
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: xhWtV7v+8cP4WqltRNu5wAnaL5gS899iyilQnTmGxrw=
Subject key identifier: 58:A1:39:46:14:60:ED:71:9E:F6:B7:D3:55:07:43:7C:5A:F2:66:6C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 1A18A9069D71D49EF3319780C57665ADD87B74CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 080C
Signing time: Mon 26 Oct 2026 11:17:15 +0000
Manifest this update: Mon 26 Oct 2026 11:12:15 +0000
Manifest next update: Tue 27 Oct 2026 14:54:15 +0000
Files and hashes: 1: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
2: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
3: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
4: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: YG3j8Mmw+h9ZEPqTtR5GyZzlcfGE+9ZBCFMYNVbZCts=)
5: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
6: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
7: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
8: 3139342e33312e3139372e302f32342d3234203d3e20313532373236.roa (hash: fnlzFjlZYHqGcwGwrVLYX0etb5xRMldIiM5/qioqJCc=)
9: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
10: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
11: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
12: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: EK+XXjX9beuphvsOJqRkCLgksPeOmMaixGjse5a+gDs=)
13: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
14: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=)
15: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: Xvqp6d2tCZnDciffj3hq6Qb1JaqBL/EwgvTbKq//+Ks=)
16: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
17: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
18: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
19: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
20: 322e35392e36322e302f32342d3234203d3e203536363535.roa (hash: 4EVwlY91Vkuy79loMlCVFMeATW2Zd/Dn57Gy1wS/GpY=)
21: 38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa (hash: ZhP+zpXWUfzVW2D3Gh421wDniumfO+kc6/F7MRB7boU=)
22: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
23: 322e35392e36332e302f32342d3234203d3e203536363535.roa (hash: nG8puCpSNLbVRezQJ6NEb6pqiujF9Ii465n8Wl9qCgE=)
24: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
25: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
26: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=)
27: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
28: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
29: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
30: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
31: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
32: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
33: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
34: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=)
35: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
36: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
37: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: jX4C5dkRnCIJowfhDMXYwrQg434yiv1EsWttrHB9oRM=)
38: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
39: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
40: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=)
41: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
