
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: 8g1ahDlGRNcFg8FltxjIergQldhpTDb13E6Beljlm2I=
Subject key identifier: F8:AF:18:96:3D:72:F4:FB:B7:FA:12:D6:D4:5A:11:C8:95:0E:BC:C5
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2BA7D512AC754C36FBDCBE5E9B7748641A2ED309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06CD
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 16:56:10 +0000
Manifest next update: Thu 26 Mar 2026 17:13:10 +0000
Files and hashes: 1: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
2: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: d7R/RdnBvU80m5ChpVPLFCc1XyjR40ecoxFCX2D3260=)
3: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
4: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
5: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
6: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
7: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
8: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
9: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
10: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
12: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
13: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
14: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
15: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
16: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
17: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
18: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
19: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
20: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
21: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
22: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
23: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
24: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
25: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
26: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
27: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
28: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
29: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
30: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
31: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
32: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
33: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
34: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: 986H7DOlh4JMdwtbTV1uEyMKn5HaeRMCufNEqQ0K23s=)
35: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
36: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
37: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
38: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
39: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
40: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
41: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
42: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
43: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:a7:d5:12:ac:75:4c:36:fb:dc:be:5e:9b:77:48:64:1a:2e:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Mar 25 16:56:10 2026 GMT
Not After : Mar 26 17:13:10 2026 GMT
Subject: CN=F8AF18963D72F4FBB7FA12D6D45A11C8950EBCC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:19:b7:f8:18:68:7e:c4:e0:ab:0a:29:34:f0:
2d:43:c0:d1:b8:4f:4b:74:7c:f7:f2:6b:40:42:3d:
ac:de:4d:c2:77:5f:37:52:ee:0a:45:22:66:c7:cf:
49:81:3a:db:db:bd:b1:e9:5a:87:b5:45:55:0e:83:
e8:6b:24:f3:85:90:ed:a1:5a:32:54:9c:58:1e:c4:
ea:80:29:e2:44:d5:de:b5:43:cd:a8:a9:f3:dc:a2:
0e:74:7e:f9:ca:46:23:33:8b:88:0e:0d:07:8b:0f:
5e:bb:54:66:8f:f4:cd:c9:5d:08:f7:9a:44:b2:6d:
1b:a4:9e:fc:f4:71:ef:15:3b:0b:33:12:89:49:2e:
e1:97:c1:fa:e4:80:1e:5b:34:5a:7d:99:5f:30:40:
05:af:5f:83:c5:c8:9a:ea:8a:ab:4b:7a:61:7b:01:
d1:4c:f8:a3:b6:7a:21:ec:2d:a1:1e:35:7a:25:ec:
59:35:23:f6:56:92:10:4e:1a:60:77:24:b6:bd:9e:
61:56:b7:6d:cd:0f:a1:30:a9:89:51:b7:1d:bc:12:
f0:5d:df:13:93:3f:c6:77:f2:4c:fb:dc:00:7a:12:
83:3f:3e:63:d9:40:24:69:7d:8c:9a:65:64:93:b0:
67:4d:55:44:54:c6:1f:d2:84:ad:b3:77:4f:08:31:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:18:96:3D:72:F4:FB:B7:FA:12:D6:D4:5A:11:C8:95:0E:BC:C5
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f2:f0:a7:a8:8a:45:99:df:62:f1:b5:72:d6:93:d9:06:3c:
c0:ee:a0:14:85:92:85:19:c5:89:48:11:a8:e1:50:d3:3f:fc:
28:28:df:d7:c4:b7:b9:19:12:0e:c2:2f:cb:7a:44:83:87:90:
b6:e7:f8:97:fd:cd:c5:96:67:bd:10:4a:4a:08:2c:95:8b:c1:
54:7a:b7:52:6a:ce:5f:46:2e:c9:c7:9a:98:3e:6f:95:e8:35:
db:df:30:57:c1:8b:c8:77:77:5c:40:ba:91:23:16:df:23:7b:
38:7c:6c:59:d8:b5:1e:a5:b7:84:dd:f0:11:4d:30:54:81:03:
9a:7b:41:20:75:a9:63:78:55:a9:52:9f:3b:64:81:e6:e1:c1:
35:37:a3:58:3d:68:9e:75:62:cc:17:e9:7e:d1:b4:d2:fb:67:
24:7e:16:5e:5c:0c:fc:db:63:af:a9:7d:d9:0a:97:44:62:31:
d3:28:1b:6d:31:8d:5b:94:01:8f:61:ea:89:25:7e:65:bb:6c:
e2:a0:25:01:ce:5f:74:83:61:d9:7e:3a:da:62:05:cc:7d:09:
d9:ff:17:8a:74:e3:f4:cb:b6:a7:c4:06:2a:5c:ee:d9:27:03:
34:27:8e:5b:ee:36:da:63:bb:c2:22:1d:cd:ce:f5:05:d4:15:
28:a6:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:48 2026 by rpki-client