
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier: Fc1c9N4UmVLhqht/XS1jU1229yq0hOuogBhT+5FuxI4=
Subject key identifier: 5E:D8:51:5F:12:6B:3C:D1:4A:BF:99:3A:B1:83:D9:93:7C:1C:90:75
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 477565F4345F9B4D6BB66191C1563472B45829CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number: 0131
Signing time: Mon 20 Jul 2026 22:50:08 +0000
Manifest this update: Mon 20 Jul 2026 22:45:08 +0000
Manifest next update: Wed 22 Jul 2026 02:49:08 +0000
Files and hashes: 1: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
2: 38372e3235342e32362e302f32332d3234203d3e20383334.roa (hash: BuP+f963iMyPecbwlN2GWTfpsJgkISywaFBeNCGmp5M=)
3: 3231372e32352e31352e302f32342d3234203d3e2039333138.roa (hash: R5MZ0SUrJW4CLZizJcr1R/s4uU+VevPvUalEFyfnK94=)
4: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
5: 38372e3235342e31322e302f32332d3234203d3e20383334.roa (hash: tYrkGJWiQCuECp68SDxP1zan/szsBNIKNYHcWzm+neA=)
6: 38372e3235342e33302e302f32342d3234203d3e20343032323135.roa (hash: aBTczmsq8IN60Au7OMn37bNpU6i4lBJqwVookSPCJuw=)
7: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: 8dkRhViDL6svksS7wszcUnYLTFZf0MLMOb3PDwzqRgU=)
8: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: gjwc9h/2uT/xgjT9mAFgFfWLI11DzffJneGhFg53qT4=)
9: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
10: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
11: 3231372e32352e352e302f32342d3234203d3e20313532363036.roa (hash: GTx2ecxjIU1Obn0tq0ZnUe94Y1jEkKYXqzAsor0gkEw=)
12: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
13: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
14: 3231372e32352e362e302f32342d3234203d3e20313937313733.roa (hash: kYFhpIFB7sQ4plsLv55NXEH2ur4uD2Dvnnf/Bn8wlhY=)
15: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
16: 3231372e32352e322e302f32342d3234203d3e20313337313738.roa (hash: U00AwvGQuiC9d8eQqZLrEGpku+90mUPwp8I3u+18jK8=)
17: 3231372e32352e372e302f32342d3234203d3e20383334.roa (hash: E7YJ5DTD2yRF0BHGNuEBNEYqAZ0elyP0EYfo+7qxNLU=)
18: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
19: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
20: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
21: 38372e3235342e392e302f32342d3234203d3e20383334.roa (hash: 9xNWK0CP8AKiSnG1dUeeFmXs6klwdHgCE4UZ1NbhInI=)
22: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
23: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
24: 38372e3235342e33302e302f32342d3234203d3e20313339363432.roa (hash: PildaL2G/1Iz0WikL3EaHgm4Yqx1DlYaCkSTihB5LTA=)
25: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
26: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
27: 38372e3235342e32302e302f32332d3234203d3e20383334.roa (hash: JNmHzwHPRq7qlddj0jcOBGMR8vn3SIVE2cJH7b/pCQQ=)
28: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
