
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier: UKckQI+JAoiVn+j6FW9JF9P6r9TO1cH2/fgvGGbjLZg=
Subject key identifier: 54:AB:66:63:76:02:D9:E5:D4:0F:E9:24:83:97:C7:FF:13:4F:53:FD
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial: 5173BE74A8D3ECAEDF19C1EF518A7A762377412E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number: 06D8
Signing time: Fri 02 Oct 2026 06:13:20 +0000
Manifest this update: Fri 02 Oct 2026 06:08:20 +0000
Manifest next update: Sat 03 Oct 2026 07:22:20 +0000
Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
2: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: 6P+R6wuEEP+euC2TgU6pJdRCRgvMs4VP4k8K/rgjYxU=)
3: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
4: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
5: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
6: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=)
7: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: 5615Ny7sVmjEhhHlRGRDH3u/ySBnlb2mwndcttt3V9g=)
8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
9: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
10: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
11: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
12: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
13: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
14: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
15: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
16: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
17: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=)
18: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: 7XqZ13Ef/+b1VNSXq2rgololpGJoJrZKisEm3FKehVE=)
19: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: WENFyTx4mdhJDeaVV4YVad+Y61T77hW0BB5cGbOl72A=)
20: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 20:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:73:be:74:a8:d3:ec:ae:df:19:c1:ef:51:8a:7a:76:23:77:41:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Validity
Not Before: Oct 2 06:08:20 2026 GMT
Not After : Oct 3 07:22:20 2026 GMT
Subject: CN=54AB66637602D9E5D40FE9248397C7FF134F53FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:43:43:c4:d6:bf:ee:07:1b:9d:41:8d:9d:
22:d6:75:09:72:2d:5d:a8:8a:ab:51:76:f1:83:f9:
5a:7a:65:a4:c0:2c:56:87:c2:f2:86:21:c5:6c:d7:
e1:bd:ce:c4:06:2c:61:d5:f2:9e:12:ab:36:5f:d5:
78:9c:ec:4f:ac:d1:18:ee:7f:51:7c:38:a7:ac:48:
fd:74:4d:83:79:99:9b:45:75:40:e2:dd:d3:2b:5e:
8e:37:92:ac:f6:f2:ce:2d:b0:12:67:d2:ee:cb:99:
d8:b8:68:77:52:86:d2:db:5a:ca:95:d2:eb:db:32:
a9:f7:38:28:9e:f4:18:df:d1:8f:e5:43:7d:1a:31:
90:27:28:e8:4e:f7:7f:aa:f0:ec:4c:d3:c5:5a:7f:
3e:5d:52:9e:db:0d:cb:69:dd:91:68:94:d3:1f:1b:
c6:3b:e7:3d:ab:e7:58:a4:eb:39:af:f8:c0:25:02:
a5:04:c8:11:cb:8d:cf:94:2c:6b:a0:14:fd:b1:91:
bb:2e:e0:64:e5:c2:c8:73:22:9c:90:3d:65:a5:6f:
0c:ed:8e:3e:f3:c0:11:a9:13:bf:fb:1f:fa:e0:ee:
4c:f5:46:eb:7b:e8:93:89:4f:7d:0a:af:60:18:4b:
ed:1c:39:20:d0:eb:8e:46:8b:c1:65:38:0d:08:12:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:66:63:76:02:D9:E5:D4:0F:E9:24:83:97:C7:FF:13:4F:53:FD
X509v3 Authority Key Identifier:
keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ae:8a:fa:7d:7c:87:b8:7d:c3:69:2c:18:ab:68:9d:f8:71:
79:dd:f2:4a:60:f7:70:a6:8c:af:09:64:91:49:a4:e3:99:f2:
c3:da:58:e3:d9:74:f6:38:87:7e:4f:75:0e:97:cc:db:fc:a4:
3b:63:64:ac:bc:f2:77:24:e7:be:68:fd:89:25:17:45:9e:db:
d3:28:75:24:78:3d:57:d3:41:fb:95:13:de:45:35:83:91:39:
02:0b:38:47:e0:46:f4:0c:f2:af:fc:09:a1:22:63:9c:91:01:
4e:cb:17:b0:15:d1:7c:f1:87:a1:23:79:f9:f0:2d:5c:9e:4b:
85:6b:63:26:0c:97:86:ef:60:e6:cc:8b:b6:f1:28:aa:e8:e4:
bc:4f:17:b3:45:66:aa:3a:6a:c5:f1:1c:67:a9:c5:f3:f1:7b:
4e:a9:80:f4:06:98:7b:32:32:77:88:ca:c9:80:03:cc:2f:a7:
0e:2d:f1:56:83:81:2c:8f:88:ef:8f:f4:9b:4a:f1:23:4b:14:
72:94:f9:e9:28:68:d8:32:3f:33:50:96:27:d2:e5:38:db:c5:
56:69:ca:7d:e5:64:6d:fd:e0:63:e1:f9:36:92:69:fa:be:3f:
69:52:9e:c6:6c:f3:5b:12:06:1d:fe:9e:ed:65:da:45:c6:73:
22:37:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:02:22 2026 by rpki-client