
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier: 1XXM4y3RE6EPCedPenaIksDPzZ7AQn42+0yUvEsavLs=
Subject key identifier: 15:06:F8:52:BC:09:CC:DD:7B:CA:50:E9:E0:69:52:89:EA:ED:BB:58
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 1D92BE7BC0838D21F4DE5761AE1B24E140CE09D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number: 07EA
Signing time: Fri 04 Sep 2026 03:10:25 +0000
Manifest this update: Fri 04 Sep 2026 03:05:25 +0000
Manifest next update: Sat 05 Sep 2026 04:16:25 +0000
Files and hashes: 1: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
2: 3231332e3133392e37392e302f32342d3234203d3e20323139333934.roa (hash: cZZDfh4b1GtBTnTClSPcJjjghjB2nMfOyud4qBtt4PQ=)
3: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
4: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
5: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
6: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
7: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
8: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: VYzgKLK7MXduLD/erKCxZ+qm7C6qg55UqcvJdRa76GA=)
9: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
10: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
11: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=)
12: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
13: 3231332e3133392e36362e302f32342d3234203d3e20313432323430.roa (hash: 5t9JgBLfbSHlr0AtP6HJsmpn/znBmM3oZbMVnSup99Y=)
14: 3231332e3133392e37392e302f32342d3234203d3e20323139333933.roa (hash: WQjC8RWC2PKreXWfRiyeO0KVcM/bEXAR59hsyPiTN1k=)
15: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
16: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=)
17: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
18: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=)
19: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=)
20: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
21: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
22: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
23: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
24: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
25: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
26: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=)
27: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
28: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
29: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=)
30: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=)
31: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
32: 3231332e3133392e36372e302f32342d3234203d3e20313437323831.roa (hash: vwViVlFTDiI0dOCPl+PDo5ipN2yW3G8ItQyNk/w7+dI=)
33: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 04:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:92:be:7b:c0:83:8d:21:f4:de:57:61:ae:1b:24:e1:40:ce:09:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 4 03:05:25 2026 GMT
Not After : Sep 5 04:16:25 2026 GMT
Subject: CN=1506F852BC09CCDD7BCA50E9E0695289EAEDBB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:f1:1e:b6:24:9f:62:d3:14:b6:70:b4:8f:
