
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: Uq7aYd9g/1uZN+NTa5xw+Ac7OcaHCEOry9uc5k2RdHY=
Subject key identifier: 42:1F:16:C5:02:DC:CA:13:B6:98:A1:3D:D0:B7:DD:ED:A5:8C:65:25
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2607D96DE12FEF292FC53AEAEAF49EC9AE56F748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06EF
Signing time: Fri 17 Apr 2026 01:59:42 +0000
Manifest this update: Fri 17 Apr 2026 01:54:42 +0000
Manifest next update: Sat 18 Apr 2026 04:07:42 +0000
Files and hashes: 1: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
2: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
3: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
4: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
5: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
6: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
7: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
9: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
10: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
11: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
12: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
13: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
14: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
15: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
16: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
17: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
18: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
19: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 3ICnpT0+XAfiTTzreLRtT8BGqR0VSdSqtAv/e9/EqCQ=)
20: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
21: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
22: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
23: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
25: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
26: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
27: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
28: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
29: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
30: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
31: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
32: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
33: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
34: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
35: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
36: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
37: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
38: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
39: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
40: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
41: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:07:d9:6d:e1:2f:ef:29:2f:c5:3a:ea:ea:f4:9e:c9:ae:56:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 17 01:54:42 2026 GMT
Not After : Apr 18 04:07:42 2026 GMT
Subject: CN=421F16C502DCCA13B698A13DD0B7DDEDA58C6525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:9e:59:26:54:fa:13:65:5f:da:0e:ba:b2:
d4:a1:d7:e3:3c:01:4b:08:cf:38:55:38:40:74:62:
58:7d:ff:b0:4c:cd:c5:b8:1f:de:0d:ee:4d:27:5d:
71:b6:f9:1f:97:2a:54:bc:aa:0e:23:53:89:d4:1a:
c9:d2:4e:ad:12:8f:a5:e2:68:be:2a:24:e4:49:2e:
82:0b:1d:ab:24:d3:9d:1f:33:28:2d:23:b6:93:f7:
f0:e4:b4:77:15:44:ef:24:d7:b1:42:6f:40:89:75:
02:1d:56:ea:8c:47:f0:c1:70:03:41:e6:56:66:50:
b4:d3:72:a0:a4:24:bd:95:49:41:99:ad:6a:7e:ae:
c0:d3:7e:5a:c7:80:1b:f7:1e:92:5a:03:be:ac:56:
3c:49:79:28:50:23:47:43:a1:5c:ff:22:cf:35:c3:
4a:03:e1:15:a0:bc:c3:35:0a:7e:7d:8b:d3:e8:12:
3f:16:32:b5:c2:29:a3:11:00:cf:57:74:e0:e0:2f:
c5:e4:ef:16:e0:03:41:89:91:dd:40:87:23:7f:07:
fc:0e:bb:e2:6a:53:07:ea:e5:6e:3b:e3:86:fc:80:
88:82:ea:eb:fc:d5:9c:cb:6d:7d:86:3f:f8:af:a2:
c0:77:f5:ac:8a:d2:98:c1:17:81:8b:28:3f:b0:66:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:16:C5:02:DC:CA:13:B6:98:A1:3D:D0:B7:DD:ED:A5:8C:65:25
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:51:85:7a:ea:53:1a:2a:00:7d:6b:36:30:76:2c:04:02:2b:
b4:9f:60:ad:1b:f7:c9:00:15:70:16:6e:1b:1b:03:15:53:f0:
41:f7:88:cb:6d:e6:8b:6d:d0:77:b9:0e:45:9d:74:48:3f:b5:
75:66:8f:be:e1:89:64:8d:67:73:d5:a7:58:76:25:19:41:17:
68:a7:35:26:c0:55:8b:76:74:c6:52:76:6f:c2:14:f6:81:ea:
56:06:ad:33:55:e7:8a:10:39:4f:10:5e:e3:0c:02:e5:f9:cf:
a8:ce:0d:a0:b4:0c:29:6b:fb:4c:ab:ff:67:24:88:8d:7a:70:
11:95:74:8b:3b:e6:d8:94:94:2e:71:ff:7e:83:ed:3a:81:4b:
14:9e:6c:20:32:b9:09:d2:23:7f:15:ad:10:43:6c:9b:38:ed:
1d:28:19:c0:21:37:c2:5a:9d:e7:ea:8c:b6:78:e9:84:dc:02:
31:ae:b3:b8:79:83:0e:72:16:d9:5b:98:17:25:f6:2b:00:ce:
8c:df:13:39:29:dc:c3:36:e0:d8:bd:20:15:56:ad:cd:db:b1:
91:19:37:be:c2:e3:16:cb:b6:5e:56:5f:dd:0d:81:50:99:b2:
c9:0c:8e:eb:0e:0c:a3:ab:f9:a8:32:ff:a1:f0:26:75:23:27:
c1:77:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:02 2026 by rpki-client