
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: zjTQn/049o35e30zkli00DGeUtAhN2k1GymKjqihyW4=
Subject key identifier: 04:36:3C:31:36:69:DF:94:36:D1:40:42:21:5A:07:AF:59:23:DB:28
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 1EF73F9E0695420A4E519A5C93606D4644551C56
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: 0157
Signing time: Wed 26 Aug 2026 04:18:19 +0000
Manifest this update: Wed 26 Aug 2026 04:13:19 +0000
Manifest next update: Thu 27 Aug 2026 07:28:19 +0000
Files and hashes: 1: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
2: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
3: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
4: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
5: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
6: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: aqo5TBAoBbTP6e3xnuUFMhBaAxFQvKmftVPwDjk6NL4=)
7: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
8: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
9: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
10: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
11: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
12: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
13: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
14: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
15: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f7:3f:9e:06:95:42:0a:4e:51:9a:5c:93:60:6d:46:44:55:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Aug 26 04:13:19 2026 GMT
Not After : Aug 27 07:28:19 2026 GMT
Subject: CN=04363C313669DF9436D14042215A07AF5923DB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:e1:98:a7:ac:92:66:3c:6e:a8:7c:76:17:
61:c3:f1:56:7c:53:0b:e7:b7:f1:72:10:6d:2f:e3:
13:b6:b6:64:db:b0:92:89:0a:85:4a:aa:df:09:f8:
40:68:a9:eb:56:b0:54:94:b5:24:51:cd:d3:b0:c8:
a5:98:e9:a5:24:ca:e0:f4:55:d9:fe:c4:16:a2:82:
96:de:da:ec:c6:f8:2b:af:5d:be:c3:05:70:b9:21:
f8:aa:cd:f7:79:b9:ca:84:62:eb:c3:36:78:35:53:
b6:0b:53:49:75:be:5b:45:2a:6a:4b:83:4d:11:4e:
b4:7a:4c:9e:3e:b7:e3:71:1d:4b:f9:b0:1f:55:03:
90:3e:f6:4f:a7:5b:7e:29:6b:9b:2e:7e:22:ba:cd:
24:fc:84:4e:4e:df:e9:cd:d3:a7:9d:be:33:ef:67:
0e:24:db:86:fc:ff:35:4a:61:ad:16:25:88:aa:20:
e0:b3:f1:7c:1b:87:18:1d:64:c7:e7:dc:ac:d4:ac:
9b:0b:ad:80:48:05:0d:c9:53:aa:c5:ff:44:24:d8:
6b:fc:7d:bf:05:3b:ef:90:13:67:85:24:66:79:85:
a1:ed:26:18:86:cb:8d:fc:13:c3:68:d4:a9:fe:41:
ba:72:34:9b:d5:6e:56:d0:0f:6f:8e:c5:ec:38:fb:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:3C:31:36:69:DF:94:36:D1:40:42:21:5A:07:AF:59:23:DB:28
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:01:d9:ed:64:71:ca:98:93:3e:73:88:43:41:61:56:73:
2b:84:da:ae:c1:7b:f0:bf:7d:6f:29:0f:f4:68:a5:80:b7:51:
a3:26:71:00:54:13:ca:03:4d:fb:d2:0c:bf:32:5c:37:9d:7a:
5b:5a:f1:79:30:ce:a6:e7:1e:0b:02:8d:78:0a:35:4f:5a:e9:
b5:77:3c:bc:b1:65:14:e0:bc:69:58:e8:85:db:ac:3f:cd:5a:
80:1f:2f:b4:73:6f:e2:2a:1a:f6:ce:ed:56:33:a5:47:4b:b1:
85:15:c8:3b:97:6b:f3:81:80:3b:b6:2c:fb:34:17:19:ea:dc:
0b:22:c4:62:c6:71:ae:b0:7e:a6:ee:2a:27:e2:f3:ce:f5:f1:
1c:08:04:37:9e:ea:36:cc:a0:ed:91:07:34:46:21:32:81:fb:
3d:59:5e:2a:b2:4d:2d:82:0b:ed:a2:90:29:0a:da:ab:76:77:
59:a8:f4:92:d6:e8:31:b4:89:05:79:de:86:32:69:e7:8f:47:
af:97:58:cf:92:ec:54:fc:3f:71:5e:1c:15:9b:24:a2:74:4b:
5f:8e:9e:89:24:d9:6f:d8:c0:9b:1b:ee:73:94:c7:38:15:e0:
38:46:9d:dc:db:27:fc:ec:11:54:17:4b:2b:5c:bf:ca:ad:0b:
cc:03:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:31 2026 by rpki-client