42: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:18:a9:06:9d:71:d4:9e:f3:31:97:80:c5:76:65:ad:d8:7b:74:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 26 11:12:15 2026 GMT
Not After : Oct 27 14:54:15 2026 GMT
Subject: CN=58A139461460ED719EF6B7D35507437C5AF2666C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:5f:66:8b:b1:cb:89:ec:f3:38:b0:c3:95:
85:7c:3d:cb:e5:e1:15:89:8f:69:31:be:0d:f8:49:
f1:87:0d:9c:0b:34:70:b8:1f:f4:2e:01:4f:bf:fc:
ab:c2:b4:72:10:2f:c6:cc:9e:85:1b:fb:d2:7e:bf:
22:de:28:62:ab:66:d6:c6:47:58:e2:de:1f:36:fc:
13:b0:df:ab:62:61:fc:2e:ee:94:6e:fc:e3:c7:3c:
9e:3a:0e:c3:24:5d:13:4d:c3:84:0f:25:0f:c3:b3:
0b:42:73:5e:08:c6:10:07:cf:e3:46:f5:7d:a3:33:
d8:99:3c:9d:c8:ee:bb:cc:66:e4:17:41:bd:b4:71:
79:c1:6c:0b:6d:f6:e9:f5:29:38:33:87:87:f3:4d:
4d:6b:aa:19:58:39:94:02:64:49:8f:72:8c:16:52:
fa:c8:29:f0:64:43:74:0f:70:8b:74:85:b6:49:0c:
7d:2e:6f:eb:82:19:2c:a2:f4:ca:9d:de:32:ae:36:
e5:92:ec:88:b3:ca:a6:14:2d:bf:2a:2c:d3:13:92:
87:8b:ab:fb:7c:a4:e7:bf:da:cd:90:f7:7b:dc:79:
5a:67:c9:87:07:8f:03:eb:c9:92:3c:d9:00:5c:3a:
f7:94:b9:ab:9e:5c:d1:94:24:85:83:15:f4:34:d0:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:39:46:14:60:ED:71:9E:F6:B7:D3:55:07:43:7C:5A:F2:66:6C
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e2:2d:53:25:3a:d8:1b:9e:ff:1e:00:7d:7b:c1:76:6f:3f:
0e:76:a1:29:01:03:39:c6:d3:6f:92:5c:e1:29:fe:10:31:aa:
b5:a6:b5:b5:f1:7c:0a:5f:d9:cb:a8:7a:97:ee:5b:17:bf:67:
2c:d7:34:3c:5c:1b:d4:21:66:40:07:4e:47:a3:91:c4:3a:ab:
65:03:1b:06:88:f9:d8:29:bd:02:a4:4e:af:fb:4b:81:cd:fe:
67:e9:a1:b8:54:40:8d:71:d3:6c:09:98:37:aa:a5:50:a7:f9:
e7:cc:c8:fe:8e:8b:93:69:a0:ae:d9:69:c6:22:41:fb:77:b2:
6d:2a:45:64:66:5d:8a:f1:44:ce:86:42:d1:c9:21:73:ed:da:
68:cd:cc:72:4c:b5:91:63:4e:1a:7e:dd:0a:ff:c3:99:04:cf:
84:ad:79:0f:5a:e4:87:91:97:26:e5:b5:e0:c9:72:84:33:af:
81:48:c2:a3:51:5d:3f:61:19:fe:b7:b4:fd:08:d3:79:18:f2:
5f:85:1a:33:3c:33:b4:a8:26:0f:21:be:42:3d:3d:2b:2e:8b:
c6:4d:29:c7:75:50:a0:fa:40:31:af:e5:94:8e:3a:54:7e:56:
3e:fd:1f:de:91:36:bc:f2:d9:38:6a:f6:fb:1c:f8:f7:ee:e2:
28:07:d1:2c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGhipBp1x1J7zMZeAxXZlrdh7dMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjEwMjYxMTEyMTVaFw0yNjEwMjcxNDU0MTVaMDMxMTAvBgNV
BAMTKDU4QTEzOTQ2MTQ2MEVENzE5RUY2QjdEMzU1MDc0MzdDNUFGMjY2NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVF9mi7HLiezzOLDDlYV8Pcvl
4RWJj2kxvg34SfGHDZwLNHC4H/QuAU+//KvCtHIQL8bMnoUb+9J+vyLeKGKrZtbG
R1ji3h82/BOw36tiYfwu7pRu/OPHPJ46DsMkXRNNw4QPJQ/DswtCc14IxhAHz+NG
9X2jM9iZPJ3I7rvMZuQXQb20cXnBbAtt9un1KTgzh4fzTU1rqhlYOZQCZEmPcowW
UvrIKfBkQ3QPcIt0hbZJDH0ub+uCGSyi9Mqd3jKuNuWS7IizyqYULb8qLNMTkoeL
q/t8pOe/2s2Q93vceVpnyYcHjwPryZI82QBcOveUuaueXNGUJIWDFfQ00KPpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWKE5RhRg7XGe9rfTVQdDfFryZmwwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeItUyU62Bue/x4AfXvB
dm8/DnahKQEDOcbTb5Jc4Sn+EDGqtaa1tfF8Cl/Zy6h6l+5bF79nLNc0PFwb1CFm
QAdOR6ORxDqrZQMbBoj52Cm9AqROr/tLgc3+Z+mhuFRAjXHTbAmYN6qlUKf558zI
/o6Lk2mgrtlpxiJB+3eybSpFZGZdivFEzoZC0ckhc+3aaM3Mcky1kWNOGn7dCv/D
mQTPhK15D1rkh5GXJuW14MlyhDOvgUjCo1FdP2EZ/re0/QjTeRjyX4UaMzwztKgm
DyG+Qj09Ky6Lxk0px3VQoPpAMa/llI46VH5WPv0f3pE2vPLZOGr2+xz49+7iKAfR
LA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:13 2026 by rpki-client