
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier: Iv1sMZC3C5YCUnAy6rxKrlAB7rwCaq2W1+9ttpez4FM=
Subject key identifier: 3A:7C:9E:FB:EC:5B:A5:1A:66:9A:1F:BB:04:24:D5:63:96:6A:25:3C
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 3DDA95B2B82D7380F19B2A4359AB7EE1F8ED1B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number: 01F2
Signing time: Wed 28 Oct 2026 08:02:36 +0000
Manifest this update: Wed 28 Oct 2026 07:57:36 +0000
Manifest next update: Thu 29 Oct 2026 11:52:36 +0000
Files and hashes: 1: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: hfJ4SibvFwDIroIB4sGwG6yD3Breq9HTjicnMOM55ww=)
2: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
3: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
4: 38372e3235342e31342e302f32342d3234203d3e20323138383632.roa (hash: F1OX6LNWl+YwC+chgvQSQD6NIxsSYKS/34Wqd3CKlgY=)
5: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
6: 38372e3235342e33312e302f32342d3234203d3e20323030303137.roa (hash: lbbXKkkoJ4X5dFgdoGsgrLdnfR7I5el1vS65pf+Zkis=)
7: 38372e3235342e352e302f32342d3234203d3e20323036303932.roa (hash: 5AbdKFmtNdu0I9ZynCaAwms1EqYUPiTBICwx1LtjAT4=)
8: 38372e3235342e32312e302f32342d3234203d3e20323138393131.roa (hash: 7tSYuQ71mqHiPabmM7s3mhhfcknamp56jVy7dHHL490=)
9: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
10: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
11: 38372e3235342e32362e302f32342d3234203d3e20323138383239.roa (hash: E6a3DUIrDtWaQWEAr7GxRUGI6lo4FcU/j93xxkkfpm8=)
12: 38372e3235342e362e302f32332d3234203d3e20383334.roa (hash: tfVvEhgafJFq3DRHglA/EFHAHlZh/KyEJcqOLgxf+hg=)
13: 3231372e32352e31352e302f32342d3234203d3e20323139303735.roa (hash: +dDC3qno9/dDOGrdBbQoDaYYLPHMualjwXdtFrHcKEc=)
14: 3231372e32352e31352e302f32342d3234203d3e20323138393131.roa (hash: wfvFmo8lCxQv3pQXDUXC+GbDCaW6aNhuY3C5NbrP9WA=)
15: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
16: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
17: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
18: 38372e3235342e31312e302f32342d3234203d3e20313437323831.roa (hash: BqBZ+dpze/TrhUpjUL7GvfXJG8nlPAhZLSWDSQtwsrI=)
19: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: OUXJIN5IdrYJD7M9fQb6ri5Wozr8Jiuz28aJGOJfzUw=)
20: 38372e3235342e32382e302f32342d3234203d3e203438303131.roa (hash: 8oJZ/FjkgQU0NuXFdCxfdmf+Mh8lECUVr3u2Hj4Jb0s=)
21: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
22: 3231372e32352e362e302f32332d3234203d3e20383334.roa (hash: kuLwFCmf8Whna0mXwpfLAstA+xJncXgqXwYveSIDWeI=)
23: 38372e3235342e32352e302f32342d3234203d3e20383334.roa (hash: TGOtG3amXx0E1MjepLoFOD14iGF8L8gwbtptYoy5hLo=)
24: 38372e3235342e392e302f32342d3234203d3e203136323736.roa (hash: tdPEjgEB+QuDu3RAdSXHnz830+oRP3X+yknhpXKYbX0=)
25: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
26: 38372e3235342e32302e302f32342d3234203d3e20323138383837.roa (hash: ZhpNPPOoxuBKWgyygAwSStAMQzGmmwb/Gzjd7NA4m2g=)
27: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
28: 3231372e32352e31342e302f32342d3234203d3e20323139303735.roa (hash: PRHelZeaYB0AdVnwbP3lCCm6w0hExVgIIITX5Ej+gHM=)
29: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: 8juIV0dftfDc+Y71BykCuPcZOZufatRRCpbHWIi1myo=)
30: 38372e3235342e342e302f32342d3234203d3e20313532313739.roa (hash: Y+fm5Z1hQ5CX1kAf8N1IWb6MLSFELQii0Oe4LqXPgVI=)
31: 38372e3235342e31352e302f32342d3234203d3e20313532373236.roa (hash: GSSgH83pI/WSimA4p0HnpB9Vc7IOSSfTc+beOvXRhGU=)
