
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: YyHJJOek7Wfu4r+wyr3tOanmLTcFqMdjdvgxhnnV918=
Subject key identifier: 6A:B1:44:FF:6C:76:91:CC:F7:C3:51:EC:53:3D:EA:71:EB:3D:90:C5
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 57F2797E6E1C0E80472491C2418EB758191E0D60
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: D2
Signing time: Sun 24 May 2026 20:49:45 +0000
Manifest this update: Sun 24 May 2026 20:44:45 +0000
Manifest next update: Mon 25 May 2026 23:58:45 +0000
Files and hashes: 1: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
2: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
3: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
4: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
5: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
6: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
7: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
8: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
9: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
10: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
11: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
12: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: a2jXlBHzw+pfEFLHizdcx+dxQ9dIK6NALcAlweP+G7I=)
13: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
14: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
15: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f2:79:7e:6e:1c:0e:80:47:24:91:c2:41:8e:b7:58:19:1e:0d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: May 24 20:44:45 2026 GMT
Not After : May 25 23:58:45 2026 GMT
Subject: CN=6AB144FF6C7691CCF7C351EC533DEA71EB3D90C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:fd:69:6c:d3:71:40:10:0b:a1:d8:03:00:
b3:b7:02:a1:13:72:e5:a0:9e:25:11:4b:58:d3:8e:
96:ca:7b:9a:90:d1:72:6c:10:fb:49:48:4f:2e:fb:
25:70:15:94:6c:79:0a:fc:a8:9a:3c:4f:e9:47:cc:
9e:de:d4:6f:27:74:bb:ab:4a:dc:1b:24:e2:8a:d6:
e6:e1:f2:59:21:7a:c9:27:53:13:db:34:d6:fa:32:
fa:6a:82:ab:a9:93:e8:ac:a0:c9:3b:35:31:93:c1:
8f:43:60:b5:d9:49:86:89:e5:3f:c7:b6:da:74:60:
48:ec:21:e4:b5:48:f1:0b:51:0d:ac:d6:b5:94:c5:
95:8a:05:ca:1f:a5:48:1d:23:51:73:38:5a:cd:70:
de:7b:dd:d6:79:69:d5:51:5e:c2:6c:3a:34:91:9d:
95:c0:cb:f6:71:b7:f7:3a:ff:50:fa:5a:f4:e0:f8:
06:a2:98:3e:4a:5c:45:7b:c6:3e:49:89:84:ec:f5:
37:4d:32:51:90:85:5e:c9:83:0c:08:cb:29:d3:52:
66:3f:de:6d:8d:f5:bb:f8:26:a5:a9:b5:9d:50:09:
30:02:20:9b:04:e5:7f:c0:47:53:56:32:29:47:1d:
fa:dd:f7:af:96:49:c7:a0:11:62:23:ad:d0:58:1b:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:44:FF:6C:76:91:CC:F7:C3:51:EC:53:3D:EA:71:EB:3D:90:C5
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:be:bf:35:8b:92:4a:9e:fe:e4:f8:ec:1b:45:65:1e:ce:93:
14:e4:3d:0d:e0:3b:18:17:2f:54:13:85:c3:c6:6f:99:88:73:
84:c5:47:e2:db:c6:6b:d0:8a:62:91:57:c9:88:2e:8f:34:bc:
f6:59:b3:de:30:62:91:bf:c6:78:a6:56:c1:11:21:32:6a:75:
80:29:45:d8:a3:d9:e4:14:a5:23:e0:0f:4b:f8:72:ea:bd:66:
69:8f:4e:40:6b:a9:00:36:3c:24:c8:a4:1e:26:f3:f2:8e:43:
6d:d3:a3:87:8c:c4:bb:a9:3d:55:89:66:59:43:bb:db:2d:e4:
27:ee:99:9a:df:2b:a4:ad:3c:27:76:55:4f:df:8f:50:2f:1e:
52:ff:1b:e3:54:9a:85:45:4f:96:22:0e:e5:3a:75:66:e0:01:
fc:c6:55:75:ae:3a:1d:87:23:6e:04:1d:73:ca:ef:ce:74:05:
14:5a:ba:50:60:63:72:dc:ae:aa:27:38:e4:a1:6c:17:86:2f:
b8:9b:15:9f:56:48:4d:5f:05:39:73:84:0d:d6:81:cd:ea:80:
09:bd:07:7a:4f:d4:3b:9a:3b:ae:6c:bf:07:46:f1:45:06:46:
6b:43:f0:00:56:9d:14:da:0f:45:fb:5e:d0:47:7f:f9:c3:2e:
83:2e:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 17:18:05 2026 by rpki-client