
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
File: 9944737A024FE1405D0B4CF6B53DF38938D85B42.mft (raw, json)
Hash identifier: B6Q853rbB7lLXAnBR/wMRd4WTgZWdSjml9D+oL2t390=
Subject key identifier: 89:35:3D:13:4D:08:CE:10:4E:AA:CE:CB:B0:8F:AD:6D:3A:0C:45:07
Authority key identifier: 99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
Certificate issuer: /CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Certificate serial: 462C79A078DB70F71A2DFB0FBE26735306F8B34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
Manifest number: 13
Signing time: Fri 13 Mar 2026 11:06:29 +0000
Manifest this update: Fri 13 Mar 2026 11:01:29 +0000
Manifest next update: Sat 14 Mar 2026 13:39:29 +0000
Files and hashes: 1: 39312e3233332e382e302f32342d3234203d3e20313531333830.roa (hash: QHlll1E6ZgYKSQDJdHA2cS3FR3PqEVC4mPQIad6lRHU=)
2: 3139332e32352e3137312e302f32342d3234203d3e2032393134.roa (hash: 3RW0EBFKhtkuyYO0ImclMyJ2bHvWWRGpRtxcprM7Gs0=)
3: 39312e3233332e31312e302f32342d3234203d3e203136323736.roa (hash: LV3Z47QQt2GLbvsziknv3+jFd275mrEJNobpg8iXLAE=)
4: 9944737A024FE1405D0B4CF6B53DF38938D85B42.crl (hash: T2+3/ju69B0SoBAyieTj+xsCZPrmKfyKS+uogKpvKDU=)
5: 3137362e3130322e3137322e302f32322d3234203d3e2032393134.roa (hash: 88rKRKK1F0KKtxxPo7XhPiB6gcwX4XCx/ZfUmHitxZs=)
6: 39312e3233332e392e302f32342d3234203d3e203633373933.roa (hash: bupPmkoZJ+XbnfG0zE3WFzVAXQhEXiEfPunTZAewDxg=)
7: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (hash: 7p8qNsU6tfuk0G7Wf9jyKZGNfWbDPoyHxSoL6Mbi7sw=)
8: 3139332e32352e3137302e302f32342d3234203d3e2032393134.roa (hash: WRx1OxGOlgN0/80krwLB6Bvyo5xPwAjYqRsVo8Tmvwg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2c:79:a0:78:db:70:f7:1a:2d:fb:0f:be:26:73:53:06:f8:b3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Validity
Not Before: Mar 13 11:01:29 2026 GMT
Not After : Mar 14 13:39:29 2026 GMT
Subject: CN=89353D134D08CE104EAACECBB08FAD6D3A0C4507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:ed:4a:fe:2d:17:4d:4b:cc:46:ea:08:b3:
25:44:8b:e3:98:1a:b3:86:e1:67:1a:41:f0:18:a7:
29:b6:cb:01:b7:e4:8b:60:7a:8d:6d:7b:de:4d:36:
82:8f:81:9a:62:27:bb:63:86:93:f4:7e:b5:8c:82:
65:22:7d:13:10:4d:86:0c:f4:a4:16:34:59:5a:61:
43:28:c2:ac:ed:ce:12:39:5d:a4:05:0a:79:a6:54:
30:e9:c8:ab:7e:e7:56:74:8e:73:f1:34:eb:ba:5f:
23:64:89:6f:3f:3a:3d:81:6c:8e:93:92:1d:03:ab:
29:e7:e2:2a:fc:e0:d4:0f:64:55:87:98:96:63:e0:
08:b0:fb:94:c8:74:9a:fa:e5:56:e4:bf:54:7e:0c:
e2:c5:f7:47:d9:18:b0:a5:28:d0:1b:8c:3c:e7:fb:
e6:53:f8:71:14:33:77:ae:ec:94:40:96:af:1f:88:
da:58:c9:ea:06:fb:14:79:2c:bb:5f:01:bc:16:5a:
95:e8:24:37:ab:30:1c:d2:e9:1b:23:05:64:a0:26:
68:39:25:11:d8:ee:d6:b8:6c:3e:cb:a9:16:f1:82:
c2:10:3d:e5:18:00:b5:f2:bc:c3:f9:b8:cd:82:7f:
de:63:85:1e:c5:b9:fd:1f:55:43:b9:44:5d:25:70:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:3D:13:4D:08:CE:10:4E:AA:CE:CB:B0:8F:AD:6D:3A:0C:45:07
X509v3 Authority Key Identifier:
keyid:99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:93:c9:16:87:eb:9b:6b:01:d1:92:db:3a:c0:da:15:b2:
98:a7:65:18:76:5d:02:e8:4b:24:33:5a:6e:7c:57:2c:8a:a8:
9c:0b:d9:a8:f5:8c:86:d9:ff:0a:65:d4:80:cd:b9:58:76:6d:
2e:88:79:22:f3:ad:e9:dc:3b:5b:1d:48:be:f0:a8:84:2d:79:
a4:d0:55:33:c2:bc:92:4e:5a:69:a8:0f:2a:8e:53:8f:22:63:
76:8c:53:48:9f:7d:d8:2c:19:c1:df:0a:77:1e:d4:cd:87:4d:
8e:b2:0a:cc:b8:47:ba:cf:77:7d:f6:9a:47:54:d2:32:02:bf:
10:f7:5e:49:f1:fd:3e:54:89:ed:60:9b:7a:8f:03:cb:8f:6c:
67:b7:f4:06:7b:fd:95:8d:c7:a0:3c:d3:03:58:c8:3a:83:15:
fa:bf:c5:9e:b5:7f:20:03:ff:eb:b2:54:c4:2f:8d:bb:61:45:
52:5c:05:46:58:82:7c:f6:78:ee:8c:7d:bb:42:71:88:cb:71:
bf:9f:af:99:be:08:be:d0:03:14:ad:20:b5:74:d4:20:1f:17:
79:57:b0:2d:16:18:14:7b:06:15:dd:e6:e5:52:70:53:3f:3a:
b4:c2:28:b6:6e:f2:ce:1c:90:09:7b:af:45:70:fb:34:7a:05:
90:f1:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:39:39 2026 by rpki-client