
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: 3zEBZSqg8CdYwlkvfb5yhiQAqZiHfL+w6DDKcY8sg4U=
Subject key identifier: B9:ED:D0:34:FD:FA:FC:19:FF:DD:07:13:1A:2C:62:B2:F3:F1:FA:4E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 71DD7B68B64F5E2A10BD474F5D006D85BB8A6E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06FC
Signing time: Sun 26 Apr 2026 00:25:56 +0000
Manifest this update: Sun 26 Apr 2026 00:20:56 +0000
Manifest next update: Mon 27 Apr 2026 03:29:56 +0000
Files and hashes: 1: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
2: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
3: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
4: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
5: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
6: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
7: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
9: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
10: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
11: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 2GK6yW70SYVilQhiauiKHlw+9Bns6xkdej+7CFkDd/w=)
12: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
13: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
14: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
15: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
16: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
17: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
18: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
19: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
20: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
21: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
22: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
23: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
25: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
26: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
27: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
28: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
29: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
30: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
31: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
32: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
33: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
34: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
35: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
36: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
37: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
38: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
39: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
40: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
41: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
42: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 03:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dd:7b:68:b6:4f:5e:2a:10:bd:47:4f:5d:00:6d:85:bb:8a:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 26 00:20:56 2026 GMT
Not After : Apr 27 03:29:56 2026 GMT
Subject: CN=B9EDD034FDFAFC19FFDD07131A2C62B2F3F1FA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:b6:e4:f2:4f:3d:9f:7f:f0:66:4d:c1:3e:
3a:49:c2:82:cb:11:f4:cd:f7:b3:6f:47:6f:9d:81:
ce:ff:fc:f9:36:29:49:3c:d0:1a:e7:5e:c0:00:5d:
ae:8b:76:1a:8b:ef:5e:3c:e4:3e:75:2e:72:69:4b:
ce:53:1c:74:ac:b0:91:54:c1:b7:39:1f:1b:11:57:
5f:c4:1e:d6:82:2c:25:3c:2d:5c:3f:30:2f:d3:d3:
51:6b:8a:7e:f0:63:53:5e:dd:84:35:7f:4c:df:bb:
06:fe:0e:8a:f5:5b:49:a2:29:07:70:b5:77:1d:39:
ed:aa:94:4c:93:f2:06:83:36:d9:9f:8d:5d:5d:46:
a0:85:7f:6d:29:d6:d7:9e:88:2e:ca:b2:af:16:5e:
1f:91:54:c4:de:1f:dd:5e:db:a3:de:65:20:07:f0:
62:3f:74:50:5d:7c:a3:fa:f6:ee:8e:d4:f8:f0:af:
99:99:f3:fe:58:79:21:3a:2b:08:66:16:45:df:d9:
95:9f:5a:aa:b4:34:f2:1d:5a:d8:a4:4f:87:6f:1a:
4b:ed:45:64:f6:a1:c6:58:f0:5f:a9:fb:13:37:1f:
77:81:0b:c9:46:4e:d0:db:36:18:3d:48:39:ca:27:
e0:27:49:29:ba:8b:6f:36:6b:a7:04:3b:ae:c9:c6:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:D0:34:FD:FA:FC:19:FF:DD:07:13:1A:2C:62:B2:F3:F1:FA:4E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:73:c1:33:8b:ad:1a:5c:68:13:71:df:7b:07:65:f7:aa:
aa:87:24:e8:3f:b9:c7:d8:6c:8e:23:bd:d7:f5:67:93:00:78:
58:11:0c:7e:df:06:ba:79:76:01:fc:ed:67:a0:fe:e9:5f:e7:
86:b6:90:65:54:f6:2f:60:cc:4a:07:de:a6:18:46:a3:a7:d5:
0b:e6:09:96:38:09:77:32:9e:16:e4:98:f6:e9:e6:c6:d5:e4:
c2:1e:7b:c4:11:30:6d:53:8c:81:23:b9:4e:e1:09:2c:b7:94:
35:20:ae:a2:19:0e:1b:26:e3:22:08:05:b9:c3:36:ea:65:64:
41:d7:a6:a8:bc:b1:7d:fa:7c:1c:4e:5d:19:e6:2d:02:9f:57:
9a:29:db:58:78:35:ad:31:b4:f1:7b:e1:90:b3:56:1c:bf:8e:
a3:7e:5b:e7:a0:f1:a9:e6:79:1a:8b:3b:2e:c7:af:80:b9:89:
1e:3d:78:1b:84:7a:44:f7:6d:a3:14:9e:4f:a3:a7:ad:6f:cb:
1c:36:1b:c9:63:a7:62:48:c9:7c:76:d2:65:69:eb:4d:0d:a1:
15:8e:a0:d5:9f:ea:d3:0a:6c:8a:4f:2c:b2:7e:80:0b:c3:6e:
7b:8a:c3:64:07:cf:47:2d:89:02:69:3e:7f:4a:4e:33:d6:7a:
be:de:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 21:00:31 2026 by rpki-client