe:93:52:77:92:63:31:80:c3:4c:00:ae:9d:6d:0e:
96:1e:dd:39:29:14:67:59:5d:5c:65:89:41:74:e8:6b:e3:62:
eb:25:4c:16:1b:cc:07:04:c5:bf:57:78:24:03:ad:92:8c:71:
ac:94:4a:92
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUR7YqPC4tr63yVurP/lrSEtJadoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNjExMDQxMjE0MDNaFw0yNjExMDUxNjEwMDNaMDMxMTAvBgNV
BAMTKDcyMjcxNEUzRUMxMUEwNTFEQThERDFDMTJDQTE4NzU2ODBBNkJBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9UrD4UmYy0yIjoF4A2md8KIu
0bdnnOMcSvI2SGjU2ql7rHrljHcT/x85XEfDyKOuhWfF3OYH7u2F9S+Uj3ig059t
uFLlxzBVzWD/vNtUKhOhb/zmCnS+HhbdG3Rs/F8CCYyhHNnvR05Lz2w76BfmtQLg
5RnWz27H84/s/DTIZmljlXPOyjPXIiBXY4l75nAwHwIlxfnuT67xt/HiJMD53ch2
mFa0td/jfwUcttVfpV+DfmIxyWcb5S8H4/zUNPY0wqqAxdePcJauBkjVaBx0Fi78
CAR60iGIP0XKCDNLQHpwSFoAZ6sANV+AtoFbmvD6DZLbHzIKiACK1zQaq6yLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUcicU4+wRoFHajdHBLKGHVoCmuh0wHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h
NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB
Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Dpnq6OVCUaC8zdwzCK
5EGCjznfh1Mps69ug/uyZxQqPq5zRjskTNefsbcIfalP93L+MD6bmcAD98QBDXpr
zXuYlgVu2TYD+mtoVzdrvRr/++TVm8+Bb5SsA9KAlVVEgwwJzgTMfmmUVqe2PRjl
V1kMY9ltP8bkfHVRdHOPBxyHnuPCs23L5Xkprrhf5PMGd9ZRQc3AiDwd5tc9OV0p
q8+9TjrmhcvMKnIwRKOihKlQSGFaa6WFsSKjUcxAkQ9JQOs0XvRIh6oR/pNSd5Jj
MYDDTACunW0Olh7dOSkUZ1ldXGWJQXToa+Ni6yVMFhvMBwTFv1d4JAOtkoxxrJRK
kg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 00:03:15 2026 by rpki-client