
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: s+LBaUQUJxgmT3U9yyh02v8+cxqsN1PeAkwMy03+euA=
Subject key identifier: 58:AF:1A:71:97:D0:7B:C3:E6:01:D6:91:46:29:4E:F0:84:F9:68:6A
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6E0EF625141BB5710532B6461DD033E91DC41628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06BC
Signing time: Sat 14 Mar 2026 15:53:16 +0000
Manifest this update: Sat 14 Mar 2026 15:48:16 +0000
Manifest next update: Sun 15 Mar 2026 16:38:16 +0000
Files and hashes: 1: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
2: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
3: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
5: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
6: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
7: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
8: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
9: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
10: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
11: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
12: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
14: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
15: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
16: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
17: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
18: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
19: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
21: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
22: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
23: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
24: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
25: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
26: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
27: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
29: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
30: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
31: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
32: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
33: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: hhXc/MDi5B7M4hlHOjLVsLkGzhKvVMLy6aW3Y+PG9Lw=)
34: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
35: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
36: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
37: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
38: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
39: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: jX3dCdAfk3YgZVJnulxC96prDH60CoGUCwmzuSN1IPg=)
40: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
41: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
42: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
43: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0e:f6:25:14:1b:b5:71:05:32:b6:46:1d:d0:33:e9:1d:c4:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 14 15:48:16 2026 GMT
Not After : Mar 15 16:38:16 2026 GMT
Subject: CN=58AF1A7197D07BC3E601D69146294EF084F9686A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:6d:00:8c:72:d6:b5:bc:a0:96:7a:6c:37:
4b:fb:21:be:24:0c:d8:3a:75:2d:98:25:5b:1e:d3:
3a:3f:93:d4:ab:ef:7e:ae:33:62:81:56:98:f0:63:
69:3b:5a:0e:6f:69:3f:76:f2:c2:2a:b8:e5:4e:a6:
93:29:0e:74:58:a7:e1:43:ba:eb:7f:44:93:c1:78:
b8:a2:c4:c3:76:17:32:6f:7c:7c:b0:a6:a2:a6:00:
b1:90:c6:ee:4f:f4:ae:59:9b:89:2b:eb:a3:05:fc:
98:48:60:3b:c6:4b:48:34:84:4a:ff:55:70:ea:f6:
12:5e:33:50:07:94:8d:8a:32:74:26:f0:d9:d8:b1:
2f:7f:11:12:c9:ba:e5:da:fe:99:91:1e:5b:f0:a4:
ca:e5:ba:f4:dc:2a:f0:0c:cd:9a:ff:74:6f:18:b6:
4a:e6:d2:24:6b:36:f4:f2:44:75:dd:0a:a5:9a:7e:
f7:9f:40:e2:cb:fa:b0:eb:06:ef:1c:31:4f:f9:fe:
83:00:4c:e9:95:b7:04:0f:90:19:aa:f7:c3:91:1a:
2d:b8:98:29:62:c0:9a:4a:11:ed:4e:01:75:ab:8a:
28:85:c2:43:06:b0:36:4d:24:33:fb:58:61:52:74:
50:35:d6:4f:b4:79:95:76:ab:ce:24:0a:7c:da:31:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:1A:71:97:D0:7B:C3:E6:01:D6:91:46:29:4E:F0:84:F9:68:6A
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:89:5e:28:af:0f:4b:2a:1f:2d:a8:e6:15:ed:8a:76:a1:19:
24:31:b6:42:64:bb:d4:6b:9b:df:91:bb:1a:99:93:67:c2:aa:
34:00:05:88:8b:f4:f0:7d:ea:58:8a:bd:25:4d:dc:ae:68:5e:
46:fd:15:7d:88:c2:19:6e:6e:73:6b:74:75:9e:af:58:62:ce:
1f:2c:51:8c:1d:b6:65:a2:ca:5c:30:0f:67:53:be:93:7d:68:
9c:6e:85:d0:d5:cc:e9:b6:b5:47:09:de:13:c5:06:98:0d:6f:
d8:9a:64:56:e7:7c:41:cd:d0:fd:fe:f1:1f:66:d6:31:50:d3:
33:d8:98:43:45:63:5f:f2:36:46:a5:d4:ef:9e:a6:12:94:dc:
6f:a5:eb:7d:70:98:9d:ca:28:2b:63:f5:ea:15:8d:f7:f0:de:
bb:53:23:12:16:2a:63:e6:05:62:a3:37:6f:e8:f6:06:0f:58:
74:7d:39:8b:83:ab:59:07:a9:43:84:81:66:74:32:b5:d4:d0:
64:6d:e3:20:35:74:bd:db:1f:e6:fc:fa:3b:4a:e0:82:20:4c:
6c:53:07:06:b8:d1:c2:eb:a0:bd:f6:dc:48:df:70:17:09:e8:
c2:3b:81:e3:b9:b5:8e:19:4b:6a:41:fd:db:8e:db:b4:3b:b1:
54:93:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:20:31 2026 by rpki-client