
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: 4JFSAOcmP+NZNjRJVgNxbymA9nVxK0p+NR82Oc8ovPg=
Subject key identifier: C9:0D:F5:43:E7:C9:7C:E5:EF:70:23:F4:F6:A1:E5:E4:98:61:E6:41
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6FCE71E97F1512C690F247564ABC9B238FDCB4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06E7
Signing time: Sat 11 Apr 2026 02:23:52 +0000
Manifest this update: Sat 11 Apr 2026 02:18:52 +0000
Manifest next update: Sun 12 Apr 2026 03:56:52 +0000
Files and hashes: 1: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
2: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: lehT7hTBzwl0Ch5tp/hawJn1rOpH/R15l0L6CtmGXcs=)
3: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
4: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
5: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
6: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
7: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
8: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
9: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
10: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
11: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
12: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
13: 34352e39352e3231342e302f32342d3234203d3e20313938323530.roa (hash: cWZ4izllTaa4CjT3fbEMgCbmIhf6LWTGafANc9j4YVM=)
14: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
15: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
16: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
17: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
18: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
19: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
20: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
21: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
22: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
23: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
24: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
25: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
26: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
27: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
28: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
29: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
30: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
31: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
32: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
33: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
37: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
38: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
39: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
40: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
41: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ce:71:e9:7f:15:12:c6:90:f2:47:56:4a:bc:9b:23:8f:dc:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 11 02:18:52 2026 GMT
Not After : Apr 12 03:56:52 2026 GMT
Subject: CN=C90DF543E7C97CE5EF7023F4F6A1E5E49861E641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:19:f8:71:a6:f6:59:dd:30:64:bc:85:5a:
08:f9:f3:ad:3f:44:df:8f:b0:5c:da:fb:ce:e6:a3:
c6:8a:be:6a:78:17:96:f8:2e:67:80:88:96:86:3f:
a3:f9:c6:bd:1f:f9:33:f2:8f:7a:ac:aa:ee:f7:14:
38:c3:20:23:79:d6:2d:da:19:7f:1e:24:ea:f1:11:
b4:d2:d9:67:3a:46:6d:42:0e:21:d0:b6:86:ae:4a:
51:8c:10:80:51:99:f7:82:6d:f2:78:27:27:f2:8b:
5c:06:de:e8:6e:5a:7a:61:c3:f9:77:ed:3d:76:29:
be:37:d7:dd:a1:bc:60:f8:6d:1e:f1:e5:1a:ad:e2:
b6:f5:97:45:f7:3a:44:32:d0:7c:81:94:d0:87:4c:
de:bf:95:ee:89:b7:bd:5e:c5:a9:0c:c5:14:33:c1:
3d:9f:7f:36:dc:90:3d:36:31:22:ab:f7:7b:54:a7:
ce:f4:43:6f:7e:78:8a:65:46:9e:93:67:f8:19:2f:
bc:ff:24:69:5a:51:be:0d:4e:a1:e1:2a:1d:1f:7c:
89:bc:30:14:aa:a9:46:fb:be:93:35:75:db:05:af:
09:af:08:6f:7e:68:21:83:8b:a4:2e:4a:79:54:26:
27:8a:3a:7a:05:ab:50:e0:9c:07:21:44:70:e5:84:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:F5:43:E7:C9:7C:E5:EF:70:23:F4:F6:A1:E5:E4:98:61:E6:41
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:33:9a:ba:16:d5:bd:ce:4c:fb:0b:7c:ac:4d:08:3e:38:0b:
dc:20:a3:7b:4c:22:fc:07:a3:59:af:d1:79:6f:83:dc:b0:9e:
b2:7f:2d:21:09:ad:79:67:84:35:d4:6b:8c:b0:9b:16:ea:14:
65:b1:6f:e2:cd:a4:63:5f:6a:95:4e:c0:d1:ab:b5:dd:32:47:
cd:1a:34:41:85:88:c7:ef:0d:a1:57:3c:f7:0f:b8:7a:94:56:
09:74:01:b0:e6:8c:c8:7d:60:4a:3a:10:64:97:bc:dc:36:c6:
e7:47:73:73:f9:c7:0f:85:02:ed:69:42:44:8d:15:79:fe:2c:
ac:18:d3:a6:14:88:0a:6e:00:b8:d0:b8:f2:bc:21:d3:36:ff:
72:d8:88:1f:33:d2:6b:91:46:37:50:3a:bb:d0:4e:92:4b:8a:
12:70:d5:b4:5f:65:b7:29:d1:ee:a3:26:c9:6a:41:b3:24:ee:
70:e3:a0:0a:bf:17:a0:fd:36:0c:30:a0:81:d8:ec:d7:b2:aa:
29:09:06:91:9c:e4:b1:70:30:3d:e1:59:72:c5:dc:32:d7:62:
ff:fe:69:c1:be:cb:04:85:e3:14:4f:39:44:d5:3d:9e:5c:a3:
47:88:f7:16:c6:bb:95:61:9a:81:3d:da:12:4e:98:21:a0:34:
91:15:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 07:25:27 2026 by rpki-client