
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
File: 22BFD4E021547D030AC10B0213535D4C6968EEDE.mft (raw, json)
Hash identifier: QM/fHM/B+bGdRiF56ME2A4nO8tb1080o2PapjKdoZJw=
Subject key identifier: 59:79:F8:98:6F:7D:27:19:B0:45:DA:40:C3:75:AD:37:40:4B:7B:23
Authority key identifier: 22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
Certificate issuer: /CN=22bfd4e021547d030ac10b0213535d4c6968eede
Certificate serial: 56BA571FA5BA67359482F5722732B5C45E6F8A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
Manifest number: D2
Signing time: Wed 03 Jun 2026 17:48:25 +0000
Manifest this update: Wed 03 Jun 2026 17:43:25 +0000
Manifest next update: Thu 04 Jun 2026 20:36:25 +0000
Files and hashes: 1: 38372e3235342e31362e302f32342d3234203d3e203631333137.roa (hash: OnoBFru6gXkLx/IpdA8BMf1f3KgH5QjPForAWZMVmzo=)
2: 38372e3235342e392e302f32342d3234203d3e20313534303439.roa (hash: Hq9PYTOQCseLfaxNiEXnFMG4fnzCVo7PsWTjAFrRtkw=)
3: 3231372e32352e31302e302f32342d3234203d3e20383334.roa (hash: 8dkRhViDL6svksS7wszcUnYLTFZf0MLMOb3PDwzqRgU=)
4: 3138352e3231302e3136392e302f32342d3234203d3e203537303433.roa (hash: 7z9K9FbgeMuXCaln/1hsSe4DLUK7TEmfgfG1Y1Dfr7g=)
5: 3231372e32352e392e302f32342d3234203d3e203230393135.roa (hash: rmdhD9oEv5bK0HHyZCb7v/EPNkPHtC4nPe4iuyupLhE=)
6: 38372e3235342e342e302f32342d3234203d3e20323039313034.roa (hash: dT2D5TLXRAKJLruER8UV5zR5nd3cD/krMcbOOopIoWg=)
7: 3231372e32352e31342e302f32342d3234203d3e2039333138.roa (hash: g2ofm16r16kl7irVfvgX1+7ziEvLdY7dJdeeSirOg4Y=)
8: 3231372e32352e31352e302f32342d3234203d3e2039333138.roa (hash: R5MZ0SUrJW4CLZizJcr1R/s4uU+VevPvUalEFyfnK94=)
9: 38372e3235342e322e302f32342d3234203d3e20383334.roa (hash: 0lftYrBwhyfbi4cjY9zWfmHR2CJaW7nri13R884O3dA=)
10: 38372e3235342e31372e302f32342d3234203d3e203631333137.roa (hash: iUdPEp/zg1lgw8SWDOnC/cWw7iD/otvfqF3P7vlXliU=)
11: 38372e3235342e32372e302f32342d3234203d3e20323036313336.roa (hash: JzFwyOYzVK25Z09X3NCkKQHCSO5Wep/1CMAuENJROT8=)
12: 3231372e32352e362e302f32342d3234203d3e203633373933.roa (hash: INM60jl1cf01X8Dit6vIBFxI1U5BBx8k+1yHI+R5aYQ=)
13: 38372e3235342e332e302f32342d3234203d3e20313337343039.roa (hash: oOqDRHnQhKkW0bsS7sECikqkcHxGG+LEWNClGo/2tL4=)
14: 3231372e32352e352e302f32342d3234203d3e20343032323638.roa (hash: m6GVFGT3chGDddVmeN56HbfdXm/0nlLfVkYgH2NWLMU=)
15: 3231372e32352e31322e302f32342d3234203d3e203533333536.roa (hash: ISZePjQZHgjZYw73RzwsKrdIyiH3v0ys4nWleWv3vxk=)
16: 3231372e32352e31332e302f32342d3234203d3e20313939313836.roa (hash: BDZh1Pi8rbZh6nir2QxJGP9zEek0IBLtx5Db2CdXo48=)
17: 38372e3235342e32312e302f32342d3234203d3e2039333034.roa (hash: fhuLKVJWOGU8sXL3S0QoWozOsb/OD2qOzlxonYH/GYk=)
18: 38372e3235342e31382e302f32332d3234203d3e20383334.roa (hash: Q4p501nKB0sgnI21+akfDBIvF6GWoCBkfDAhgfWAEgM=)
