
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
File: 60D5CF86368D32D8BD736410814916DA300E83CF.mft (raw, json)
Hash identifier: PxMo5JgYjnSP1SPTE0IMEFYPc6+2nR63ywU3akIlz6k=
Subject key identifier: 58:82:DF:2D:51:0B:17:E9:CF:C4:E4:A9:72:3A:1C:BD:F1:34:4D:AC
Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF
Certificate serial: 29873F409934F8FB92FBA8DAB5D4312B31607028
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
Manifest number: F5
Signing time: Fri 02 Oct 2026 09:29:35 +0000
Manifest this update: Fri 02 Oct 2026 09:24:35 +0000
Manifest next update: Sat 03 Oct 2026 09:35:35 +0000
Files and hashes: 1: AS211305.roa (hash: 5E9Kh0U8PVxT6cVuiOVB30K3QNf3isLkFjSMXSzrvQA=)
2: AS59245.roa (hash: lBiyUgsDKXy3itaXDUz9utq+vOhw6hSkGE1Q1j21PYE=)
3: AS13537.roa (hash: B6bD0yeqYN8EGr/gyMJQve2bVkdaNlpuA148S9ZRj44=)
4: AS137409.roa (hash: OAHtflkSH7rfWtK82vwAdtKvj1khmmPIRF/8uLy9b/Y=)
5: AS40676.roa (hash: nBaGqH7C3J6hVVl/hLrUaoZEzWKu3gb3dTaTOsqnhZ4=)
6: AS30042.roa (hash: JeOiJYmMGNraOIIm54L/w+Ze3eXBXETXatMixf1/LE0=)
7: AS2856.roa (hash: lTN8/vt3smxEIcast1BeI+binYh2056gwzs5+WmQRuw=)
8: AS209829.roa (hash: zh7d9VaIeocAt4usL8RKMDyHNzfahI9EnB0q9glYWaY=)
9: AS29802.roa (hash: KT6ZRsx/jQF6DHHkLdkG2KbRcpj858/4Isq60Xcx8Ws=)
10: AS25369.roa (hash: 07eNZ9Na4Rf2PrzufpbjcaOrd3RSRkDtIOUkQ/zNhVY=)
11: AS10648.roa (hash: QzGDG0Ww/qUGF7mkdsXh5AcoxsQKaochwHm2uLgp8So=)
12: AS152698.roa (hash: hnsIW1R3GFzp2EWEOUmjGWCBLpq1unIz3Ae+n7dX/9I=)
13: AS402215.roa (hash: U4zqGiRh2HKz7V2BVswG4BxWJSD8QZQJN6sTG6xQBqE=)
14: AS199707.roa (hash: cqZNdPYfBW0SBV3E6mqQe2fod34zOXw2HSoa1nDu2yY=)
15: AS402265.roa (hash: nepIyk75nH/AuxkdJagyuE6I7GsAJVUuqzG1lzehl1w=)
16: AS38186.roa (hash: dsuwn/3M2LUnV+IKnH32JptJyKflMmZT+0mNMEafWOA=)
17: AS219036.roa (hash: k32MUfA7Ynhwl9UHAmTsDvkv7CBFmHpfGkuqoZBGp0M=)
18: AS9304.roa (hash: DQGnE2D1z0J8FBSnh+Yo6t7MF9FUteVLpM6pbEoa3Jc=)
19: AS60982.roa (hash: h5Sleu2/TtWHHTKcF/HsC69gtUm7O8s2VhNFg+R4szs=)
20: AS399275.roa (hash: Mwsg3ICUFtt2PxCl8Epn/Oa95fx5681GepSChdzt2f4=)
21: AS834.roa (hash: t7wNpbJhJdFedObsWyzBuYcb87GY+ZqaqLBf1nc/iWQ=)
22: AS152179.roa (hash: JqUOueUS2jO0XUxPTdIO+z3zWBGtal98jxL+XaWKIfY=)
23: AS21840.roa (hash: sUOfAiYdaM80gpangBMV6FhA0LpfgLts35SPQWzB0Cc=)
24: 60D5CF86368D32D8BD736410814916DA300E83CF.crl (hash: 0dJoGwZEISFu4tZBD9nq+CjVFySDphCac21aLGl0Tnc=)
25: AS197537.roa (hash: RF2pchDBjJN9zUOu0vF0M2+Wgu8SnpmLNvNxWilLYoY=)
26: AS6475.roa (hash: d6ROn/nCD56lej6Y1IiGDIfiFPYv5is5YCxb2AaX6pE=)
27: AS214483.roa (hash: SPUe9FhPSX3hGSxN9xvgPo8hyrTOCSHNQfthlMB7BGY=)
28: AS3223.roa (hash: gla7DtHK1OrkIGVDoA01+OL3aT0M7RlbtSvmDghbNT0=)
