
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: D8R0jV4E7vyQu98GSv+ZvKCHTS1VUch02udN+jjBfq0=
Subject key identifier: 1F:4C:39:01:21:6B:E0:B1:BD:FB:40:1F:DF:9B:E1:B5:7C:7B:43:47
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 5B3C627799651BF9E16EB6867692954451DE518B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 07CA
Signing time: Mon 14 Sep 2026 00:55:19 +0000
Manifest this update: Mon 14 Sep 2026 00:50:19 +0000
Manifest next update: Tue 15 Sep 2026 00:57:19 +0000
Files and hashes: 1: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
2: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
3: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
4: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
5: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
6: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
8: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
9: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
10: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
11: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
12: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
13: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
14: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
15: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: G8pMdA4meJ8hPrQbLdKagXwfwfCyOGREIvY1/w1Rj8s=)
16: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
17: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
18: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
19: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
21: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
22: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
23: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
24: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
26: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
27: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
28: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
29: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
30: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
31: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
32: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
33: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
34: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
35: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
36: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
37: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
38: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
39: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
40: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: DVV+/2t2q4F/UwYf2BwA2+sNCvS3U0sf946czL0uGuw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 00:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3c:62:77:99:65:1b:f9:e1:6e:b6:86:76:92:95:44:51:de:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 14 00:50:19 2026 GMT
Not After : Sep 15 00:57:19 2026 GMT
Subject: CN=1F4C3901216BE0B1BDFB401FDF9BE1B57C7B4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:2a:14:26:0a:7c:67:93:c3:53:76:be:1d:
31:50:92:0f:69:ab:5f:dd:89:4c:f3:07:6a:d4:c9:
d7:f1:ac:a8:cb:0a:46:69:74:f0:89:94:bc:01:34:
be:d4:6b:76:ed:e0:50:fd:8b:6d:2c:34:6e:0b:e9:
49:a0:eb:ae:30:62:83:76:a9:52:4c:f6:ef:c6:70:
46:f9:d3:fe:96:9a:4e:4e:84:a9:90:ce:18:bc:ee:
34:25:3e:83:1c:21:2e:d3:01:17:10:9c:ed:0b:92:
8b:35:85:fe:89:f9:e2:09:e4:98:37:60:1e:18:f1:
d8:6b:cc:e3:e6:91:77:33:6a:c2:0a:15:0a:2b:df:
d6:c5:56:06:cb:0e:0d:e9:2b:ab:bc:67:44:8a:5b:
5a:5a:11:61:d5:84:15:42:36:02:36:43:e3:5f:24:
51:f2:a3:a1:3f:57:91:9a:b1:09:3e:e5:57:cd:37:
00:7b:1e:ea:05:ae:64:17:c3:20:a6:d3:f1:84:ab:
48:d0:5a:7f:6d:f2:7f:82:b7:90:df:fc:4d:a6:17:
20:05:88:7e:0b:ac:81:a5:9a:57:90:6b:eb:a5:fe:
17:1b:23:88:a9:86:48:13:d2:f1:9f:fa:bc:a6:d3:
0c:4b:c4:1d:0b:b2:14:55:9c:99:ca:79:bc:10:dc:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:39:01:21:6B:E0:B1:BD:FB:40:1F:DF:9B:E1:B5:7C:7B:43:47
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:b6:3d:18:af:9a:21:1f:0d:e1:48:5a:aa:c8:f2:df:5f:
91:02:f7:c6:21:7d:32:4c:52:b3:7f:47:77:61:89:b5:3b:6e:
0a:8d:56:4a:1e:ae:07:15:d6:86:eb:e0:cc:c7:f0:0d:12:5e:
91:39:90:fe:9d:58:28:65:23:fd:ec:a4:4e:ca:73:ad:66:93:
16:9d:7f:00:7f:4f:ab:59:7f:1c:6d:ca:d2:87:c8:31:0d:8f:
e0:ad:46:f2:ec:d6:dc:7c:cb:fd:ac:ca:f8:f3:c0:d5:4c:48:
57:8f:a3:3b:f5:27:79:f2:38:72:c1:cd:8f:5a:7c:93:97:61:
42:44:c4:3b:76:16:fa:c5:1e:c4:17:31:ae:7c:cd:0c:7f:c0:
b4:bc:25:00:9c:3a:7a:d9:8e:6b:41:f8:33:94:50:e5:f1:da:
e8:f0:36:ca:b6:14:1f:13:80:1a:a8:63:af:28:22:63:f2:65:
20:df:cc:24:4f:bb:15:6a:22:bf:4b:b9:4e:ef:24:d0:08:29:
a6:89:fe:ff:45:c9:af:9e:30:9e:d7:2a:8d:25:79:74:97:26:
40:94:99:73:67:69:50:1e:45:f5:11:2c:1e:b5:28:02:c9:b5:
0c:c5:a5:f5:ac:b1:69:7e:f8:67:60:2f:b0:fa:40:cd:d1:98:
2b:f1:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 14:50:16 2026 by rpki-client