
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier: wOQjMRhhVGjq1HqczcxrJXFmJivREfPRgUSKkER02pg=
Subject key identifier: 5E:F4:A6:95:F5:D6:FF:C3:54:2B:D4:94:D3:F2:B0:35:32:04:A6:F0
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 2AA4E4C1759081DEB9F57F3E76B2A267CFC115A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number: 0330
Signing time: Tue 05 May 2026 15:06:17 +0000
Manifest this update: Tue 05 May 2026 15:01:17 +0000
Manifest next update: Wed 06 May 2026 19:04:17 +0000
Files and hashes: 1: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
2: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
3: 3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa (hash: 5++guIPzefH5qk3d1r10m+wo361JOjbMdqdsBD/FSXg=)
4: 3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa (hash: gezzVEAXNfEHkX7ccEEnJqNTNH1SM3/ga2rOHek063I=)
5: 3139352e35382e3133302e302f32342d3234203d3e203231383539.roa (hash: k591NQN+aq5GOAJctvYRnaCZlXbb2X79lNSZeNRbDbY=)
6: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=)
7: 3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa (hash: 5oRkZNHY5jOHApMzLJhjusPpBUXkcMRnJe0gClp6VvQ=)
8: 3139352e35382e3134342e302f32342d3234203d3e20323135383835.roa (hash: 1G+IIhvRZQTbPBEhWzqB7uY1cQBNqsyaA/ZuiNzrlZc=)
9: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
10: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
11: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=)
12: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: L6EcSxv/8v4D0/CLWOqKVBeHeFjOQz7dLLPYWBSlA7E=)
13: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
14: 3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa (hash: nBVQUxoc2ECQR4gh4v5xdeMnohNknC3pHq03e7cz2d4=)
15: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
16: 3139352e35382e3132392e302f32342d3234203d3e20313534343130.roa (hash: 719pz1J2M9LBzXYfxJZD7IOABsm+fjKN2rYOrlfaeGU=)
17: 3139352e35382e3132382e302f32342d3234203d3e20313938363231.roa (hash: l+XTLQfX5yQ3z7ZHO1eIgcb1r1mW4fYeJV4EXq4TWow=)
18: 3139352e35382e3133312e302f32342d3234203d3e20313939343233.roa (hash: S5v7wMzaS/2PJOI+MPHcglquqzX4dyj4jouiNoRRJok=)
19: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
20: 3139352e35382e3134362e302f32342d3234203d3e20383334.roa (hash: tO+CuRe3IbgeSNnBX3EE2Z49XWjMTYBD8+rMD4LGrAE=)
21: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (hash: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=)
22: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=)
23: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
24: 3139352e35382e3133332e302f32342d3234203d3e203633313939.roa (hash: 5noFDIEnAdeG18LR9IsYvqtNKW3temWwogR5eHF0tvI=)
25: 33312e39392e3230342e302f32342d3234203d3e203334393839.roa (hash: JVWFxpQPMnUSUYXGgXSKiWACaODSdFmwWfY1F1nUBQA=)
26: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
27: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
28: 3139352e35382e3133342e302f32342d3234203d3e20323033373538.roa (hash: cF8g+YnTuUZTSmpqY8eYqJJ8ewBqfSd6TlufY6uCyow=)
29: 3135302e3235312e3232382e302f32342d3234203d3e20313530323933.roa (hash: y1DIDArsoeyb5bBo3+7mcFktw9jnmZ5dGyg68vVIV44=)
30: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
31: 3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa (hash: BzTkrv0CEdwvD2amKDiqUDeOvl89WiEx4gDSFunGD3Q=)
32: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