29: AS402288.roa (hash: 5hj/7PZQTGiCK6f7do/sM2E1Q5+fnlNhluVYOenygos=)
30: AS205960.roa (hash: klvh7s/US/WhOVbuOD6eQFxaQjYezAJK98w9Jqytce4=)
31: AS219427.roa (hash: TwUQQmBooplu5yiXjQi9me3qbDacU1EKCx3fBz9eL6E=)
32: AS148996.roa (hash: ZnMXv5b1geOEhnLX5L1Rq34UGDbv0MEJjTifLBtEe08=)
33: AS16276.roa (hash: r4nXmyokPvBGZav2obbqZljYWPTziMMPXkhEWMHFlLg=)
34: AS31715.roa (hash: IgCz/N9E+w8nKuNJLUAbrE0l2DE1qoW2P/h+62/qPNU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 09:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:87:3f:40:99:34:f8:fb:92:fb:a8:da:b5:d4:31:2b:31:60:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF
Validity
Not Before: Oct 2 09:24:35 2026 GMT
Not After : Oct 3 09:35:35 2026 GMT
Subject: CN=5882DF2D510B17E9CFC4E4A9723A1CBDF1344DAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:54:9b:29:52:b0:0b:e7:da:50:57:b3:6f:
b0:f2:a3:7d:34:67:7a:e9:7f:8c:1f:eb:81:49:a6:
3d:4f:bd:ab:08:9e:ad:8a:e2:c2:7d:8a:df:5a:b8:
8b:ba:1f:d3:59:3f:a0:51:53:b0:27:c3:82:67:05:
2f:d2:fe:03:e6:84:64:0c:48:2c:3d:ee:ce:61:76:
7b:fd:35:25:91:e4:7c:23:47:4f:ac:82:4d:6e:f8:
e7:ca:9e:57:5a:9f:39:e8:8d:82:6e:b9:2c:34:fa:
f6:8c:37:64:52:c0:24:b8:69:1b:6a:a3:75:85:b2:
f4:7e:a8:37:cf:c6:02:ad:bc:05:c3:e6:84:2b:c4:
03:87:6a:ce:85:d3:06:9b:33:28:1e:60:99:a0:a1:
76:87:21:68:fc:c2:49:24:c6:60:0e:6b:a9:03:51:
7d:87:f7:94:a0:06:2f:d5:93:fe:80:12:e8:6a:c3:
5f:41:9d:5b:eb:be:a9:35:e3:9d:bd:8b:bf:9a:75:
d4:7d:80:b4:09:ab:6e:f3:d9:79:70:de:ea:9f:15:
eb:bf:90:df:8b:b7:fa:f7:9e:e2:9d:07:c5:aa:7a:
f5:ec:43:d9:9d:5d:03:7a:19:c1:9e:0d:41:cc:e6:
57:35:07:af:d0:4e:d2:be:9f:d3:64:a0:88:75:55:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:DF:2D:51:0B:17:E9:CF:C4:E4:A9:72:3A:1C:BD:F1:34:4D:AC
X509v3 Authority Key Identifier:
keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:49:9e:c5:48:83:1b:d6:a9:db:1b:35:5a:f4:ac:6c:97:d3:
bf:c6:18:cc:a2:7f:a1:44:f6:08:61:40:59:e8:0c:48:1d:5b:
28:68:a9:35:db:1d:10:75:3b:cb:df:ff:a0:25:c9:ff:3a:45:
a5:86:5a:15:f3:17:56:58:14:83:f7:72:15:21:e0:c3:2b:88:
81:ff:30:99:15:e0:66:d9:f2:17:c3:91:58:10:bf:5a:2f:be:
51:1e:03:61:27:4e:17:7d:f2:4e:4b:6d:8f:53:4a:f3:37:0d:
dc:34:ce:24:09:91:f7:4d:8f:db:14:80:2d:6e:3d:66:45:83:
32:d0:a7:4b:c9:4a:5d:d0:89:bb:93:90:e6:e1:67:2d:67:e7:
63:61:af:3a:32:95:10:d2:f1:8d:61:28:c3:0e:c2:2a:74:51:
f8:f5:ac:f5:84:60:1d:f1:b6:ca:a5:cd:c1:73:d2:c5:a1:35:
44:1a:49:33:7a:66:88:c1:9e:ec:98:d0:72:b0:0d:12:90:9d:
80:cb:77:ef:9f:69:11:2c:e2:22:fc:d1:be:0b:1e:c1:e5:c4:
86:c8:9d:e3:1d:1b:57:60:8c:37:9f:c3:2a:00:e6:fc:84:63:
1f:cf:19:10:af:e3:2f:e1:77:7d:1e:dc:56:b8:ed:59:37:36:
f7:ae:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:10:47 2026 by rpki-client