29: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
30: 38372e3235342e32342e302f32342d3234203d3e20383334.roa (hash: 3heYW94siEFBzrT3gihXCI5Vho56FAEmPFruRGdpNo8=)
31: 3231372e32352e352e302f32342d3234203d3e20343032323135.roa (hash: N49knYnRcEAQkSTBfiK8BTZ+ks+ilNMO1EqZNeNi9VI=)
32: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
33: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
34: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
35: 38372e3235342e342e302f32322d3234203d3e20383334.roa (hash: 2I1ByI1ShJrhfbJoS5XMVbgzL/j4V3zDgV1b9EtKL3Y=)
36: 3231372e32352e382e302f32342d3234203d3e20333939363331.roa (hash: liRAHxY1zWqdiQcxc2Hwg5kJJEz2RCHG2+ULjCE1an8=)
37: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:75:65:f4:34:5f:9b:4d:6b:b6:61:91:c1:56:34:72:b4:58:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jul 20 22:45:08 2026 GMT
Not After : Jul 22 02:49:08 2026 GMT
Subject: CN=5ED8515F126B3CD14ABF993AB183D9937C1C9075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:5e:d2:af:19:0a:e3:60:e0:f3:78:94:fa:
5b:52:4d:f4:54:d8:fa:19:10:d7:f9:9f:56:18:00:
8f:56:a1:47:c5:60:70:ad:2f:b9:7a:67:4e:f8:cd:
3c:d3:a2:1b:46:10:7d:24:78:21:3c:6f:6e:44:5c:
a9:5e:45:7b:ad:b6:79:0e:8d:f8:eb:35:08:28:18:
a8:7c:54:f8:39:23:a3:70:8c:ed:57:0a:36:44:dd:
48:2a:17:6b:d8:63:c8:66:4f:1c:c0:90:9f:78:79:
c5:c7:56:8b:c4:4e:66:08:3d:e4:4f:52:0f:84:2c:
7a:1f:0e:23:ba:ab:96:e5:2c:00:c0:fa:fe:e5:c0:
25:53:69:77:de:15:98:df:55:d0:5a:f2:a2:34:85:
ca:2f:94:8f:8c:f9:23:02:49:ae:c5:e6:f3:16:ae:
75:9d:4a:aa:19:16:60:64:d4:d2:60:f8:2b:4a:16:
2f:6e:83:eb:2e:de:66:ec:52:4f:40:56:d5:54:5a:
21:a6:4b:3d:5c:29:f0:e1:91:13:38:92:93:57:78:
95:1f:51:44:4f:ab:de:d6:b4:ae:7e:29:4e:ff:e0:
0e:64:d3:f8:03:16:64:b8:47:69:7c:a5:91:e7:3e:
6e:2e:2a:d3:d1:de:2e:c7:90:74:90:c6:ff:08:df:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:51:5F:12:6B:3C:D1:4A:BF:99:3A:B1:83:D9:93:7C:1C:90:75
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:a5:da:95:72:13:77:d1:72:c9:a5:66:83:74:10:a3:75:
e6:07:90:fd:7c:95:cd:dd:42:30:05:c6:ae:d8:4d:93:a7:1d:
70:34:13:02:19:0b:3c:5e:3d:19:39:17:32:0c:4c:d9:3e:67:
fb:42:c3:ce:12:58:6e:2e:54:c7:95:52:f9:d1:f3:a5:fc:13:
ee:9f:57:75:46:df:ca:c1:bc:dc:0b:96:51:ba:77:18:00:d0:
d1:99:0a:36:81:39:90:4a:a5:4e:9e:f4:dc:8f:bf:15:a8:4b:
ad:fd:45:35:62:7f:e0:23:38:78:66:5d:87:93:ea:be:8e:81:
8a:ef:0e:91:e8:3b:7f:6b:b7:07:9a:54:5e:77:e8:18:8d:e3:
86:64:6c:01:99:52:58:d8:26:1c:c2:d2:fb:b8:aa:d8:77:ea:
21:2f:d0:6c:c2:71:e6:1a:ef:8f:82:b5:23:b2:91:83:49:2a:
f5:74:83:39:fd:66:83:7f:f5:cb:a7:14:c0:5f:52:de:04:fd:
26:02:91:dc:f7:24:5e:f7:b3:78:4f:99:2f:16:c6:84:64:eb:
6c:a6:7d:73:cb:8f:7e:2a:0f:22:2e:3b:15:6c:bc:c6:a4:85:
ec:32:ff:90:fa:4c:d2:16:5d:34:ba:dc:95:22:6f:e7:bb:69:
2f:76:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:46 2026 by rpki-client