
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: fg5QX1JZLQ5zGueoo2FEld7gt67niWNvXTLDBuINX38=
Subject key identifier: 5C:1C:72:D0:35:01:3C:A5:F4:3C:3E:24:A6:8D:1E:62:28:0F:20:28
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 061F5CDDFE89006DB20EADF72768C8D35B070A98
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 034B
Signing time: Thu 12 Mar 2026 11:55:32 +0000
Manifest this update: Thu 12 Mar 2026 11:50:32 +0000
Manifest next update: Fri 13 Mar 2026 14:36:32 +0000
Files and hashes: 1: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
2: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
3: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: hQw5yKVWzUH5fLMHpuRbysfbFkCJ7cHQ1R13ygwwTKc=)
4: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
5: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
6: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
7: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
8: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
9: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
10: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
11: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
12: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
13: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
14: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
15: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
16: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
17: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
18: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
19: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
20: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 04:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:5c:dd:fe:89:00:6d:b2:0e:ad:f7:27:68:c8:d3:5b:07:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Mar 12 11:50:32 2026 GMT
Not After : Mar 13 14:36:32 2026 GMT
Subject: CN=5C1C72D035013CA5F43C3E24A68D1E62280F2028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:ef:e1:af:ee:21:45:cb:63:0e:62:96:51:
b3:80:c5:ff:a4:02:a6:b0:e0:b9:bf:c8:17:d4:4d:
aa:f1:05:41:9b:ad:cb:10:db:8f:68:c7:25:72:ae:
8a:83:49:cf:3c:24:5b:c7:63:19:aa:96:a6:84:35:
94:cf:17:2a:57:82:78:22:9e:1b:cb:77:79:28:d0:
27:27:42:e0:7e:7b:91:c2:41:d5:d5:ac:dd:42:fc:
7b:d5:af:ea:ef:26:f4:c1:11:cb:86:fd:4d:70:33:
f2:f4:17:f2:55:e4:69:97:6c:be:cb:4d:b1:6c:64:
4c:d9:01:e1:00:86:c4:4c:59:db:eb:9a:01:e2:60:
04:f6:73:36:15:ca:67:d5:01:99:a1:06:fd:b7:fb:
0e:4c:e5:6c:b7:97:6b:fc:ae:40:80:17:5c:b1:73:
f1:21:39:99:3e:13:81:57:c9:5e:ba:1c:fb:1e:86:
e4:12:83:a0:5e:38:0f:6f:b4:66:be:41:20:e9:74:
e7:b5:2b:9b:59:15:3a:e8:b7:74:49:51:65:bc:3a:
4e:dd:7a:c6:95:15:3f:f2:57:ac:03:94:9a:a8:74:
a5:f2:dd:67:8a:29:b1:00:51:87:39:d8:bd:fd:fc:
d8:9c:2e:eb:32:11:60:46:ff:37:fe:48:ad:d4:78:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:72:D0:35:01:3C:A5:F4:3C:3E:24:A6:8D:1E:62:28:0F:20:28
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:25:be:cb:09:d2:60:75:0b:50:aa:f2:c4:91:02:99:19:3d:
e6:9e:4c:36:bd:f3:77:f9:ff:ac:80:10:4e:cc:14:f3:3b:db:
f3:ea:a3:4b:99:ae:fa:5c:11:77:a4:fc:ba:47:bc:1c:dd:33:
31:29:ec:61:40:72:71:18:7c:bd:de:97:0c:78:1c:94:a8:b0:
29:d1:13:fa:bf:2b:91:07:e0:cb:7f:be:52:f0:3d:81:1d:5f:
23:eb:b2:8e:e5:7e:d5:60:0b:0f:3c:97:42:81:c7:62:dd:de:
5d:a3:eb:a0:8a:e0:9f:76:bc:56:d1:d2:41:e3:f5:bb:dd:5a:
3b:4b:03:89:b1:7a:a2:88:3b:30:ee:b9:1e:cd:54:2c:1c:a1:
01:79:40:f5:c5:ff:f6:a9:46:62:22:b3:4f:f3:f4:4a:ba:ff:
ca:00:71:bc:ba:44:41:43:2c:7c:9e:d1:16:91:f0:e4:81:60:
27:95:be:02:02:40:85:f4:19:1f:7a:38:11:c0:e1:35:3d:ef:
8d:2e:4a:fb:bb:f9:05:81:49:fe:42:88:df:c7:f4:60:6a:00:
31:01:a7:a8:67:09:85:b7:9a:80:bb:76:80:e8:cc:61:fb:54:
d9:8f:5b:49:96:4e:8b:8e:52:c1:d1:91:e4:12:96:9d:6d:51:
30:3e:1b:b8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBh9c3f6JAG2yDq33J2jI01sHCpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3
NzdEQTkyNjAeFw0yNjAzMTIxMTUwMzJaFw0yNjAzMTMxNDM2MzJaMDMxMTAvBgNV
BAMTKDVDMUM3MkQwMzUwMTNDQTVGNDNDM0UyNEE2OEQxRTYyMjgwRjIwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOu/hr+4hRctjDmKWUbOAxf+k
Aqaw4Lm/yBfUTarxBUGbrcsQ249oxyVyroqDSc88JFvHYxmqlqaENZTPFypXgngi
nhvLd3ko0CcnQuB+e5HCQdXVrN1C/HvVr+rvJvTBEcuG/U1wM/L0F/JV5GmXbL7L
TbFsZEzZAeEAhsRMWdvrmgHiYAT2czYVymfVAZmhBv23+w5M5Wy3l2v8rkCAF1yx
c/EhOZk+E4FXyV66HPsehuQSg6BeOA9vtGa+QSDpdOe1K5tZFTrot3RJUWW8Ok7d
esaVFT/yV6wDlJqodKXy3WeKKbEAUYc52L39/NicLusyEWBG/zf+SK3UeMunAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUXBxy0DUBPKX0PD4kpo0eYigPICgwHwYDVR0j
BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw
NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3
NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5
QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbJb7L
CdJgdQtQqvLEkQKZGT3mnkw2vfN3+f+sgBBOzBTzO9vz6qNLma76XBF3pPy6R7wc
3TMxKexhQHJxGHy93pcMeByUqLAp0RP6vyuRB+DLf75S8D2BHV8j67KO5X7VYAsP
PJdCgcdi3d5do+ugiuCfdrxW0dJB4/W73Vo7SwOJsXqiiDsw7rkezVQsHKEBeUD1
xf/2qUZiIrNP8/RKuv/KAHG8ukRBQyx8ntEWkfDkgWAnlb4CAkCF9BkfejgRwOE1
Pe+NLkr7u/kFgUn+Qojfx/RgagAxAaeoZwmFt5qAu3aA6Mxh+1TZj1tJlk6LjlLB
0ZHkEpadbVEwPhu4
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:40:34 2026 by rpki-client