
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: EWlC9j7G0w8mLP8yHNHmgynbfoDc29EGqvnLC3YNYZo=
Subject key identifier: 4B:02:9D:F7:FF:42:DE:AD:8C:52:FC:7D:32:D5:C2:36:04:3E:5E:DE
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 54696E51B97D388F21B8628D42DF33A364E2D7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06E4
Signing time: Thu 09 Apr 2026 06:16:53 +0000
Manifest this update: Thu 09 Apr 2026 06:11:53 +0000
Manifest next update: Fri 10 Apr 2026 09:28:53 +0000
Files and hashes: 1: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
2: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
3: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: MB9jj2PCrp8p0Td4qbS27T+Cb6ft+hQuY7R7ypqHbrQ=)
4: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
5: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
6: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
7: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
8: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
9: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
10: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
12: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
13: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
14: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
15: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
16: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
17: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
18: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
19: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
20: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
21: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
22: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
23: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
25: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
26: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
27: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
28: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
29: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
30: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
31: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
32: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: uyj9M5GZXb1vwLJgAddMi8WHcGBSQHUnQEDwce5+NPA=)
33: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
34: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
35: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
36: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
37: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
38: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
39: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
40: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
41: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:69:6e:51:b9:7d:38:8f:21:b8:62:8d:42:df:33:a3:64:e2:d7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 9 06:11:53 2026 GMT
Not After : Apr 10 09:28:53 2026 GMT
Subject: CN=4B029DF7FF42DEAD8C52FC7D32D5C236043E5EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:a8:de:9a:3b:52:97:0f:f7:e8:12:15:51:
bf:b5:19:d8:ca:d8:6d:5b:70:0a:16:a6:14:df:af:
a3:35:db:f0:da:2e:09:90:18:d2:64:84:aa:03:5e:
0f:b9:4d:af:df:f1:64:4b:4c:e0:92:b1:99:be:87:
02:b3:ac:c3:d1:31:3b:b9:8e:f7:6a:54:69:4c:01:
2f:3d:70:8f:dc:75:1a:d7:7a:23:fb:eb:2f:d4:c7:
ba:11:b3:45:21:f9:bb:71:45:1f:45:b4:ef:29:7f:
ce:1e:49:84:24:d0:81:e0:9f:01:fe:c8:71:dc:8e:
c8:de:22:70:18:0b:24:f9:25:67:91:49:c6:a6:8f:
74:26:c7:b7:53:e2:0f:f1:4e:c6:88:23:25:89:8d:
64:68:79:5d:a1:78:1b:2d:ea:af:7e:cb:68:1b:cd:
2e:bd:94:59:38:bf:b4:6c:e1:d6:30:10:f5:ca:80:
7e:c1:9c:14:a2:e9:48:f7:26:9f:dd:03:06:fa:74:
89:25:20:d6:e7:0a:37:fe:ac:a8:3f:94:43:94:9b:
38:c3:57:73:6e:2e:33:31:ee:d3:68:d3:fa:34:ef:
84:03:50:02:af:c2:a7:35:41:78:72:8d:3c:69:f1:
20:f7:0e:dc:4c:0c:a6:45:14:b3:ce:47:e7:19:98:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:9D:F7:FF:42:DE:AD:8C:52:FC:7D:32:D5:C2:36:04:3E:5E:DE
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5d:03:9b:f5:2e:cc:ff:0c:c9:50:44:56:2d:08:44:b0:b2:
ee:15:2c:c1:e1:3d:fd:15:66:35:8c:db:2a:6e:74:63:5d:e4:
8c:a9:e5:44:1f:12:9d:ba:48:3e:87:fe:37:a1:89:09:80:ad:
94:e4:ad:f6:6f:33:fe:4d:a5:15:04:0c:52:c4:58:28:6a:b8:
cf:93:54:b4:eb:1b:a0:41:cd:a3:0a:a0:56:02:e3:0c:93:47:
ca:46:67:9b:9a:34:1d:57:28:5b:35:c2:1c:f4:97:62:39:83:
12:29:33:05:01:20:08:ca:86:1c:08:d5:fa:4f:71:fd:3e:3e:
3c:a9:ba:35:3c:d8:d5:d2:18:bc:d5:3b:66:2e:98:0a:14:94:
60:41:eb:c4:f7:fd:87:d1:da:d5:37:c7:60:4e:f0:f5:1c:17:
e2:fd:82:14:27:95:28:7e:54:d0:ed:38:1f:be:5c:b8:0d:73:
96:45:23:89:df:04:ad:93:4c:0e:7b:f5:a8:42:4e:d2:36:af:
97:5a:37:07:03:7f:62:fa:85:05:83:a5:e5:4b:9c:32:4c:bc:
60:ad:05:1f:8d:44:9b:17:a2:2f:48:02:5c:94:40:a1:05:d4:
6b:cf:62:0d:12:93:98:3f:40:37:32:20:8a:34:aa:08:c9:c8:
68:06:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:07:29 2026 by rpki-client