
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json)
Hash identifier: ZAWlcxiIriluObrGVsQUtpX9wyh04S+aYwJ8DrpsAIQ=
Subject key identifier: 66:0E:1D:01:42:98:76:03:95:0F:C2:96:42:5F:B5:0E:0E:ED:3F:4B
Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Certificate serial: 6F66A5666970FDF46EB7CC78033735F3DBE1CDD1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
Manifest number: 01FC
Signing time: Mon 13 Jul 2026 05:43:23 +0000
Manifest this update: Mon 13 Jul 2026 05:38:23 +0000
Manifest next update: Tue 14 Jul 2026 08:04:23 +0000
Files and hashes: 1: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: TQW6ysixu0tP91BwcnDo0gwRpG74gPFiPCid6NcU7fI=)
2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: zPB7I5Zm5tTVFn74uACj7IJ7zTmHWqBzRiNxRU5/9yY=)
3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=)
4: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: T2vbPNBu1i8diGiNc/s9Y6Ib8JHa/2cFKpw3nsYero0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 04:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:66:a5:66:69:70:fd:f4:6e:b7:cc:78:03:37:35:f3:db:e1:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Validity
Not Before: Jul 13 05:38:23 2026 GMT
Not After : Jul 14 08:04:23 2026 GMT
Subject: CN=660E1D0142987603950FC296425FB50E0EED3F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:94:ad:e7:6e:fc:44:df:97:8f:d2:51:6a:
bc:9c:34:52:2d:56:db:4e:dd:e3:aa:14:6a:00:fa:
30:f2:b6:19:d1:f5:0f:a8:b2:87:ad:14:e9:b5:c3:
da:72:87:3e:87:97:32:fd:1d:27:50:74:c1:55:76:
11:34:06:82:74:61:f2:d8:61:89:e4:13:1f:21:10:
5b:f8:e4:c9:7f:f0:c1:99:af:9f:44:75:eb:97:46:
58:02:1f:c8:07:b9:e8:01:73:5d:ee:f0:9e:58:13:
3b:eb:95:a3:60:9c:5c:72:66:a3:40:b3:d7:6e:c3:
8c:b8:7a:0f:56:3d:d2:0c:4d:83:44:8d:ee:79:1d:
26:f6:43:58:25:05:69:81:45:fa:f5:61:57:fd:25:
3b:a9:df:be:90:9c:dd:c4:94:00:b3:36:b1:1c:88:
20:a6:f1:15:8d:56:89:a7:10:f2:bb:44:6c:2f:73:
6c:ee:33:cc:ca:26:2d:b6:9d:cd:7d:fa:64:db:90:
c5:61:80:04:9e:c7:fd:37:05:c2:c3:6b:e1:59:34:
a2:c5:f0:30:f1:32:c9:16:85:88:37:5b:d2:e1:92:
8c:17:cf:d3:08:e0:87:bb:25:cc:73:e0:ec:9a:b2:
34:5e:16:44:ee:31:f2:d5:74:b6:07:5f:78:d7:51:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:1D:01:42:98:76:03:95:0F:C2:96:42:5F:B5:0E:0E:ED:3F:4B
X509v3 Authority Key Identifier:
keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e1:8d:59:5d:3a:bf:cd:33:73:b9:ea:d5:40:29:fe:3d:63:
36:ca:ba:2d:06:e2:36:4c:27:e3:55:0b:af:65:62:43:4c:4c:
e2:aa:b3:37:0e:fc:85:d7:f2:2f:54:ab:1e:07:6b:c8:63:a3:
60:a7:b1:07:c7:9d:96:88:67:5d:62:cf:31:f7:f2:95:66:33:
10:62:e3:1b:c5:61:fa:09:85:58:f8:26:96:1e:0f:49:4b:f5:
18:27:3f:f7:a1:3d:21:87:23:dd:77:23:ca:6b:64:59:78:37:
37:6b:89:85:fe:4e:91:ee:0d:9f:e6:7e:09:74:1d:91:7d:1d:
a9:4f:b3:d9:e1:55:d8:33:4b:6d:24:d9:9d:97:52:4f:9c:64:
a3:0d:40:77:e0:94:84:cd:64:4a:e9:ed:bb:4c:8c:47:3e:be:
cc:c1:f1:dc:2c:9a:74:22:41:bd:6d:35:a1:5c:79:af:03:be:
c9:aa:97:19:73:41:d0:1c:5f:82:22:c7:13:bc:dc:fa:ca:3c:
0b:0a:fa:3d:0f:9e:ca:41:be:4a:3b:34:42:d0:eb:b1:e9:bb:
d2:51:ee:0a:0a:70:d5:08:02:39:60:17:4d:04:21:38:92:c1:
d1:2a:22:43:62:83:99:d0:87:34:16:73:ec:b5:d8:4a:f7:04:
cd:03:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:04:28 2026 by rpki-client