32: 38372e3235342e31322e302f32342d3234203d3e20383334.roa (hash: Csmnwo2TPrFnpdtdygd8M5axyO7EMgidxtaGyRO6HZ8=)
33: 3231372e32352e31342e302f32342d3234203d3e20323138393131.roa (hash: 6zBnZAV6U4SxORPivplOWbpDZeUBoKVCeSnCOrEOuro=)
34: 3231372e32352e31342e302f32342d3234203d3e20313938343735.roa (hash: 4/AGSq6kBSxukgG2E7JQaHX1UFWVm9CjEqmLxqxX2LM=)
35: 38372e3235342e31302e302f32342d3234203d3e20383334.roa (hash: oPVr5yXuRhi0bVIVBieieuruFxHEVdzdC7XAeTMZEM8=)
36: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
37: 38372e3235342e31332e302f32342d3234203d3e20323036303932.roa (hash: oUikqYBVi4RcjOhDQmNNaH8TAOGVNq7wtpKIRIIaXQc=)
38: 38372e3235342e32342e302f32342d3234203d3e20323138363235.roa (hash: sTTe5OsbHCgQiAmQMPOzIV1LQbXo98I0ZmLtX2GsdFs=)
39: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
40: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
41: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
42: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
43: 3231372e32352e31332e302f32342d3234203d3e203133333335.roa (hash: io4UFoc1YGnqjZfuSBnWpQH/OPOtN9A1OFdVrMznZWc=)
44: 38372e3235342e32372e302f32342d3234203d3e20323036303932.roa (hash: Xuw3TAANRJRfZ6808E5bRrhDo88u4xKeZ2EmRQyfhRE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:da:95:b2:b8:2d:73:80:f1:9b:2a:43:59:ab:7e:e1:f8:ed:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Oct 28 07:57:36 2026 GMT
Not After : Oct 29 11:52:36 2026 GMT
Subject: CN=3A7C9EFBEC5BA51A669A1FBB0424D563966A253C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:0f:67:86:ce:d6:7d:f8:c7:62:8c:37:3c:
b8:62:91:8f:1d:7d:76:8c:27:7b:31:bd:3e:65:16:
5a:4f:5a:6b:3c:3f:30:d7:00:74:b3:3d:d4:34:38:
8e:e7:a8:cd:d5:33:dc:14:45:9a:b7:11:9f:5b:3f:
d9:21:66:97:4d:b0:96:a7:2b:c7:38:38:9c:c0:f9:
f1:81:ea:df:85:ab:17:a4:27:8c:41:bf:48:6a:7f:
8c:07:85:e5:15:4b:c2:87:8f:29:49:64:db:bb:a2:
b3:7a:77:ad:61:27:78:b2:c5:67:71:32:0c:b6:f0:
70:1d:f0:11:4e:c0:7a:11:84:ae:b8:74:07:5e:e7:
bb:75:73:bd:e6:b3:34:fd:6d:aa:ab:8c:11:a9:33:
06:d8:4d:f8:c2:e4:6d:1b:c7:e0:be:92:dc:e7:43:
ec:ce:79:70:2b:b9:ce:5b:fd:61:01:81:f8:be:e9:
f8:85:88:7b:f9:ec:e8:fc:7e:aa:eb:6a:e9:6b:a1:
68:c2:61:54:ab:74:cf:2c:c4:f5:87:1a:26:84:fd:
4a:43:26:9b:77:7b:2e:dc:b8:98:01:c8:3b:87:25:
db:07:c3:19:4f:c1:ad:d6:82:8a:3a:57:42:57:d8:
94:d4:7d:2d:47:08:fe:4b:de:10:b4:8c:47:a8:f3:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:9E:FB:EC:5B:A5:1A:66:9A:1F:BB:04:24:D5:63:96:6A:25:3C
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f1:a0:f6:90:e7:2f:29:cd:45:2d:93:11:22:5c:aa:fb:c1:
ef:91:bf:d1:24:ed:1b:6c:75:63:e5:58:72:7c:15:31:45:45:
20:4e:b8:0d:6a:93:94:64:1a:5f:39:70:57:ec:a9:00:c1:09:
63:01:16:c3:f5:d8:f0:7d:9e:64:08:c6:df:df:a9:31:6d:1f:
3d:a0:8d:78:85:be:ee:4e:fa:9e:d1:4f:13:e4:34:e5:5b:3a:
90:a1:ee:71:b5:4e:c3:50:1d:18:a8:f4:bf:4b:3e:3f:a6:5c:
58:2a:49:1c:04:60:dd:cb:e7:e6:4f:f3:03:52:82:7a:c9:d7:
63:2c:5f:cf:8b:60:05:02:2d:21:f5:63:89:55:d7:0c:9b:64:
44:f7:b3:40:be:0e:56:67:f7:ab:d3:0f:20:69:24:be:9a:b4:
32:d9:0c:2c:a5:25:e0:80:aa:c3:8f:2c:25:50:9d:ac:5b:e4:
b5:30:aa:ad:8b:1b:e6:47:2b:6f:18:91:5a:96:fe:93:94:8a:
2a:f2:bc:1b:c0:95:04:37:ca:f7:17:af:54:21:18:8c:3f:fe:
c6:0d:f9:ff:9f:c6:9a:8e:57:6c:f5:c0:67:6a:ac:84:a4:44:
9f:c8:d5:26:09:28:4c:15:a4:6e:3e:1c:c9:35:15:22:b2:24:
a8:0c:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:19:30 2026 by rpki-client