
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: vMATKuxQxg3xANzkmxY1SaABiamfeN9u919xeuWE5YI=
Subject key identifier: 1A:B4:C3:CC:BE:D4:C0:51:1D:4A:16:9F:F6:55:C5:C6:E1:4E:1D:86
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4555AF499598741EEF3A43D34A0C36D130051DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 06DC
Signing time: Fri 03 Apr 2026 09:16:37 +0000
Manifest this update: Fri 03 Apr 2026 09:11:37 +0000
Manifest next update: Sat 04 Apr 2026 10:05:37 +0000
Files and hashes: 1: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
2: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
3: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
4: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
5: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
6: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
7: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
8: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
9: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
10: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
11: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
12: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
13: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
14: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
15: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
16: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
17: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
18: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
19: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
20: 34352e382e3231372e302f32342d3234203d3e20323134303235.roa (hash: +sPrCW3WqbeCRN41T+z7+AXOa7VPtKEnTOhpV5D7dWM=)
21: 36322e332e32302e302f32342d3234203d3e203633313939.roa (hash: kA6rLFNlx80Eesn7dN44PcjtBhqBSQbqVN30KxWFEiA=)
22: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
23: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
25: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: hVh2Zzt9WsqbslxuvWdLiYb3w4BVpgXG/otKerzSp6M=)
26: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
27: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
28: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
29: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
30: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
31: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
32: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
33: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
34: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
35: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
36: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
37: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
38: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
39: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: uyj9M5GZXb1vwLJgAddMi8WHcGBSQHUnQEDwce5+NPA=)
40: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
41: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
42: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 07:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:55:af:49:95:98:74:1e:ef:3a:43:d3:4a:0c:36:d1:30:05:1d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 3 09:11:37 2026 GMT
Not After : Apr 4 10:05:37 2026 GMT
Subject: CN=1AB4C3CCBED4C0511D4A169FF655C5C6E14E1D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:fc:84:50:4c:98:97:e0:02:4a:47:31:f2:
83:29:53:13:8e:13:d4:f9:55:e2:2f:3c:a1:15:bc:
78:29:3b:0d:fe:fe:21:29:b4:4c:46:4c:62:15:ae:
93:ac:27:b7:6d:1b:86:d1:6a:5f:62:97:0a:a6:08:
2c:15:c7:dc:b0:a5:d3:ef:05:a0:73:02:7c:15:5f:
85:04:c9:0f:d3:a6:fb:6a:58:91:3e:f2:33:bd:71:
9c:1a:f7:12:c3:51:10:af:00:41:09:33:c9:9f:65:
61:89:2b:18:83:d4:22:be:2c:f6:3a:bb:e7:85:76:
0e:79:b9:a2:d5:24:25:38:fb:ec:fb:d3:33:73:0c:
21:39:74:17:ba:89:1b:f8:a1:4d:5f:9e:7b:16:04:
fa:bb:5b:6b:c0:5e:46:95:43:86:bc:de:32:aa:43:
78:07:76:d0:d9:6d:b9:22:fb:64:77:c6:a5:d8:0d:
56:77:78:db:b2:b5:35:71:49:94:79:2a:df:bb:ec:
84:fd:d9:8c:6e:b1:6f:3f:2f:a5:95:21:6c:38:52:
3a:cc:45:57:37:70:2e:0a:5a:6c:8b:74:e5:89:2a:
98:a8:33:97:68:0e:0f:ee:8f:04:5e:02:62:f3:bc:
34:43:70:cd:a7:1c:94:99:4c:fd:5d:72:5b:64:e7:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:C3:CC:BE:D4:C0:51:1D:4A:16:9F:F6:55:C5:C6:E1:4E:1D:86
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:3d:5a:7a:a1:37:3f:db:4f:78:ab:45:42:ae:b1:37:6a:
65:fb:3d:fd:13:23:4e:d7:e4:c8:b3:11:09:84:28:70:85:a4:
ee:f9:f5:c6:ee:c7:62:83:55:cb:9e:74:92:c8:3f:12:0a:07:
fc:c1:5d:07:95:c0:c6:d4:3f:ff:fb:c3:b6:6f:56:09:f0:1b:
a1:ee:c8:36:4e:33:40:32:9a:e2:9b:db:ee:70:6a:b2:d3:b4:
20:21:a1:8d:a1:80:3e:05:0f:04:fe:de:be:58:2c:4b:8e:13:
54:37:51:b8:4f:dd:c5:5e:24:41:cb:3e:be:78:e7:62:d8:d4:
b4:d0:b6:19:7a:59:3d:86:ed:e5:d5:24:25:fa:07:80:c8:23:
12:43:cf:9f:e5:da:6a:ec:57:71:35:5c:b6:30:83:13:91:7f:
3c:f1:3f:a2:96:e3:80:f8:48:0e:4a:5d:d7:f5:2d:66:ae:b0:
27:67:b5:75:22:b0:18:33:d0:cb:1d:1a:10:4e:de:3b:8a:ed:
f8:d8:3c:0b:bf:f5:8c:2d:cb:e4:b1:71:dc:08:1a:5d:e0:e2:
c8:36:6a:f3:48:71:fb:5d:0b:1a:8d:5f:ed:c7:48:df:ff:dd:
24:a5:6d:c7:4a:3f:3e:df:c4:53:62:eb:8a:04:d6:ad:04:c6:
e0:40:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 11:39:29 2026 by rpki-client