
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json)
Hash identifier: qEy4S1CxFUH/h9CPRfYm9tY8xGr+sD4AFGim4c9PpSg=
Subject key identifier: 6B:27:C6:4D:E2:12:77:06:AE:BF:80:61:E9:78:80:F9:8A:D9:00:6C
Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Certificate serial: 21855C0053AAB5F38547781F2E41BD43BD183AF8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
Manifest number: 0494
Signing time: Thu 12 Mar 2026 13:41:06 +0000
Manifest this update: Thu 12 Mar 2026 13:36:06 +0000
Manifest next update: Fri 13 Mar 2026 17:37:06 +0000
Files and hashes: 1: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: mT7wNp38f47L+2MAFo1ah1wV4i3g7EwDZhqEAFbd0PU=)
2: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: OvRwqWZj15GX0E4Phukr94LjpX3cjqmmV56sMZL7fJc=)
3: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: nWVf9Vd1/pxv69WaHKM1e/8vQ/po0I7aidbKnzISSgo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl
rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:85:5c:00:53:aa:b5:f3:85:47:78:1f:2e:41:bd:43:bd:18:3a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9
Validity
Not Before: Mar 12 13:36:06 2026 GMT
Not After : Mar 13 17:37:06 2026 GMT
Subject: CN=6B27C64DE2127706AEBF8061E97880F98AD9006C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:c7:4c:89:ca:c7:88:39:84:bf:39:f9:4d:
5d:b2:87:cb:2f:93:24:97:ad:44:12:af:4f:2b:14:
c3:8a:a9:26:86:21:db:15:86:9a:cd:bc:36:59:b3:
79:04:91:9d:13:24:c1:ad:b0:7c:42:5a:d5:22:bf:
e9:55:b6:ce:5b:54:e2:27:09:c3:97:ce:8e:87:92:
71:50:53:61:8f:72:b9:e6:11:4e:3c:91:ab:76:25:
84:41:8b:46:82:c2:92:7b:74:53:86:cd:a4:62:68:
66:84:0c:eb:4d:76:71:1e:bc:7c:e8:c7:26:c7:85:
c8:6f:58:b7:d9:aa:a7:f1:16:df:6d:b8:5a:37:7a:
ce:22:24:91:5e:76:f2:f5:b8:f4:67:45:f8:1b:a6:
20:78:81:0c:37:3e:69:1b:eb:ec:52:f3:02:fa:11:
62:a7:95:de:af:e5:47:86:3c:90:bc:f8:f8:fb:3c:
15:66:14:d1:44:6a:60:3c:eb:f5:be:f9:70:1e:42:
f2:95:2d:ee:8d:76:be:3c:bd:89:64:52:60:33:46:
64:4c:70:de:1a:34:e8:42:31:40:0c:01:ea:15:9c:
c6:c0:8f:e1:a9:cd:78:eb:40:f5:61:c0:cb:fb:b6:
26:a5:8a:55:df:9c:d7:cd:05:0e:c3:2b:9b:2f:6b:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:C6:4D:E2:12:77:06:AE:BF:80:61:E9:78:80:F9:8A:D9:00:6C
X509v3 Authority Key Identifier:
keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:51:c9:b8:46:96:c9:75:e3:56:a5:fd:0a:f4:97:de:eb:
ed:9a:91:87:91:2a:43:62:de:da:5c:f7:7c:d2:a5:19:73:46:
46:e0:47:19:5e:dd:6c:f0:3c:b1:07:f0:f4:c3:d7:2f:b7:3e:
cb:a6:ac:84:ac:11:59:17:7d:34:52:a3:29:e8:ce:36:5b:84:
c7:1f:ee:1c:f6:a8:da:79:bb:50:9f:19:6d:c8:69:6d:29:53:
3b:35:6c:31:49:54:ec:54:15:d1:7e:d9:11:0b:e6:d4:a9:23:
d9:44:9c:8a:31:fa:4d:9a:f9:b4:ec:da:6e:73:24:c2:75:f5:
c1:c4:d5:3a:b0:0b:ad:87:41:9e:4a:a5:9f:b1:ce:da:25:b5:
49:99:7c:9e:5d:c1:c2:db:ed:95:18:44:66:84:56:ce:0d:be:
60:96:6e:59:f2:c1:5c:64:c4:ef:3f:e1:d7:79:c9:19:2a:81:
15:e5:2f:bc:16:6d:d1:3f:b6:f9:20:95:73:5b:4e:85:f2:05:
75:c9:48:ba:74:f5:7f:0e:c7:09:6a:d5:8d:46:ce:0c:6c:f9:
78:c3:e6:79:50:92:f1:0d:48:28:9b:50:3b:f9:11:d4:c3:88:
b5:f7:40:78:e4:41:04:64:40:37:f0:aa:aa:8c:fa:50:96:b8:
b8:73:a1:97
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUIYVcAFOqtfOFR3gfLkG9Q70YOvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0
QzExMUFCOTAeFw0yNjAzMTIxMzM2MDZaFw0yNjAzMTMxNzM3MDZaMDMxMTAvBgNV
BAMTKDZCMjdDNjRERTIxMjc3MDZBRUJGODA2MUU5Nzg4MEY5OEFEOTAwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonMdMicrHiDmEvzn5TV2yh8sv
kySXrUQSr08rFMOKqSaGIdsVhprNvDZZs3kEkZ0TJMGtsHxCWtUiv+lVts5bVOIn
CcOXzo6HknFQU2GPcrnmEU48kat2JYRBi0aCwpJ7dFOGzaRiaGaEDOtNdnEevHzo
xybHhchvWLfZqqfxFt9tuFo3es4iJJFedvL1uPRnRfgbpiB4gQw3Pmkb6+xS8wL6
EWKnld6v5UeGPJC8+Pj7PBVmFNFEamA86/W++XAeQvKVLe6Ndr48vYlkUmAzRmRM
cN4aNOhCMUAMAeoVnMbAj+GpzXjrQPVhwMv7tialilXfnNfNBQ7DK5sva1nvAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUayfGTeISdwauv4Bh6XiA+YrZAGwwHwYDVR0j
BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz
NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw
NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3
RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYd1HJ
uEaWyXXjVqX9CvSX3uvtmpGHkSpDYt7aXPd80qUZc0ZG4EcZXt1s8DyxB/D0w9cv
tz7LpqyErBFZF300UqMp6M42W4THH+4c9qjaebtQnxltyGltKVM7NWwxSVTsVBXR
ftkRC+bUqSPZRJyKMfpNmvm07NpucyTCdfXBxNU6sAuth0GeSqWfsc7aJbVJmXye
XcHC2+2VGERmhFbODb5glm5Z8sFcZMTvP+HXeckZKoEV5S+8Fm3RP7b5IJVzW06F
8gV1yUi6dPV/DscJatWNRs4MbPl4w+Z5UJLxDUgom1A7+RHUw4i190B45EEEZEA3
8KqqjPpQlri4c6GX
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:01 2026 by rpki-client