
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier: rkQa+gD5ZGUyU5yuqcolvwl88pxfCeUPFw1dxjeQV9s=
Subject key identifier: 6D:D2:8E:12:2A:15:B8:EB:A0:6E:3C:09:E2:98:06:BA:66:22:45:68
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 35F9477519410A99BCFFA2F54B158038B9A66DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number: 01FF
Signing time: Wed 04 Mar 2026 12:18:55 +0000
Manifest this update: Wed 04 Mar 2026 12:13:55 +0000
Manifest next update: Thu 05 Mar 2026 15:50:55 +0000
Files and hashes: 1: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
2: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
3: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
4: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
5: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
6: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
7: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
8: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
9: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
10: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: b01UE1W2EGfzUcIfvNzwNjLl6EWZ+fK9rU0UVH/isX8=)
11: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
12: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
13: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
14: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
15: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=)
16: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
17: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
18: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
19: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
20: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
21: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
22: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: DmU4Lo/xUuNdeTABWOUU24FMPMm3fzg0v2pbFUIaFr0=)
23: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
24: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
25: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
26: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
27: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
28: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
29: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
30: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
31: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
32: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f9:47:75:19:41:0a:99:bc:ff:a2:f5:4b:15:80:38:b9:a6:6d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 4 12:13:55 2026 GMT
Not After : Mar 5 15:50:55 2026 GMT
Subject: CN=6DD28E122A15B8EBA06E3C09E29806BA66224568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:ef:cc:1d:24:57:8c:34:27:28:a6:60:84:
09:02:be:9f:dd:c4:77:c4:0d:d7:98:ed:04:dd:0c:
8e:e2:0b:75:b8:f0:cc:d5:6b:a2:6d:97:74:94:ef:
b1:47:7b:2f:d6:72:e2:a9:34:8a:04:9e:90:60:3c:
eb:54:62:97:47:7e:bb:f0:eb:82:ff:90:89:7e:c4:
e2:e0:85:c0:af:7c:56:2f:57:8a:22:64:04:60:cb:
7d:03:9b:ac:ca:b1:d9:35:cf:64:0b:0b:33:ea:4a:
31:9a:6e:7f:bc:9a:63:c3:91:d4:f5:94:3a:23:17:
86:18:72:4e:18:11:50:63:97:75:87:49:9d:cf:5c:
9e:5b:1f:ab:c5:3c:92:f5:33:61:22:65:61:ae:c0:
11:b7:da:3c:69:47:22:99:a8:49:e3:73:8b:f4:89:
48:60:d9:5f:b0:f8:03:23:0d:b4:b8:02:d9:06:fe:
f5:65:7f:a8:62:6e:8f:ce:3e:bb:c7:fb:ea:6e:e3:
6f:67:ae:bc:b0:17:d3:12:a8:f4:2c:f5:bd:1c:a6:
cc:e6:14:ee:40:7b:ed:2a:45:4f:3f:45:02:38:ac:
11:48:f3:0a:41:37:55:63:2c:ec:51:d2:ed:04:11:
23:6b:43:55:df:e2:7e:6f:15:8d:6b:37:db:0a:4c:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:8E:12:2A:15:B8:EB:A0:6E:3C:09:E2:98:06:BA:66:22:45:68
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d8:10:cc:5f:60:fc:7b:33:b4:1f:9e:72:d6:59:3e:a4:52:
91:b1:a6:2e:f1:16:77:75:cf:1b:0e:74:a8:f5:27:3e:fe:a8:
ff:10:8a:69:06:c3:4e:54:01:5c:1c:26:79:c0:df:d7:13:36:
c6:f6:a5:c6:01:4c:5c:9e:80:1c:52:06:a8:72:77:d0:a8:4c:
21:56:28:be:0c:6e:37:d4:a9:2c:65:1a:09:38:4f:e5:2e:0c:
cc:5b:f3:76:f2:f5:8b:c8:00:8f:43:b2:e7:e2:3a:05:43:de:
79:74:0b:56:b0:3e:bd:3f:69:32:1f:50:de:d0:83:68:ed:0e:
42:ed:26:d7:4e:12:e7:b7:33:1b:5e:92:38:d1:33:4b:c4:87:
f9:d3:6a:a0:17:bd:0f:9d:a2:bb:e9:1c:58:20:41:58:72:6d:
38:8b:28:18:62:6c:ab:3c:5c:f1:c9:1c:e5:0c:17:ee:f1:8f:
86:74:a9:72:7c:3c:57:f7:bb:f0:54:c6:f3:91:63:bd:8e:da:
4d:e9:69:c8:f4:7a:aa:e7:09:ac:bc:8c:85:fc:d7:6d:ae:bb:
52:75:8a:7c:f2:6f:11:fb:a8:23:ce:19:31:77:9a:bd:f1:5e:
fd:9b:48:c0:d8:80:76:63:13:1d:5b:79:4a:f7:fe:2d:63:03:
28:d1:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:53 2026 by rpki-client