
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: QwxDvRMtYJlKt8VSTrlcDW7ClTvyX5kOtoK+ybgIhWg=
Subject key identifier: E4:46:E4:BF:35:1E:99:F6:20:C7:31:22:7A:0F:D4:4B:42:FF:4C:2F
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4B0BA30DCEB636069874FC748249906125EF7989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 0728
Signing time: Fri 22 May 2026 08:40:49 +0000
Manifest this update: Fri 22 May 2026 08:35:49 +0000
Manifest next update: Sat 23 May 2026 10:38:49 +0000
Files and hashes: 1: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
2: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
3: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
5: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
6: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
7: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
8: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
9: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
10: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
11: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
12: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
13: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
14: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
15: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
16: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
17: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
18: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: pxm/ZuNDc0vHDZJxS6AY097rdOzOXgCIUXfThFiuc+0=)
19: 34352e39352e3231342e302f32342d3234203d3e20343032323134.roa (hash: IAhhGhhBpF4cl6c96AeOIUO3QUQaMO1YcC9zPWe02Zs=)
20: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
21: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
22: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
23: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
24: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
26: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
27: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
28: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: siAtwvTAZM+LlD3wdnarFDX9+Ycc62d+jei/mDFB4w0=)
29: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
30: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
31: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
32: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
33: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
34: 34352e382e3231372e302f32342d3234203d3e20343032323938.roa (hash: kelqIGWqA6A5CmDeq94bFFXh8OyDYHhPA+ITnx16dp4=)
35: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
36: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
37: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
38: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
39: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
40: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
41: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
42: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
43: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 10:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0b:a3:0d:ce:b6:36:06:98:74:fc:74:82:49:90:61:25:ef:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 22 08:35:49 2026 GMT
Not After : May 23 10:38:49 2026 GMT
Subject: CN=E446E4BF351E99F620C731227A0FD44B42FF4C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:9f:8c:cb:93:76:a4:0a:e6:d5:d8:c0:7d:
8a:3c:4f:6f:f2:22:d7:40:ba:dc:5a:03:15:49:6e:
b8:02:a6:fc:68:e6:6d:86:1e:c4:4a:1c:ea:9a:25:
31:e6:36:ad:6e:3e:68:13:80:18:8f:81:30:0c:29:
8e:45:40:eb:09:57:c6:39:a7:ca:df:7a:a4:38:d1:
c1:e5:06:f6:94:79:7a:09:7f:51:5c:cc:7f:ac:36:
42:4d:f4:f4:77:a5:d4:5f:ba:28:ea:0b:a6:40:83:
cf:41:b3:cc:43:88:17:f2:78:ca:a4:15:32:dc:17:
b7:98:90:3f:ba:7f:c6:d3:b7:3e:fe:33:d8:3c:ad:
2d:da:a2:84:ee:01:f5:88:64:f0:39:a7:1a:6d:d0:
a4:2d:21:e7:af:a3:d2:e2:59:c8:7e:5d:97:46:d8:
6a:75:0e:1e:84:b9:29:bb:02:ed:03:b1:a1:5e:94:
c6:83:cb:51:07:99:38:21:d5:39:cd:74:33:94:8c:
7e:96:85:00:46:18:e7:45:4b:d3:bb:b6:11:30:92:
ee:a7:f3:4c:8b:ca:1f:42:10:b0:3d:a3:62:45:bc:
26:28:89:5c:2e:35:01:fd:10:65:59:dc:d2:c1:77:
bd:24:ed:56:03:78:c6:64:36:e8:8b:23:e0:ea:e1:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:E4:BF:35:1E:99:F6:20:C7:31:22:7A:0F:D4:4B:42:FF:4C:2F
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8b:a8:28:f9:0c:0f:40:68:18:b7:fd:bc:9d:85:6b:c5:50:
87:00:24:fd:61:32:a6:6a:0b:1b:ef:8b:36:13:9d:ef:0e:82:
20:c4:92:48:c7:dc:86:22:9c:cf:16:fe:34:cd:6e:44:ad:5b:
8a:61:19:34:75:91:d8:72:1a:1c:9b:d6:34:59:93:a8:a5:4d:
ba:95:75:56:33:79:af:a1:12:19:46:0f:3b:d5:c5:06:c1:ca:
d1:71:56:09:6d:05:bf:dc:ec:3a:73:28:07:12:20:c0:4a:67:
69:94:85:63:71:eb:8c:69:9f:73:30:55:d1:38:8f:c4:90:bd:
e7:a4:0e:22:08:97:e3:87:77:cb:60:8b:2a:78:c7:e9:2b:6c:
6e:40:2b:5d:19:da:80:b4:c6:c0:a6:95:99:ee:43:75:21:b5:
f8:40:f3:3a:fb:d1:af:17:3b:ea:9a:26:e1:ed:cc:72:06:6d:
5f:ea:9c:ff:4d:b2:c2:5a:7c:1e:6f:46:3b:d4:41:bf:5e:f6:
b8:8a:dc:63:37:2a:da:73:05:3c:91:a6:9c:e5:56:a1:c9:0c:
ec:eb:41:37:06:8a:6e:9f:25:da:4d:5c:d7:64:3c:d1:fe:14:
5b:4a:32:14:e6:5e:8d:f8:90:a9:19:70:c9:11:73:f0:70:63:
b0:16:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:07:46 2026 by rpki-client