
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: V9HSU6bToHamkQ5PQiZYpzly8kd74QsrDy7mjOkbr5Y=
Subject key identifier: 76:8C:35:4C:61:C2:B8:19:90:08:83:57:D8:3D:52:60:65:A7:9D:5D
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 0D09C27002A38CFDCB2BF15521704D6A51D30934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06CC
Signing time: Tue 24 Mar 2026 23:19:38 +0000
Manifest this update: Tue 24 Mar 2026 23:14:38 +0000
Manifest next update: Thu 26 Mar 2026 01:00:38 +0000
Files and hashes: 1: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
2: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
3: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
4: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
5: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
6: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
7: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
8: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
9: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
10: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
11: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
12: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
13: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
14: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
15: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
16: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
17: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: 986H7DOlh4JMdwtbTV1uEyMKn5HaeRMCufNEqQ0K23s=)
18: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
19: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: LeRpeAlGiATYhkVaInFc9nCD9qgQmNfAPb6AWxnrJQM=)
20: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
21: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
22: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
23: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
24: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
25: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
26: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
27: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
29: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
30: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
31: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
32: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
33: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
34: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
35: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
36: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
37: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
38: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
39: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
40: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
41: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
42: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
43: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:c2:70:02:a3:8c:fd:cb:2b:f1:55:21:70:4d:6a:51:d3:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 24 23:14:38 2026 GMT
Not After : Mar 26 01:00:38 2026 GMT
Subject: CN=768C354C61C2B81990088357D83D526065A79D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bb:82:20:00:41:6a:08:20:3b:65:49:20:8b:
ec:7c:5e:39:01:95:cd:71:98:53:92:17:62:72:97:
74:10:33:4b:63:a8:49:46:59:0e:3d:bd:6b:4c:20:
e9:a3:1b:f5:e6:80:69:14:8e:55:8f:4d:ed:f0:14:
f8:e6:70:99:f1:c3:f9:96:ba:a1:21:8a:52:f2:cd:
bc:8a:b2:56:e4:6b:f3:f0:e3:49:d4:64:3d:3b:ae:
6d:43:7c:c6:a4:89:4f:fa:fc:8c:d3:cb:c5:aa:ae:
e7:85:6d:bd:db:1f:1e:98:7b:78:5c:c5:7c:e9:97:
cf:c5:eb:a2:a6:20:b1:26:e2:77:df:81:bd:f5:ab:
fa:b0:85:c1:c4:ba:fd:25:ec:9c:e9:e2:71:0f:5c:
e7:e2:f0:54:96:48:ab:71:f8:d0:82:7d:f0:55:2b:
01:38:1c:81:3e:1d:fd:2e:b2:44:c2:86:b3:7b:54:
eb:b0:c2:5e:c8:5d:ab:ea:01:94:eb:c9:cd:fa:a3:
88:ac:6a:3f:96:04:63:ca:75:7d:b7:c3:cf:73:9e:
b7:9f:ac:48:b5:e2:ae:3e:6c:96:bc:f4:3e:ac:a9:
f9:af:10:49:30:e7:0f:21:7e:31:9e:51:ea:17:60:
3a:dd:f6:e2:6d:3d:06:91:ac:b8:81:21:3b:77:1a:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:35:4C:61:C2:B8:19:90:08:83:57:D8:3D:52:60:65:A7:9D:5D
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:86:12:76:af:a9:1a:81:c8:38:7b:f8:48:74:61:b8:05:
db:e9:ce:20:51:52:c1:05:ec:c7:a1:f7:67:94:2b:4b:95:55:
ce:5c:c3:32:a2:5c:ca:fd:b9:19:64:95:2e:dd:2e:bb:48:28:
fb:c9:0b:31:39:e2:89:58:6f:1e:e6:b2:db:7e:e9:fd:4c:4f:
0e:c9:43:e8:62:82:f2:b6:29:9d:8f:56:4a:cc:cb:fa:0a:54:
28:99:84:06:79:ed:28:ea:7f:88:56:94:84:17:b0:d8:ee:69:
92:be:be:c4:9a:19:25:23:14:9a:2b:d6:3e:f1:bd:c7:6d:78:
7f:2f:5f:22:f1:c3:49:84:86:d4:c4:d6:21:8f:82:64:83:ee:
b3:00:1b:87:08:7d:79:49:90:52:49:54:fb:ed:90:a1:55:16:
ac:a2:87:6a:ad:17:bc:36:14:6b:53:f1:29:9d:0b:43:8f:7a:
55:8f:c1:81:32:62:f4:6a:d1:de:c9:ce:30:c5:d3:f9:3b:2d:
f6:99:64:6d:62:cb:21:a2:1f:a9:69:e1:3b:3c:97:ee:04:4e:
9a:15:6e:fd:31:59:6a:2d:65:df:be:6e:60:35:93:34:05:8d:
50:25:91:54:c1:c8:63:8c:2a:e8:00:03:28:d9:77:04:d7:5e:
70:d9:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 16:03:15 2026 by rpki-client