
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
File: 1E74494683D8D2A4E029AAD4573928D2A55FA411.mft (raw, json)
Hash identifier: jYaqxb14vpxCpHGzOUA1YEm7SOxpqiPjYZ7t9zI1FSQ=
Subject key identifier: B4:7E:B5:22:61:9B:C3:CC:4C:9B:58:B4:C3:B2:A8:C4:68:12:65:2C
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Certificate issuer: /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial: 4073102A094F9BA9D2FFE615493C3C6CD223EACF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
Manifest number: 68
Signing time: Sun 28 Jun 2026 18:01:18 +0000
Manifest this update: Sun 28 Jun 2026 17:56:18 +0000
Manifest next update: Mon 29 Jun 2026 21:28:18 +0000
Files and hashes: 1: 326131333a633863343a3a2f33362d3438203d3e20323035393431.roa (hash: MHTbuB6+g+ci+W3xhK1wq8aUoLgunvms/wXlaRYr9A4=)
2: F82DB5B58974CF2B03B76EAB1AF561757A30EEF0.cer (hash: Pe7HR7nD1gOii59KkZCRs4tzvSx15BrzbCpfRzisvQE=)
3: 326131333a633863343a313030303a3a2f33362d3438203d3e20323134373632.roa (hash: JofSJio1ZSiKcgoMirJLUr+PbzVMXTI571DpwJP8INM=)
4: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (hash: qnGfja2gp1Dt5eiLazr0XeABKN1iXqNbT2nfPewlL3k=)
5: 326131333a633863343a3a2f33322d3332203d3e2030.roa (hash: gSZ+pcHkiMWO1K79/Mncci1lQFYMKmKkgDaeUtpna0Y=)
6: 1E74494683D8D2A4E029AAD4573928D2A55FA411.crl (hash: nNIejnyl5nuDhDEpVXTw+35fdHCl56cKG/mmmibrB5A=)
7: F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer (hash: QeIsnFtF/EdZr3eDL8K0OYPSz/bi5xfqK6RvjhvtAeE=)
8: 300F87E44E24C2FEED9780E2A0ABF022DCB56C58.cer (hash: WUexCqCUAvgyF/Iv7z1a1aWJ8dcJnS0fgUUz16Pzr18=)
9: 326131333a633863343a663530303a3a2f34302d313238203d3e20323035393431.roa (hash: PxxBGQ7SipAzWoOzhhkRsumojkCUT+Er192+snUK4gs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 21:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:73:10:2a:09:4f:9b:a9:d2:ff:e6:15:49:3c:3c:6c:d2:23:ea:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Validity
Not Before: Jun 28 17:56:18 2026 GMT
Not After : Jun 29 21:28:18 2026 GMT
Subject: CN=B47EB522619BC3CC4C9B58B4C3B2A8C46812652C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:84:eb:b1:57:b0:37:61:5d:03:fb:a4:8b:
c0:07:78:db:85:13:2c:91:b9:bd:42:cf:7c:c3:ff:
d5:c4:f5:48:20:4d:11:46:aa:12:1f:ba:63:60:be:
ff:c5:b0:d1:f1:34:c5:3d:60:5e:43:ce:2b:a0:3c:
7a:e8:84:94:b9:10:8b:8d:e1:9a:24:d7:b2:c8:e0:
50:d7:b6:51:ef:7e:d2:4f:de:56:0a:67:9f:ad:96:
e5:47:d5:d2:c4:7a:8e:e3:d1:c4:14:e9:56:b2:c6:
e2:e3:78:1f:69:6a:86:1a:7e:74:a8:d9:bf:77:d3:
80:f3:f7:5b:44:7e:90:85:eb:7a:c6:e9:48:bf:61:
6f:46:88:b2:bd:bf:ee:fa:7f:18:07:a8:34:15:3a:
ec:a8:37:28:0f:f5:06:50:35:63:74:c1:7a:2e:40:
78:77:e7:bd:26:05:23:19:48:32:df:d4:ca:de:2b:
c5:e6:76:a2:39:49:f8:c6:56:b3:c2:e7:75:9b:96:
1e:e1:14:75:3e:85:40:6e:a4:3e:69:a8:13:33:eb:
10:39:c8:3a:30:7a:ba:ed:14:2a:90:9f:ab:07:d3:
4c:87:f5:19:39:fe:c4:3b:8d:e9:70:92:8b:77:3e:
