
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: Nkoj3zk8K2vV8eFvO7qxNCORfuotdnLUs4XXYUGsOz4=
Subject key identifier: 4D:AB:E1:46:53:78:90:97:6C:2F:9C:E2:03:89:90:64:44:20:22:1F
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 57B023C86F212689C0E7FC5B6D726459D0E20442
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 0388
Signing time: Sat 28 Feb 2026 01:51:42 +0000
Manifest this update: Sat 28 Feb 2026 01:46:42 +0000
Manifest next update: Sun 01 Mar 2026 05:41:42 +0000
Files and hashes: 1: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
2: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
6: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
10: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
11: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: VqTWovcisLtqYyx6L2IJMWGMz0QSu95nn76n03YZpQI=)
13: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
14: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
15: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
17: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 05:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b0:23:c8:6f:21:26:89:c0:e7:fc:5b:6d:72:64:59:d0:e2:04:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Feb 28 01:46:42 2026 GMT
Not After : Mar 1 05:41:42 2026 GMT
Subject: CN=4DABE146537890976C2F9CE2038990644420221F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:55:11:33:3a:50:a8:22:9a:14:c2:9d:2b:
1f:8a:5b:eb:6f:ee:ea:f3:89:ca:63:1a:b6:47:9b:
bf:04:5f:d1:9d:52:6f:90:76:e4:c3:80:6d:4a:d6:
a9:b4:69:2d:17:06:f8:f0:02:33:e4:64:14:2d:29:
b0:4f:4c:8b:62:06:bd:e1:fe:3a:62:df:c4:74:2e:
1a:73:c0:14:01:d6:ac:c8:87:f7:90:54:0a:c9:1d:
e3:6e:5c:8a:86:22:4c:b5:0e:34:dc:92:57:90:fe:
e6:ec:c2:ed:60:a2:1f:2b:64:3d:48:21:2c:63:df:
2b:43:69:87:7d:5d:d2:ba:d2:6e:e7:7c:e0:c0:05:
03:4c:70:26:5b:15:99:28:e7:28:5d:76:27:05:80:
58:37:f2:6b:55:db:dd:94:25:dd:5c:39:bb:ec:6b:
ed:97:3d:78:6b:84:48:ec:f9:28:e6:4a:c9:88:10:
76:1c:f5:f1:c0:a9:6f:e6:be:1f:63:f4:5f:3a:37:
e1:50:5d:75:05:5f:97:08:0f:7e:aa:e7:0f:81:92:
65:a9:ff:28:2d:a7:57:02:19:01:46:d8:9a:a3:62:
f8:25:f2:e6:99:1a:43:44:d3:07:fa:b5:29:e5:07:
bb:14:ab:64:2c:c3:ed:c1:3c:ac:42:ff:9d:41:a2:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:E1:46:53:78:90:97:6C:2F:9C:E2:03:89:90:64:44:20:22:1F
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6b:f6:fc:86:c1:c7:76:3b:79:3f:e3:d8:06:98:af:af:9f:
b2:eb:88:b8:94:b0:76:e0:14:23:0f:1b:79:92:9c:88:8a:0c:
b1:8a:04:89:4e:cd:29:30:53:ae:3a:83:47:1c:0d:69:97:0c:
8d:d6:cf:b9:f1:fe:03:e1:9c:cb:cd:72:c5:26:42:a0:68:d9:
96:ea:c1:0a:7f:6d:9f:fe:b2:b2:fb:21:af:a8:53:e6:0c:be:
f2:ab:94:6d:ff:5a:ab:ec:50:d2:c3:dd:2d:84:32:f7:e4:f1:
2d:7b:8b:3e:67:15:03:f3:83:73:a7:72:08:fc:67:bb:84:c4:
61:91:9e:bc:28:1f:3c:c5:cf:6b:79:93:1e:bc:4e:93:be:59:
4c:27:98:59:e6:04:e5:f0:b9:65:8c:d2:d4:fa:f3:ec:c8:8a:
4e:75:7d:b8:d8:5f:08:e8:3d:7b:b9:f5:44:2d:fe:83:59:0b:
ab:7c:23:71:52:e4:c8:fb:59:51:c2:e2:d5:ab:38:4c:d8:9a:
67:03:2a:6e:ad:0c:71:dd:48:85:d5:57:6f:c2:50:68:aa:60:
e2:c9:0f:ae:71:61:f5:21:1f:95:8a:67:05:0c:e3:64:e0:91:
41:bb:a8:1e:77:8a:84:6c:71:e4:f2:1a:35:4f:a2:b3:52:48:
51:16:93:37
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUV7AjyG8hJonA5/xbbXJkWdDiBEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjAyMjgwMTQ2NDJaFw0yNjAzMDEwNTQxNDJaMDMxMTAvBgNV
BAMTKDREQUJFMTQ2NTM3ODkwOTc2QzJGOUNFMjAzODk5MDY0NDQyMDIyMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcVURMzpQqCKaFMKdKx+KW+tv
7urzicpjGrZHm78EX9GdUm+QduTDgG1K1qm0aS0XBvjwAjPkZBQtKbBPTItiBr3h
/jpi38R0LhpzwBQB1qzIh/eQVArJHeNuXIqGIky1DjTckleQ/ubswu1goh8rZD1I
ISxj3ytDaYd9XdK60m7nfODABQNMcCZbFZko5yhddicFgFg38mtV292UJd1cObvs
a+2XPXhrhEjs+SjmSsmIEHYc9fHAqW/mvh9j9F86N+FQXXUFX5cID36q5w+BkmWp
/ygtp1cCGQFG2JqjYvgl8uaZGkNE0wf6tSnlB7sUq2Qsw+3BPKxC/51BoqLvAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUTavhRlN4kJdsL5ziA4mQZEQgIh8wHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIa/b8
hsHHdjt5P+PYBpivr5+y64i4lLB24BQjDxt5kpyIigyxigSJTs0pMFOuOoNHHA1p
lwyN1s+58f4D4ZzLzXLFJkKgaNmW6sEKf22f/rKy+yGvqFPmDL7yq5Rt/1qr7FDS
w90thDL35PEte4s+ZxUD84Nzp3II/Ge7hMRhkZ68KB88xc9reZMevE6TvllMJ5hZ
5gTl8LlljNLU+vPsyIpOdX242F8I6D17ufVELf6DWQurfCNxUuTI+1lRwuLVqzhM
2JpnAypurQxx3UiF1VdvwlBoqmDiyQ+ucWH1IR+VimcFDONk4JFBu6ged4qEbHHk
8ho1T6KzUkhRFpM3
-----END CERTIFICATE-----
Generated at Sat Feb 28 21:02:34 2026 by rpki-client