19: 3231372e32352e382e302f32342d3234203d3e20313531333839.roa (hash: ION442ZnInYYQy2Ta0C69D4We7O4SxjZisdqNNvMBQ8=)
20: 38372e3235342e31342e302f32332d3234203d3e2039333034.roa (hash: zOjJfKXFDDK8FWQuGoyGMyabfyxwg6zgnL0YaVQFH20=)
21: 3231372e32352e342e302f32342d3234203d3e20313432313436.roa (hash: vZRhvTOHCjCN3qpqUAQpaZnKJPXOT/7YVpVSmsbplMQ=)
22: 3231372e32352e372e302f32342d3234203d3e20323033313439.roa (hash: ORaaFsuJfbCQ5gK+iP6X7HGTL9jsKreKKdMqaXidIEY=)
23: 38372e3235342e33312e302f32342d3234203d3e20323132333834.roa (hash: kuBs6hElF6wxCmWKuqHdTsZI2vk91hngsz1GJVgyb1o=)
24: 3138352e3231302e3137302e302f32332d3233203d3e20383334.roa (hash: lXDhBA8H2d1LpAoql0c+vF9OP1+v0zqok15tPd+NtSc=)
25: 38372e3235342e362e302f32342d3234203d3e203230343733.roa (hash: U9mhVXn/Y2qy5SVslhyWTBFWO3Hfm0be6+7a6kbSGwo=)
26: 38372e3235342e32302e302f32342d3234203d3e2039333034.roa (hash: 4X1RHbA+I5YPTr7RjepEQXD+DyuHivSCZH5v4rwZll4=)
27: 3231372e32352e332e302f32342d3234203d3e203230343733.roa (hash: Gtvwy4O2g92Wl34q1NG2a1KSHDIDcCrqvni9SpsOlEs=)
28: 38372e3235342e32322e302f32332d3234203d3e20323735373134.roa (hash: Q017uW83uFb8COwcV2Dq8d6iP2iHdliF99e4gCzHkCU=)
29: 3231372e32352e362e302f32342d3234203d3e20313531333839.roa (hash: 7io71Z7e3prfZYGBiZo+qcVjsUHTCxzskRDmwMsuWN4=)
30: 38372e3235342e302e302f32332d3233203d3e20323037363435.roa (hash: Bt15oUjcprVGI2OHoJeHUu5XnHIcVhhgAZKYjYn6V5A=)
31: 3138352e3231302e3136382e302f32342d3234203d3e20383334.roa (hash: PO6lININeTzy9+OgxiLUcDdp0+yx5XkE6ZtQ5rmO+Oc=)
32: 38372e3235342e32342e302f32342d3234203d3e20323036313336.roa (hash: bbQ31pjEJ7Unv83rj6JC1Rwyv1NsZ2cXmXyZK0zpF/s=)
33: 3231372e32352e31312e302f32342d3234203d3e203432383331.roa (hash: LBGC7WX7bJkBy0/v1ZbPU/RfYLNVgPcvPJyw+DpE2j8=)
34: 38372e3235342e32362e302f32342d3234203d3e20383334.roa (hash: IlGOj4Fq9cmG2HYcdx1Ff+S28/NQNuVvBQ7XsNr4s20=)
35: 38372e3235342e31322e302f32342d3234203d3e20313531333839.roa (hash: 9zA+dszgJN5AP3J45oSwZmskcmnOlaFWG4lzA3aNK2Q=)
36: 38372e3235342e352e302f32342d3234203d3e20313939313836.roa (hash: HZquRjrtVmHqbu4fPIBJgtIt3FEOMJfNRllTAEB2bxc=)
37: 22BFD4E021547D030AC10B0213535D4C6968EEDE.crl (hash: QLWzKrSYmbixU6VZG5K873+caAGuEC6J48qneGJO3ck=)
38: 38372e3235342e31302e302f32332d3234203d3e2039333034.roa (hash: ggxRDSIk4x8P9rbdr1wiNW32yw9uoE+S2USYJnBn0oI=)
39: 38372e3235342e32352e302f32342d3234203d3e20313734.roa (hash: STs/Odq8qO0vXfvacpj/VHN/A8uqTrPbGQfYucpP36w=)
40: 38372e3235342e372e302f32342d3234203d3e20313531333839.roa (hash: 1Tzx5DQRwmTkt6C12jNRCoCqpdsvp6el2+ypdu0Bwro=)
41: 38372e3235342e382e302f32342d3234203d3e203633303233.roa (hash: yvC8qtTXjiLI2wGfbH1IrWAtdVVn7Rg1KD5mabaKrfI=)
42: 326130303a656163303a3a2f33322d3332203d3e203230393135.roa (hash: B/4WVaX1/RQfize8nvUY5uFmIYzrRdgUSdd1VX+7rB4=)