33: 3139352e35382e3135312e302f32342d3234203d3e20323032343538.roa (hash: S52wGd4ZwVigg1qwK1PLqhCMszEkIbLvDfCCJBJzY5Y=)
34: 33312e39392e3230332e302f32342d3234203d3e2039303039.roa (hash: ukWKTFNy0nhBe+FLsHfZ/BgA8cd8+jxoh9zUxPcORkk=)
35: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: KTVPVjJUeOuLavU6Oa4i7/jMWolwdDs6JMPn908p4QE=)
36: 3139352e35382e3134392e302f32342d3234203d3e20313939393135.roa (hash: 3Mj/czyKvzJvBOAr+N4/hqCZ4Nz6TSfuuRSmK4rh/zQ=)
37: 3139352e35382e3133322e302f32342d3234203d3e20383334.roa (hash: GolpS5GkGhvaWVfDM3LwQuLKcifWaEjy6gRVRB1uMy8=)
38: 3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa (hash: C1Xnl1s5qrsOjZZAOSJQtaQY1S3j/20f4ciZNXhnp3I=)
39: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
40: 3135302e3235312e3232372e302f32342d3234203d3e20323032373931.roa (hash: AEn8tTs6i3Wn6/AJ3IvF0e3WYXLEjpMG1Qxt5oii3So=)
41: 3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa (hash: 75kKSWuTAcCxuCVoGmf6y8s6f7AnPyLhz9c9nMTZ46g=)
42: 33312e39392e3230352e302f32342d3234203d3e203136323736.roa (hash: iY6Z6WsOmh7cm9RSrsKpdBWAVKfI3GwyklAdOa/akGA=)
43: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
44: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
45: 3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa (hash: JJTteUvrmiPY+U+momyu9uK2wrpU9K7XzaRj5OzwPkc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a4:e4:c1:75:90:81:de:b9:f5:7f:3e:76:b2:a2:67:cf:c1:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 5 15:01:17 2026 GMT
Not After : May 6 19:04:17 2026 GMT
Subject: CN=5EF4A695F5D6FFC3542BD494D3F2B0353204A6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:5f:c6:4a:79:e9:08:14:5b:0b:54:88:1d:
e5:9f:2a:a9:5a:0c:db:8c:4f:d8:d6:f7:3a:00:30:
26:ef:fa:58:a3:8e:ed:52:d1:f1:22:f3:76:f8:44:
a4:1e:8a:8c:68:f2:c8:f1:48:3f:f1:71:23:71:0b:
47:fd:53:3a:ed:26:74:85:d3:c7:b3:a5:0b:78:5c:
5f:38:50:be:22:e7:6e:0e:33:02:f8:ff:a3:bd:b7:
a6:32:fd:40:c1:41:6a:c9:4d:50:42:31:93:8b:d9:
fe:ad:97:7d:40:69:36:39:72:3c:a1:d1:85:9a:5c:
3b:4b:7f:96:b5:a2:ff:3e:28:e3:47:ec:77:3d:59:
ef:61:05:22:37:58:97:57:83:0d:1d:af:63:d4:04:
18:51:b1:07:9d:67:b0:d1:4e:b3:32:69:77:a5:50:
4b:ee:4c:e3:15:bd:b8:93:05:3b:5c:56:63:8a:2b:
34:97:25:6c:cc:75:9a:8c:15:c2:13:86:f3:ed:53:
3d:97:8f:df:ab:37:2b:d2:be:74:2a:48:73:98:d9:
80:7f:65:7e:30:4c:6f:0f:52:31:02:5d:e4:ba:05:
56:b4:56:ea:00:46:b0:1f:86:58:4c:28:ce:16:3f:
34:ad:5c:08:56:f7:d5:d8:97:4a:11:6c:c9:87:de:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:A6:95:F5:D6:FF:C3:54:2B:D4:94:D3:F2:B0:35:32:04:A6:F0
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:ad:6a:bb:ed:87:52:b3:ad:33:27:a2:ec:b4:29:6b:4d:
d9:1a:6e:a1:ec:da:9f:12:e8:d6:0e:b2:41:7b:03:a9:5a:14:
4d:1e:5a:2a:48:ef:13:03:4a:69:a0:fb:b7:99:8b:d9:e6:f5:
12:d2:94:cf:eb:6d:9e:42:bf:39:e9:b3:64:1e:13:39:99:96:
08:38:93:b8:13:7a:7f:64:43:9f:4a:08:26:f9:5c:c5:0f:3b:
8d:de:ed:30:db:e9:3c:a2:51:32:f0:5f:b7:0d:6b:6f:f3:54:
45:20:98:0d:2f:d1:68:92:44:e4:80:09:e8:d0:d0:f3:a0:3f:
32:2d:7a:ab:45:1f:13:7f:25:09:e0:5d:b7:88:13:19:04:61:
bc:7a:9f:0f:e3:9e:3b:35:b5:bf:76:f5:42:86:5a:a0:63:d8:
79:55:a5:37:40:bc:3e:0c:94:1b:72:77:e1:4a:c1:45:6d:50:
28:ee:e1:5e:5e:90:ec:1a:6c:51:12:2f:a0:83:eb:15:93:d3:
08:c2:66:f6:d2:fd:f2:68:8b:5d:2a:24:fe:03:21:32:50:99:
27:a7:5c:a1:bc:b2:d2:75:70:95:82:0b:5e:f0:e9:7d:c5:f7:
c6:33:e5:e4:38:c4:65:35:e2:78:bf:84:19:29:11:d8:7e:1c:
ae:0f:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:41 2026 by rpki-client