
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier: u3QwfFEu2P51LLjC6H0dB3CZ1wYM3oElMn3fmA3B1/M=
Subject key identifier: 32:AB:C2:1F:5A:48:8C:E5:4C:AB:8E:99:53:91:FE:4A:27:C8:C2:24
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial: 0E9F8F9CEA7A87911CB8F785416F22B8DDAEB3FE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number: 059A
Signing time: Sat 27 Jun 2026 22:19:03 +0000
Manifest this update: Sat 27 Jun 2026 22:14:03 +0000
Manifest next update: Sun 28 Jun 2026 23:40:03 +0000
Files and hashes: 1: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
3: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
4: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
5: 69727B946D879F5A52FB58F24B4D4D12D59B2CC2.cer (hash: xAYLg9xwMzhfn7yeX4sZhbINK9SiMXP3e/i/klKaS9Y=)
6: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
7: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=)
8: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=)
9: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
10: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=)
11: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=)
12: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: MZV/Kgc+de9roatW8X8/cT6Q0pRLB1IOpQ73HoxhzMY=)
13: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
14: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
15: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
16: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
17: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
18: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
19: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
20: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9f:8f:9c:ea:7a:87:91:1c:b8:f7:85:41:6f:22:b8:dd:ae:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Validity
Not Before: Jun 27 22:14:03 2026 GMT
Not After : Jun 28 23:40:03 2026 GMT
Subject: CN=32ABC21F5A488CE54CAB8E995391FE4A27C8C224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d8:32:8f:c6:18:f6:fc:c5:5a:3c:94:6a:e4:
d6:92:88:c2:f8:32:fa:e7:17:b3:aa:80:52:cf:2a:
da:bf:fc:be:fc:b2:a8:fa:2f:31:a6:a0:44:6b:39:
f6:07:0a:10:95:ae:07:a7:da:45:67:f9:a7:13:52:
ef:59:a9:52:f8:45:34:48:06:d9:4b:74:74:df:f9:
5c:4b:b5:e7:3a:3a:68:b4:70:7f:a2:c7:b5:45:be:
7e:f5:ce:8b:c0:74:b5:a5:50:52:2d:03:1f:b0:0e:
39:54:10:71:a4:71:63:ca:d3:80:53:dc:7d:41:02:
aa:7c:69:c2:3d:39:92:98:e9:a4:a9:40:0d:f0:41:
37:1e:01:58:07:aa:34:dd:8a:30:65:7e:4e:fb:66:
1a:5b:66:32:d9:08:42:61:b7:ee:96:fc:84:69:20:
16:48:ab:7f:35:c7:51:0b:d9:75:18:b4:5b:e0:a5:
fc:a0:3b:b2:9a:e8:b2:e9:77:9f:00:24:d1:f5:e5:
30:77:44:94:ba:73:5f:bd:fb:ab:a7:89:1d:72:ab:
83:ee:16:6c:8e:c4:db:0d:a7:e6:cd:b2:95:6d:2d:
33:4e:89:72:ef:f3:d7:3b:e7:52:ba:f4:01:8a:6c:
e0:85:e9:41:d3:fc:1b:24:6a:c4:d5:41:e1:95:80:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:C2:1F:5A:48:8C:E5:4C:AB:8E:99:53:91:FE:4A:27:C8:C2:24
X509v3 Authority Key Identifier:
keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:17:eb:ff:c7:e5:4c:4b:61:be:d8:85:73:c5:14:4f:5e:
b6:38:e8:12:b6:fc:cc:e6:c0:b8:60:e7:53:a4:3b:d7:ea:a9:
03:7e:dc:ea:b2:a5:9e:19:34:1a:c7:4a:48:c8:05:f2:6f:9b:
4b:e6:66:ab:9c:8e:0c:60:6f:86:fc:5f:1c:32:1b:3b:a3:69:
aa:fe:dd:59:2b:8f:17:a4:4b:79:15:a2:18:9e:37:78:88:ab:
68:c2:82:2f:7b:2e:94:4a:d3:d1:00:aa:f8:a2:6f:b2:f8:da:
70:95:04:0e:48:7f:39:8e:eb:46:7d:4b:41:f9:c1:3a:45:f2:
9e:02:d9:da:3f:29:de:88:77:00:c3:64:73:bd:e1:43:e7:47:
19:78:66:2e:8b:de:6b:c9:ea:21:d1:5f:d0:3a:f4:30:20:58:
c2:20:d3:50:ed:60:83:8d:0d:fb:ad:2c:b8:28:e7:44:5f:20:
73:a2:83:67:38:1c:8b:4f:f6:80:23:16:c3:32:91:2a:54:15:
48:a8:fe:78:82:71:d5:2c:d2:50:1d:b4:ea:e9:2d:bb:a4:6c:
c9:76:28:b6:44:52:b9:31:e6:fb:e9:48:a0:5a:93:1c:4b:f5:
56:56:46:b6:1b:e1:3e:dd:3f:a9:ce:85:b9:1b:61:d0:bf:9d:
35:9c:8d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:57:47 2026 by rpki-client