ae:85:91:9f:dc:a6:0f:9f:ee:b7:bb:a2:0c:cc:34:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7E:B5:22:61:9B:C3:CC:4C:9B:58:B4:C3:B2:A8:C4:68:12:65:2C
X509v3 Authority Key Identifier:
keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fe:cc:0e:03:9d:5d:04:26:34:ec:d6:59:13:a2:99:35:90:
29:29:19:14:50:05:e1:02:e0:7f:e9:af:62:8c:08:77:b2:7b:
9c:7f:62:b9:1b:85:7d:8e:ea:95:a6:4d:23:5b:43:db:6a:62:
72:ae:79:69:96:fd:3f:62:17:29:5c:2f:38:d8:7e:b1:fb:95:
10:a0:a4:d4:95:6b:01:97:29:e7:53:99:66:d8:b0:84:f2:5b:
3e:c1:25:5f:52:db:52:5b:15:57:2e:30:02:f3:99:13:f6:fa:
85:aa:b0:17:7c:cd:73:3f:da:cc:04:b6:15:5b:91:a8:14:40:
88:04:d2:d1:25:e6:12:2c:b3:dc:e6:e0:21:f9:51:ca:ca:f6:
97:4e:ce:76:e9:84:2a:f6:b4:ac:95:a6:10:c2:97:a7:ee:5a:
41:76:f9:0f:2b:78:33:04:b8:33:cc:ae:6f:54:f6:0e:a3:ec:
5e:a4:25:50:97:87:a7:8a:44:41:91:8f:11:f1:13:f2:1b:b8:
f6:85:ab:3c:ce:21:b1:92:6d:36:b0:27:7f:eb:db:81:b4:c0:
c4:09:24:d4:3a:bc:dc:0b:75:fd:10:6e:cf:ab:fe:a0:04:37:
8a:07:64:a6:72:0f:0c:a9:64:4a:7f:b0:39:62:26:2a:79:03:
2f:6f:2d:d7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUQHMQKglPm6nS/+YVSTw8bNIj6s8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJB
NTVGQTQxMTAeFw0yNjA2MjgxNzU2MThaFw0yNjA2MjkyMTI4MThaMDMxMTAvBgNV
BAMTKEI0N0VCNTIyNjE5QkMzQ0M0QzlCNThCNEMzQjJBOEM0NjgxMjY1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr94TrsVewN2FdA/uki8AHeNuF
EyyRub1Cz3zD/9XE9UggTRFGqhIfumNgvv/FsNHxNMU9YF5DziugPHrohJS5EIuN
4Zok17LI4FDXtlHvftJP3lYKZ5+tluVH1dLEeo7j0cQU6VayxuLjeB9paoYafnSo
2b9304Dz91tEfpCF63rG6Ui/YW9GiLK9v+76fxgHqDQVOuyoNygP9QZQNWN0wXou
QHh3570mBSMZSDLf1MreK8XmdqI5SfjGVrPC53Wblh7hFHU+hUBupD5pqBMz6xA5
yDowerrtFCqQn6sH00yH9Rk5/sQ7jelwkot3Pq6FkZ/cpg+f7re7ogzMNNVPAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUtH61ImGbw8xMm1i0w7KoxGgSZSwwHwYDVR0j
BBgwFoAUHnRJRoPY0qTgKarUVzko0qVfpBEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZjhlZTYtYWJlNy00YWU4LTk2NGMtNzg4YmI5OGM5
NzVjLzEvMUU3NDQ5NDY4M0Q4RDJBNEUwMjlBQUQ0NTczOTI4RDJBNTVGQTQxMS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4
OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8xRTc0NDk0NjgzRDhEMkE0RTAyOUFBRDQ1
NzM5MjhEMkE1NUZBNDExLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAwMmY4ZWU2LWFiZTctNGFlOC05NjRjLTc4OGJiOThjOTc1Yy8xLzFFNzQ0OTQ2
ODNEOEQyQTRFMDI5QUFENDU3MzkyOEQyQTU1RkE0MTEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo/swO
A51dBCY07NZZE6KZNZApKRkUUAXhAuB/6a9ijAh3snucf2K5G4V9juqVpk0jW0Pb
amJyrnlplv0/YhcpXC842H6x+5UQoKTUlWsBlynnU5lm2LCE8ls+wSVfUttSWxVX
LjAC85kT9vqFqrAXfM1zP9rMBLYVW5GoFECIBNLRJeYSLLPc5uAh+VHKyvaXTs52
6YQq9rSslaYQwpen7lpBdvkPK3gzBLgzzK5vVPYOo+xepCVQl4enikRBkY8R8RPy
G7j2has8ziGxkm02sCd/69uBtMDECSTUOrzcC3X9EG7Pq/6gBDeKB2Smcg8MqWRK
f7A5YiYqeQMvby3X
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:30 2026 by rpki-client