b0:19:c7:20:69:71:f4:c7:d9:14:0d:99:cc:2f:61:
83:91:04:92:e6:e1:02:01:1b:d8:c1:a7:d0:1d:36:
53:29:9d:ab:c5:8e:38:97:58:14:fd:f9:86:72:bb:
7a:ab:0e:c1:14:8a:54:e4:99:fc:72:b5:1b:3f:bb:
62:fb:96:28:d4:57:4e:7d:2a:12:9f:e3:e9:1a:0d:
0f:57:21:b0:38:cd:44:02:f9:4a:34:ed:65:80:70:
67:04:6b:9b:68:cb:ac:87:b8:a8:6d:0a:f4:e5:65:
60:ae:06:c5:66:6b:26:fb:86:1b:e7:2a:86:2f:38:
be:27:0b:3c:10:49:ce:d8:6f:ec:51:b1:bd:56:d2:
26:ff:58:72:7c:a9:a8:9a:6f:d6:d2:5d:c1:6a:a6:
96:75:65:e5:c5:a4:37:c9:20:82:1f:a0:4e:88:69:
b9:1f:c5:85:c0:ad:61:89:4f:0c:5d:2c:39:90:62:
72:25:19:e5:94:f5:d9:86:60:e2:eb:5a:89:2b:d7:
aa:03:0a:35:17:bc:f9:dd:c0:4b:a1:1f:21:70:fd:
5c:5a:e8:74:1a:6a:a6:17:7c:5b:95:1d:d7:6d:86:
c6:cb:48:89:e6:fd:24:1e:17:1e:fa:15:dd:bd:06:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:F8:52:BC:09:CC:DD:7B:CA:50:E9:E0:69:52:89:EA:ED:BB:58
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b0:11:21:72:45:c0:ad:80:9e:e4:06:b1:9b:2b:d4:4f:87:
04:27:01:dc:0d:a7:11:9d:5b:64:ad:b0:77:b5:72:06:b5:80:
e3:27:8c:50:e0:35:4b:3c:e0:7d:eb:e4:46:81:b5:8b:3b:96:
89:ab:7c:fd:4c:99:26:a5:12:59:e7:a2:10:16:6e:15:c8:9b:
bf:54:de:0b:a2:e0:7e:c3:a9:1c:63:35:b7:9b:fd:24:ba:4f:
3c:22:f8:b9:b1:fd:9f:fc:1b:70:de:55:fb:c5:06:8b:8d:67:
1e:97:46:28:b4:9d:1e:33:9f:2d:61:dd:c8:61:25:54:9c:5f:
73:c6:06:6c:3c:29:5a:9c:26:d2:4a:24:b9:88:70:3d:cc:6c:
da:22:d5:98:20:85:6f:ea:56:75:73:9a:28:e4:a6:6e:bb:a7:
32:e6:fb:b8:ae:57:35:72:5a:17:b7:c9:af:ca:61:50:b8:bd:
44:25:0b:01:ef:ad:55:da:0a:e0:23:3c:99:90:0e:b8:ac:fd:
9e:3f:62:21:fb:e5:37:7e:1f:80:1a:a0:42:63:2a:6e:b2:36:
bc:fb:cc:18:00:c3:ea:74:76:7c:cb:8a:e3:f1:bd:24:8b:81:
21:a7:0c:aa:bb:8d:60:58:62:97:3f:70:af:90:ab:fc:ce:78:
f9:54:0a:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHZK+e8CDjSH03ldhrhsk4UDOCdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yNjA5MDQwMzA1MjVaFw0yNjA5MDUwNDE2MjVaMDMxMTAvBgNV
BAMTKDE1MDZGODUyQkMwOUNDREQ3QkNBNTBFOUUwNjk1Mjg5RUFFREJCNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzPEetiSfYtMUtnC0j7AZxyBp
cfTH2RQNmcwvYYORBJLm4QIBG9jBp9AdNlMpnavFjjiXWBT9+YZyu3qrDsEUilTk
mfxytRs/u2L7lijUV059KhKf4+kaDQ9XIbA4zUQC+Uo07WWAcGcEa5toy6yHuKht
CvTlZWCuBsVmayb7hhvnKoYvOL4nCzwQSc7Yb+xRsb1W0ib/WHJ8qaiab9bSXcFq
ppZ1ZeXFpDfJIIIfoE6IabkfxYXArWGJTwxdLDmQYnIlGeWU9dmGYOLrWokr16oD
CjUXvPndwEuhHyFw/Vxa6HQaaqYXfFuVHddthsbLSInm/SQeFx76Fd29BiOLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFQb4UrwJzN17ylDp4GlSiertu1gwHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i
NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0
NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLARIXJFwK2AnuQGsZsr
1E+HBCcB3A2nEZ1bZK2wd7VyBrWA4yeMUOA1SzzgfevkRoG1izuWiat8/UyZJqUS
WeeiEBZuFcibv1TeC6LgfsOpHGM1t5v9JLpPPCL4ubH9n/wbcN5V+8UGi41nHpdG
KLSdHjOfLWHdyGElVJxfc8YGbDwpWpwm0kokuYhwPcxs2iLVmCCFb+pWdXOaKOSm
brunMub7uK5XNXJaF7fJr8phULi9RCULAe+tVdoK4CM8mZAOuKz9nj9iIfvlN34f
gBqgQmMqbrI2vPvMGADD6nR2fMuK4/G9JIuBIacMqruNYFhilz9wr5Cr/M54+VQK
ag==
-----END CERTIFICATE-----
Generated at Fri Sep 4 19:56:46 2026 by rpki-client