
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: OWQcMkXoQWRpyjsPghGRPU02eYU+zf34SmW1POrpUy4=
Subject key identifier: 02:B7:1B:6F:A8:50:2D:33:2E:C9:9D:8A:86:28:3E:A3:68:6A:DC:D8
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 059EBA64401F27114ED3BD03D866868E8E36D048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 07B7
Signing time: Sun 30 Aug 2026 15:23:43 +0000
Manifest this update: Sun 30 Aug 2026 15:18:43 +0000
Manifest next update: Mon 31 Aug 2026 18:59:43 +0000
Files and hashes: 1: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
2: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
3: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
4: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
5: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
6: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
8: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
9: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
10: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
12: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
14: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
15: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
16: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
17: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
18: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
19: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
21: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
22: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
23: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
25: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
26: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
27: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
29: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
30: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=)
31: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
32: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
33: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
34: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
36: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
37: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
38: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
39: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
40: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: clbkp7gmqkvFlPdOwxIASH7QiF+q3hc9A1JF9HrTAvE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 18:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9e:ba:64:40:1f:27:11:4e:d3:bd:03:d8:66:86:8e:8e:36:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 30 15:18:43 2026 GMT
Not After : Aug 31 18:59:43 2026 GMT
Subject: CN=02B71B6FA8502D332EC99D8A86283EA3686ADCD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:a0:8b:f6:62:b6:bb:4c:73:c4:07:39:da:
e4:ea:c1:e3:2e:f9:36:a1:76:e3:bf:57:a5:ce:8d:
22:6c:0d:86:34:f7:fa:93:f2:89:1f:ce:40:81:2d:
64:db:15:ad:ee:84:73:73:7e:65:6c:b5:ac:ff:1e:
39:58:58:a8:6d:8e:78:4a:92:79:f5:59:cf:5d:63:
36:df:9a:2f:ed:b8:64:d8:0a:94:3e:90:52:5b:81:
fe:60:ad:48:96:8c:21:34:24:5c:60:fd:cc:47:36:
32:1e:d5:d1:d0:1a:5b:de:62:8f:eb:41:8e:c9:07:
34:d7:ca:c6:44:a7:42:15:bd:6a:39:e2:c0:a8:49:
b3:4f:70:50:6e:5a:7c:7a:fd:44:d7:a9:c8:ec:c8:
5a:0d:55:f9:0f:88:a3:6b:cd:9c:35:94:f7:60:ff:
3a:cf:e8:33:2e:f2:51:87:fc:c9:6b:64:4c:2e:dc:
f8:e2:e1:23:3b:32:21:91:27:bf:95:89:44:0b:ba:
8a:bf:78:e0:d6:4c:bc:05:f6:e2:57:c6:21:43:34:
d3:cd:3b:5b:31:cc:76:d1:c3:4d:95:35:48:be:2e:
7b:17:81:0f:15:25:ad:06:30:5c:2e:0f:c2:c2:16:
5c:96:b7:f2:0c:4d:f5:d4:7e:28:2a:08:0b:81:7a:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:1B:6F:A8:50:2D:33:2E:C9:9D:8A:86:28:3E:A3:68:6A:DC:D8
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:73:92:35:99:27:53:72:ec:48:bb:1e:ae:95:bd:a5:3c:e8:
ae:d2:04:4d:3a:e9:e6:51:ef:8c:22:d9:27:d7:ff:27:2b:4f:
38:6e:3c:9a:55:29:d2:14:a8:3e:d8:9b:b0:cf:ba:d3:68:c0:
27:53:0a:2e:cb:8d:22:b9:ee:5f:85:2d:e1:12:9e:ce:9f:fb:
6e:19:5d:c4:54:bf:e9:9b:82:30:0a:85:90:19:b8:80:72:d0:
f4:2b:7e:e2:5d:07:dc:83:89:de:7e:9d:93:ce:38:07:dc:3f:
65:20:24:27:d8:81:b8:10:4d:1f:3a:b8:27:53:97:1a:ee:d7:
4d:7d:82:09:ca:28:4d:de:d5:ce:a7:78:1b:08:80:d8:79:c6:
82:ed:48:4c:8d:a7:2e:df:2a:c8:94:1a:73:ce:62:11:9b:24:
f5:1d:20:21:fc:e6:45:24:a7:dc:bc:27:5d:ef:84:bd:5f:81:
b0:68:e3:f1:1f:55:01:c3:6c:6c:a5:b5:01:63:80:d7:5a:36:
39:5a:05:54:dd:4a:6b:6d:6b:58:e3:88:20:75:af:bf:86:c1:
b0:91:49:ac:9b:ed:41:1e:05:43:c1:31:75:66:e9:a8:5d:01:
e2:73:6d:04:b4:65:bc:d6:7b:20:62:7b:6b:ea:f3:4e:98:72:
d7:e8:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:15:42 2026 by rpki-client