
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier: /6pQM/ubFn2nY77XcM46VNlpQ7XA4K6WJ1llYcrNWfA=
Subject key identifier: 61:22:8D:85:F0:71:D3:0D:71:23:C8:7A:B6:64:0E:2C:67:5B:4A:BC
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial: 5F6899A0748FBD3BF0CA3EE20E752FEFE848CDFB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number: 0411
Signing time: Sun 26 Jul 2026 21:53:37 +0000
Manifest this update: Sun 26 Jul 2026 21:48:37 +0000
Manifest next update: Mon 27 Jul 2026 22:32:37 +0000
Files and hashes: 1: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: Kd+QOrRraURrnm7DiXTAoMIjS5JdQwzRrqoABDmfXRA=)
2: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: uQ6YdX5/WUQ6EE4b+PyH9fVZLMZegSMvb7FY+FXaqfI=)
3: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KwLIWCSeFKTrv4VaOW0JjqLpPgihB6aRK4CEWI2xsJA=)
4: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 5sqQNDGT/rzMz/zo7W9R0ikX/l7NWkkCsUtzIPxJQtM=)
5: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: AlY5Z1AihWSFAtcBObR2iby3i12VIhHyXxVUpZHdoc0=)
6: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: 8MoYL/dCbo6NYCzCa70zhAMqC8Td9hN9QuTr1/49Ea8=)
7: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: sGk7ACRgj2xUOc33oWusMkib/NoqUeSQmBUzgrM/Pzk=)
8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: wItkpJymrUCqPyPQxmidR50wXi9vPRRLUnb7cZMe6Lc=)
9: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: w6hSAZV2VtLUk8Lcxp15MhyaA5GCxf2u983hjysiB3o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:68:99:a0:74:8f:bd:3b:f0:ca:3e:e2:0e:75:2f:ef:e8:48:cd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Validity
Not Before: Jul 26 21:48:37 2026 GMT
Not After : Jul 27 22:32:37 2026 GMT
Subject: CN=61228D85F071D30D7123C87AB6640E2C675B4ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:33:7b:fb:ab:04:bc:55:48:2c:ed:ec:9f:
5c:48:50:09:30:9c:fc:d6:81:e5:06:94:99:79:6d:
39:58:96:07:08:44:1d:01:5c:60:3a:93:eb:e5:c7:
52:e4:97:b9:f8:25:47:61:5a:f2:81:f0:d7:12:1c:
1b:6d:df:a1:94:cf:9a:09:3d:88:32:6b:b6:67:7a:
33:ef:15:6b:11:30:16:99:f2:c6:3f:94:50:0b:23:
5f:9b:62:fb:ae:ed:c7:34:7b:82:e0:f3:4d:ab:6b:
d4:1e:0d:0b:6b:53:e6:42:d9:5e:57:71:81:cb:7d:
9b:9a:a3:b6:c4:60:9a:e2:1f:65:f1:58:58:62:d7:
0d:af:5e:f9:dd:55:d1:a6:65:01:60:73:ee:1e:0b:
ff:26:5a:1b:40:40:d0:cf:6a:b8:88:9f:23:ab:4d:
eb:9a:21:02:83:4a:03:6a:cc:f0:86:59:5e:63:d9:
8f:6a:aa:92:66:7b:e1:29:c4:e5:3a:6e:3c:57:5f:
8d:78:2d:2d:1c:0a:67:23:7d:a7:1d:6e:02:40:b7:
93:48:f1:13:33:26:10:91:57:42:c4:f5:d5:8f:d9:
25:77:3e:1e:79:47:2e:99:42:60:87:c7:09:54:f6:
d9:49:81:a2:5a:63:f9:f8:f1:54:c3:cb:d6:d0:40:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:22:8D:85:F0:71:D3:0D:71:23:C8:7A:B6:64:0E:2C:67:5B:4A:BC
X509v3 Authority Key Identifier:
keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:2c:c1:d1:37:39:3c:64:6a:2d:6a:0e:8f:4b:cd:ef:4d:
aa:ce:7b:a6:7b:dc:fc:4e:02:eb:7e:c9:c7:ce:a8:7e:13:b8:
bf:9d:60:43:82:42:86:ab:2d:68:0b:09:c4:e4:01:01:11:87:
2d:6f:48:ac:e5:4d:39:62:f4:38:e7:a3:31:13:f6:9d:de:f3:
0b:f9:e8:3c:89:ec:d2:18:fd:b4:49:8e:13:9b:47:f6:fb:64:
c0:00:3c:aa:dd:d7:c2:e5:e4:f9:f2:e8:95:0b:4e:52:7e:73:
51:80:3e:d0:5e:de:fc:ae:46:56:a5:9a:cb:67:77:72:fb:26:
1d:2c:43:50:e2:82:be:a5:42:d7:62:e5:fa:30:53:e7:2e:a2:
72:99:c7:5f:2d:39:0b:f9:ae:17:83:b3:ba:1d:41:25:7a:36:
45:86:61:1f:72:3f:d6:ed:39:16:62:37:f7:e6:d1:83:e4:9d:
ba:9b:45:3d:09:43:69:c7:e7:e2:9c:0d:da:d4:e1:a9:14:02:
78:2a:49:2f:59:58:21:03:12:86:98:2d:68:20:50:9a:99:23:
a1:c0:ec:78:da:ac:bc:ae:b6:85:2d:86:59:d7:dc:59:3d:62:
7c:11:79:2b:c5:79:53:ae:64:5c:9f:5a:e8:83:df:12:17:96:
dd:80:99:2d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUX2iZoHSPvTvwyj7iDnUv7+hIzfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNjA3MjYyMTQ4MzdaFw0yNjA3MjcyMjMyMzdaMDMxMTAvBgNV
BAMTKDYxMjI4RDg1RjA3MUQzMEQ3MTIzQzg3QUI2NjQwRTJDNjc1QjRBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19jN7+6sEvFVILO3sn1xIUAkw
nPzWgeUGlJl5bTlYlgcIRB0BXGA6k+vlx1Lkl7n4JUdhWvKB8NcSHBtt36GUz5oJ
PYgya7ZnejPvFWsRMBaZ8sY/lFALI1+bYvuu7cc0e4Lg802ra9QeDQtrU+ZC2V5X
cYHLfZuao7bEYJriH2XxWFhi1w2vXvndVdGmZQFgc+4eC/8mWhtAQNDPariInyOr
TeuaIQKDSgNqzPCGWV5j2Y9qqpJme+EpxOU6bjxXX414LS0cCmcjfacdbgJAt5NI
8RMzJhCRV0LE9dWP2SV3Ph55Ry6ZQmCHxwlU9tlJgaJaY/n48VTDy9bQQJ4PAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUYSKNhfBx0w1xI8h6tmQOLGdbSrwwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaCizB
0Tc5PGRqLWoOj0vN702qznume9z8TgLrfsnHzqh+E7i/nWBDgkKGqy1oCwnE5AEB
EYctb0is5U05YvQ456MxE/ad3vML+eg8iezSGP20SY4Tm0f2+2TAADyq3dfC5eT5
8uiVC05SfnNRgD7QXt78rkZWpZrLZ3dy+yYdLENQ4oK+pULXYuX6MFPnLqJymcdf
LTkL+a4Xg7O6HUElejZFhmEfcj/W7TkWYjf35tGD5J26m0U9CUNpx+finA3a1OGp
FAJ4KkkvWVghAxKGmC1oIFCamSOhwOx42qy8rraFLYZZ19xZPWJ8EXkrxXlTrmRc
n1rog98SF5bdgJkt
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:47:01 2026 by rpki-client