
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier: nae9iTaRQVDxVTk1EQyncq8fdhDssVH+GytPGS/plpU=
Subject key identifier: D2:1D:A3:65:E2:CC:E6:FC:7B:D0:76:0E:B0:3A:0D:BE:19:F0:FC:1F
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 03C4B8A700269F8CC14428F3A0050AE483D28F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number: 0142
Signing time: Wed 08 Jul 2026 01:53:17 +0000
Manifest this update: Wed 08 Jul 2026 01:48:17 +0000
Manifest next update: Thu 09 Jul 2026 03:49:17 +0000
Files and hashes: 1: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
2: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
3: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
4: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
5: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
6: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
7: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=)
8: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
9: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=)
10: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: SmOiBXpJPnXJiEv8F4fjcr0ErVKEBXnTfxFxw1em5rI=)
11: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
12: 3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa (hash: Qgu5Tvm9W5X7SEvK1a2hylvdBTNEStW6QJu77ozFsGM=)
13: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
14: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
15: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=)
16: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
17: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
18: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
19: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
20: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 03:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c4:b8:a7:00:26:9f:8c:c1:44:28:f3:a0:05:0a:e4:83:d2:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Jul 8 01:48:17 2026 GMT
Not After : Jul 9 03:49:17 2026 GMT
Subject: CN=D21DA365E2CCE6FC7BD0760EB03A0DBE19F0FC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:36:7a:0c:66:1a:53:10:29:92:b8:62:8e:
1f:40:27:f4:d1:5a:b3:15:1c:72:37:f3:38:00:24:
26:33:72:c2:f8:25:3f:64:99:af:bc:24:e3:ba:72:
1f:7c:4c:51:9e:5a:96:fc:8b:4f:de:e9:31:1d:b5:
26:8e:5e:76:53:55:89:32:05:ca:57:da:7f:46:9f:
c7:1e:4c:80:f4:a3:04:a0:26:1f:69:81:07:cf:13:
6a:2e:94:16:88:81:56:7f:25:81:e0:94:b1:1f:8e:
fc:ff:32:c3:04:f2:d4:e2:6b:6a:3f:3c:3d:4a:61:
8f:30:7b:aa:d2:ee:95:10:65:47:63:d0:26:ff:18:
9a:da:11:58:64:cd:17:2a:6b:c7:9e:98:a9:60:8c:
c0:0d:39:15:c7:7a:8f:b1:42:88:ae:08:db:42:7c:
fa:80:3d:f0:78:bb:aa:76:77:07:00:69:d7:6a:46:
60:3d:50:8b:ca:b0:4b:bd:c7:82:5d:6f:52:86:bf:
90:f9:6a:ff:fb:45:87:d7:82:d7:cf:28:70:0e:9f:
ad:57:66:d6:91:05:16:1a:09:95:52:09:2d:1f:d4:
21:62:37:df:69:8c:1e:4a:c3:c0:7b:06:76:b4:14:
4d:f1:f9:a2:73:d3:6b:5e:a2:ff:3e:05:54:5c:64:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:A3:65:E2:CC:E6:FC:7B:D0:76:0E:B0:3A:0D:BE:19:F0:FC:1F
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:91:ce:09:69:b6:8d:87:3a:2a:fd:6a:0b:0c:8b:f8:05:
00:0d:ce:41:f7:05:3a:91:21:30:bb:ab:be:07:6f:56:87:38:
67:d6:90:17:1c:a0:5b:6e:f5:2d:f8:0c:8a:5c:b4:0e:c4:79:
86:0e:78:aa:a4:e5:b5:97:6b:6b:42:ed:94:05:65:5b:aa:3f:
41:49:05:7d:8e:47:b6:ef:9c:44:f5:c9:7f:db:62:5c:db:c2:
6f:56:af:9e:da:1c:34:df:69:31:5b:71:ed:ea:28:73:dd:da:
db:bb:e1:0f:c6:f3:c0:dd:7f:bb:af:a3:a1:c6:09:28:63:0a:
9d:6c:ea:45:3e:28:49:aa:da:f9:0f:d8:d5:7b:3e:da:92:90:
de:52:8c:63:0d:10:29:6b:0f:54:e9:fe:ab:20:ed:de:a5:e6:
6d:e8:87:4e:64:0a:4e:f2:57:d7:5f:29:a7:85:d3:e7:05:86:
c1:7d:04:b8:d2:a5:1d:ff:22:4d:0f:d7:ff:c1:b1:c6:3f:47:
19:87:eb:da:23:37:1c:61:37:7c:5d:90:31:6f:56:fe:1f:0d:
2c:84:cc:4b:9a:d8:b8:59:e1:7e:76:9f:bb:7b:02:b2:00:88:
76:cd:08:45:fa:8e:d9:97:51:ff:2c:ec:0f:54:57:11:39:81:
ea:fa:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:23:27 2026 by rpki-client