
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: 7Q6mZofRhGoZp5Hnq/wb+FPG0ZiyOumMELE819oEDKk=
Subject key identifier: B8:EB:D7:8F:6B:13:58:6D:79:54:A4:D6:C5:D7:B4:2F:5F:B8:5B:CC
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6CBD7353EC329B94782AD799BF38EAC9B59539A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06D6
Signing time: Tue 31 Mar 2026 08:10:33 +0000
Manifest this update: Tue 31 Mar 2026 08:05:33 +0000
Manifest next update: Wed 01 Apr 2026 11:51:33 +0000
Files and hashes: 1: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
2: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
3: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
4: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
5: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
6: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
7: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
8: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
9: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
10: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
11: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
12: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
13: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
14: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 3gaFnrYtd6Py8EXsy9KW8e3iUOtwHI1ksp7skbzBxXc=)
15: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
16: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
17: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
18: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
19: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
20: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
21: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
22: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
23: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
24: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
25: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
26: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
27: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
28: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
29: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
30: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
31: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
32: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
33: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
34: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
35: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
36: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
37: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
38: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
39: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
40: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
41: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
42: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
43: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 08:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bd:73:53:ec:32:9b:94:78:2a:d7:99:bf:38:ea:c9:b5:95:39:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 31 08:05:33 2026 GMT
Not After : Apr 1 11:51:33 2026 GMT
Subject: CN=B8EBD78F6B13586D7954A4D6C5D7B42F5FB85BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:fb:1e:2a:37:d3:4b:a4:5e:ec:04:9f:b1:
1d:2e:78:2e:91:84:1b:08:06:e5:b4:65:aa:a1:5d:
76:d2:d7:2e:e1:da:76:c4:39:3b:e4:36:83:53:ff:
ce:f5:57:48:f3:6d:8a:fa:08:cc:86:55:9d:cc:97:
0f:32:17:b5:a9:0d:80:4c:7b:d3:79:5a:ab:0a:b6:
37:c2:bf:93:9c:ef:5c:d2:d6:6f:88:6a:ea:ba:ba:
34:b1:2e:e0:35:b4:36:66:a7:e9:e7:3f:42:ea:69:
24:b1:9f:1c:cd:55:09:d2:a2:1b:01:e4:c5:ac:28:
eb:f4:cd:4d:9c:de:89:96:02:dd:be:91:63:70:34:
4a:21:42:ec:de:2d:57:32:40:f8:94:04:00:6f:5b:
53:9a:0b:7d:59:8f:ac:f5:7f:84:93:6f:20:34:b3:
00:5f:41:d9:c1:e6:d7:7d:2f:b6:64:58:d3:96:fc:
7d:26:9e:59:b5:cb:7e:14:73:6f:fc:3f:8d:ea:e1:
37:55:d4:8d:7e:55:e6:d8:56:3b:f3:2c:bf:10:1c:
dc:e9:4f:1d:6d:e0:2c:71:4d:84:42:42:c7:1b:b0:
1d:3f:0f:ee:d4:63:0c:6a:44:38:8f:f8:d5:ab:d0:
b5:83:2a:1d:9f:43:5d:1e:0a:26:17:b9:d5:4f:ae:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:D7:8F:6B:13:58:6D:79:54:A4:D6:C5:D7:B4:2F:5F:B8:5B:CC
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e5:d9:d0:23:bd:91:e4:08:cf:31:26:23:9f:a0:4d:39:a2:
68:78:b6:9c:6a:52:82:14:6d:8f:db:ac:17:cd:19:5c:67:0b:
99:98:19:e5:e0:5f:52:a1:dd:0a:9f:8c:ef:ad:02:9c:f0:ac:
cc:b1:47:3a:3f:5f:ba:8b:91:23:90:d0:40:32:b7:01:52:13:
18:64:27:a3:d3:04:25:e2:91:63:48:da:92:ff:32:60:b1:b4:
d8:4d:c6:4d:ed:d9:db:c8:6a:67:f9:75:81:0f:18:c4:4e:e6:
68:bb:d7:7a:11:94:61:34:20:68:1a:08:ea:9f:2a:6e:8d:8e:
fa:c7:8e:4f:36:fd:a9:3c:09:fe:33:3b:09:0b:8e:e6:ae:a9:
68:e6:a6:db:70:f3:e4:66:f2:ee:0f:04:d9:e6:00:f8:40:81:
7e:f0:db:33:08:43:c1:b7:dc:5c:17:0a:42:b5:ba:0b:94:32:
6a:17:7d:0a:67:24:2d:1b:ed:d1:4f:19:2c:34:7c:e6:88:1b:
78:7c:15:86:45:3b:44:a9:6b:0f:29:2e:df:dc:13:e7:43:ae:
6f:36:88:ea:05:39:e2:13:fa:b3:a1:a8:69:8c:f7:01:15:99:
62:bb:2d:a3:64:69:94:5a:a2:e8:d8:30:bc:7c:2b:8f:eb:04:
9e:fe:39:a1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbL1zU+wym5R4KteZvzjqybWVOaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjAzMzEwODA1MzNaFw0yNjA0MDExMTUxMzNaMDMxMTAvBgNV
BAMTKEI4RUJENzhGNkIxMzU4NkQ3OTU0QTRENkM1RDdCNDJGNUZCODVCQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0fseKjfTS6Re7ASfsR0ueC6R
hBsIBuW0ZaqhXXbS1y7h2nbEOTvkNoNT/871V0jzbYr6CMyGVZ3Mlw8yF7WpDYBM
e9N5WqsKtjfCv5Oc71zS1m+Iauq6ujSxLuA1tDZmp+nnP0LqaSSxnxzNVQnSohsB
5MWsKOv0zU2c3omWAt2+kWNwNEohQuzeLVcyQPiUBABvW1OaC31Zj6z1f4STbyA0
swBfQdnB5td9L7ZkWNOW/H0mnlm1y34Uc2/8P43q4TdV1I1+VebYVjvzLL8QHNzp
Tx1t4CxxTYRCQscbsB0/D+7UYwxqRDiP+NWr0LWDKh2fQ10eCiYXudVPrvU5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuOvXj2sTWG15VKTWxde0L1+4W8wwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+XZ0CO9keQIzzEmI5+g
TTmiaHi2nGpSghRtj9usF80ZXGcLmZgZ5eBfUqHdCp+M760CnPCszLFHOj9fuouR
I5DQQDK3AVITGGQno9MEJeKRY0jakv8yYLG02E3GTe3Z28hqZ/l1gQ8YxE7maLvX
ehGUYTQgaBoI6p8qbo2O+seOTzb9qTwJ/jM7CQuO5q6paOam23Dz5Gby7g8E2eYA
+ECBfvDbMwhDwbfcXBcKQrW6C5Qyahd9CmckLRvt0U8ZLDR85ogbeHwVhkU7RKlr
Dyku39wT50OubzaI6gU54hP6s6GoaYz3ARWZYrsto2RplFqi6NgwvHwrj+sEnv45
oQ==
-----END CERTIFICATE-----
Generated at Tue Mar 31 10:35:07 2026 by rpki-client