
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: JuhLgu+eJEvoWm25XIlICGUkxUpqU3FClxbZs6YKGo8=
Subject key identifier: 00:8A:41:C9:42:32:51:91:90:E2:0D:0F:61:89:82:10:57:11:66:A2
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7FBF51A521F6627127D990BEA0445653BA7349C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06B5
Signing time: Mon 09 Mar 2026 13:46:48 +0000
Manifest this update: Mon 09 Mar 2026 13:41:48 +0000
Manifest next update: Tue 10 Mar 2026 14:49:48 +0000
Files and hashes: 1: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
2: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
3: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
4: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
5: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
6: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
7: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
8: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
9: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
10: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: wI+NASEENJ/SYlvMUutyf4CDW37jtRnmC048QXchiQs=)
11: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
12: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
14: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
15: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: hhXc/MDi5B7M4hlHOjLVsLkGzhKvVMLy6aW3Y+PG9Lw=)
16: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
17: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
18: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
19: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
20: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
21: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
22: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
23: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
25: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
26: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
27: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
28: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
29: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
30: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
31: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
32: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
33: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
34: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
35: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
36: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
37: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
38: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
39: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
40: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
41: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
42: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
43: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 14:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bf:51:a5:21:f6:62:71:27:d9:90:be:a0:44:56:53:ba:73:49:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 9 13:41:48 2026 GMT
Not After : Mar 10 14:49:48 2026 GMT
Subject: CN=008A41C94232519190E20D0F61898210571166A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:b5:97:7a:eb:96:08:c3:e8:51:d4:f2:fa:
50:ba:e9:02:54:b3:de:cf:e6:e9:14:b7:83:68:b1:
32:ff:1a:3d:a5:8d:09:6c:bc:72:46:73:62:53:f6:
06:a4:6f:79:23:c8:f0:5b:6a:c5:e1:f3:e6:ae:29:
2f:21:ab:39:cb:12:71:c9:78:36:f1:55:64:08:53:
fa:1d:51:f3:49:be:3e:77:86:16:cc:ab:d5:b4:da:
75:84:fb:8c:49:21:fc:44:2f:64:c5:6f:f8:ff:16:
a3:2d:2d:e8:e2:9b:a8:b8:a5:28:c5:69:ef:51:81:
52:ab:f0:25:f3:ef:54:39:b5:cd:1e:31:6a:7c:68:
7d:35:ac:83:d5:83:b0:14:70:b4:fd:6d:4d:bd:01:
0e:30:15:c1:6a:08:08:db:60:5c:21:ce:fa:f8:45:
88:b5:6d:5f:11:30:43:96:5f:3e:c0:f1:f7:6c:43:
be:4a:42:02:1d:9f:5a:93:d1:ef:0f:4b:cf:d6:38:
d3:f5:d0:3d:54:8e:e0:1d:7e:1b:49:a9:a3:21:c0:
a5:cd:7f:a8:c6:f6:f5:2e:50:76:bd:2c:a5:c1:d5:
8a:6e:f3:e9:8d:2c:03:1b:44:32:0d:fa:10:4e:63:
8b:de:6b:3d:2f:72:c0:19:81:3a:a7:02:a9:b0:97:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:41:C9:42:32:51:91:90:E2:0D:0F:61:89:82:10:57:11:66:A2
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:20:42:f1:62:57:63:a4:70:1b:81:39:b7:13:d1:e1:5a:
43:9d:52:9f:b1:57:24:4d:40:4a:65:7b:4d:64:42:2d:5b:8d:
e0:62:cd:17:14:e8:8b:92:d0:c6:e8:97:53:f5:93:c4:b5:35:
7f:20:ca:ac:2d:a5:5b:5a:55:3c:ef:c9:91:de:fb:ce:83:36:
48:c1:04:0d:f4:c3:86:08:32:19:c0:da:e4:94:c9:93:cd:8b:
e0:eb:46:36:16:21:b7:01:a1:93:15:ae:5b:5d:fd:22:2a:13:
db:7e:3c:20:0b:2f:d3:f0:d1:1c:d2:a8:20:2f:31:c5:b8:79:
59:de:bd:39:38:b4:50:dc:c9:05:6c:de:fb:46:e8:21:1a:f3:
50:f2:ad:32:61:40:f9:72:64:19:ea:4f:b0:7b:42:e9:5f:99:
e6:ad:b5:97:1c:b5:3d:b2:a7:d0:85:c4:9e:cb:d2:07:53:88:
9d:f8:00:4f:82:5d:b8:ad:8f:25:97:10:35:75:91:39:18:85:
9f:38:3d:b0:81:24:65:cb:9b:c0:59:0b:58:5d:c8:61:3c:a5:
bb:b0:2a:56:d8:21:43:ec:40:d5:4f:42:c7:2d:d7:93:ad:e1:
2f:c9:32:48:9a:63:ad:19:a3:df:96:a2:93:a4:b9:81:bd:b7:
93:a7:13:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf79RpSH2YnEn2ZC+oERWU7pzSccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMDkxMzQxNDhaFw0yNjAzMTAxNDQ5NDhaMDMxMTAvBgNV
BAMTKDAwOEE0MUM5NDIzMjUxOTE5MEUyMEQwRjYxODk4MjEwNTcxMTY2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YLWXeuuWCMPoUdTy+lC66QJU
s97P5ukUt4NosTL/Gj2ljQlsvHJGc2JT9gakb3kjyPBbasXh8+auKS8hqznLEnHJ
eDbxVWQIU/odUfNJvj53hhbMq9W02nWE+4xJIfxEL2TFb/j/FqMtLejim6i4pSjF
ae9RgVKr8CXz71Q5tc0eMWp8aH01rIPVg7AUcLT9bU29AQ4wFcFqCAjbYFwhzvr4
RYi1bV8RMEOWXz7A8fdsQ75KQgIdn1qT0e8PS8/WONP10D1UjuAdfhtJqaMhwKXN
f6jG9vUuUHa9LKXB1Ypu8+mNLAMbRDIN+hBOY4veaz0vcsAZgTqnAqmwlwMNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAIpByUIyUZGQ4g0PYYmCEFcRZqIwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZj8gQvFiV2OkcBuBObcT
0eFaQ51Sn7FXJE1ASmV7TWRCLVuN4GLNFxToi5LQxuiXU/WTxLU1fyDKrC2lW1pV
PO/Jkd77zoM2SMEEDfTDhggyGcDa5JTJk82L4OtGNhYhtwGhkxWuW139IioT2348
IAsv0/DRHNKoIC8xxbh5Wd69OTi0UNzJBWze+0boIRrzUPKtMmFA+XJkGepPsHtC
6V+Z5q21lxy1PbKn0IXEnsvSB1OInfgAT4JduK2PJZcQNXWRORiFnzg9sIEkZcub
wFkLWF3IYTylu7AqVtghQ+xA1U9Cxy3Xk63hL8kySJpjrRmj35aik6S5gb23k6cT
Ug==
-----END CERTIFICATE-----
Generated at Mon Mar 9 23:59:08 2026 by rpki-client