43: 3231372e32352e322e302f32342d3234203d3e20343032323638.roa (hash: eO9NqT6i2l2HEGs+WVV7UTiynn+SIqeiEipfCYpnbLk=)
44: 38372e3235342e31332e302f32342d3234203d3e20383334.roa (hash: OXClm11L7B4KQMtboKCAGazXbwccz8w1E47tvtW+E9Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 20:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ba:57:1f:a5:ba:67:35:94:82:f5:72:27:32:b5:c4:5e:6f:8a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22bfd4e021547d030ac10b0213535d4c6968eede
Validity
Not Before: Jun 3 17:43:25 2026 GMT
Not After : Jun 4 20:36:25 2026 GMT
Subject: CN=5979F8986F7D2719B045DA40C375AD37404B7B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:12:d2:0a:07:10:28:a7:d6:96:bd:fb:c9:
e1:d8:87:7e:12:d6:68:23:fc:89:3c:3c:22:d9:cb:
d0:4e:20:d7:f4:a7:c5:1d:d9:b1:88:81:8a:c3:ac:
92:73:59:de:d8:3e:90:ec:52:08:41:9a:fe:6f:21:
18:3a:28:4a:b0:5d:9d:ac:7b:4c:1f:26:60:ad:b4:
af:45:34:46:96:49:34:c2:80:04:fd:7d:26:c7:9e:
2b:2b:c5:81:1e:b1:ba:c7:a7:63:18:b7:1a:b3:4a:
18:1e:bf:2a:be:34:5b:f2:81:57:e9:61:de:9c:5b:
dd:51:d6:82:72:81:dc:da:ed:7e:aa:70:83:c0:f2:
cb:95:f8:39:54:50:ad:f2:2b:ef:ed:73:38:dd:2c:
ee:5b:92:67:6e:c4:bd:98:57:19:af:ab:b9:64:67:
cf:b8:bb:47:d9:6b:7e:f7:2c:de:0b:81:72:8e:2c:
99:c8:df:4d:5d:16:8d:2c:8d:12:bc:cc:b3:9b:34:
5e:70:f9:e8:95:4b:8d:6a:3c:87:ff:de:0b:87:c2:
bb:9f:90:39:30:3f:f4:f9:7b:ed:5c:7d:36:1b:a1:
75:ec:78:41:1e:fb:86:3c:48:6d:3a:3a:cc:a0:26:
a6:34:72:e7:85:bc:76:e9:5b:b8:51:f0:b7:01:7f:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:79:F8:98:6F:7D:27:19:B0:45:DA:40:C3:75:AD:37:40:4B:7B:23
X509v3 Authority Key Identifier:
keyid:22:BF:D4:E0:21:54:7D:03:0A:C1:0B:02:13:53:5D:4C:69:68:EE:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ir_U4CFUfQMKwQsCE1NdTGlo7t4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23aacd17-bf9d-47db-864d-f9c7c2be183a/0/22BFD4E021547D030AC10B0213535D4C6968EEDE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fa:e3:8c:6c:91:7b:ef:83:22:56:90:b2:c6:ef:13:3a:da:
94:e0:aa:22:e2:b8:5e:33:f3:f6:42:8b:76:99:61:55:79:74:
56:52:92:02:f0:7c:9f:10:1f:c2:9d:dd:34:1f:2a:d0:cf:70:
43:90:18:ee:9e:f5:0f:2b:97:4c:6f:02:dd:57:aa:62:46:1f:
84:f6:aa:e0:28:7f:97:8d:9f:69:ee:c3:85:c9:b7:bb:e7:96:
b2:8e:ec:e6:8c:91:65:83:c0:45:19:c9:83:de:6c:08:8a:50:
b7:e4:3e:fd:65:9d:b6:c0:0d:09:0b:47:ec:29:74:ec:59:2c:
01:b9:15:b6:3b:1f:76:c7:fb:8a:94:9b:7a:fd:4f:83:69:81:
21:fa:3d:7b:26:72:ea:b2:54:f0:80:3e:ae:d1:68:35:db:33:
65:6d:88:f9:1b:6b:b4:1c:c8:74:a9:41:a3:5d:c6:a7:c7:e8:
df:f9:b1:44:80:44:52:54:94:63:00:64:b3:33:4b:85:c1:b4:
09:ea:f0:33:9c:d2:90:58:4e:ce:d6:37:65:34:3e:04:9e:71:
51:77:ac:5f:43:5f:e9:24:27:26:a1:32:ac:23:57:07:84:5d:
83:28:33:30:f2:b0:1c:78:ff:d0:8b:8f:04:91:26:9c:e8:14:
86:ee:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:46 2026 by rpki-client