
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: GKNarSBS3U3qcLykxW9DrSGxKnv+INwv67nWHEigLzQ=
Subject key identifier: 64:2A:FD:CF:95:6D:D4:4A:6D:C1:11:69:77:F8:13:CC:5C:6C:88:7D
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 7C6C0D810377F1BCCF95C7146FFA28F344B9B386
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 0385
Signing time: Wed 25 Feb 2026 17:21:40 +0000
Manifest this update: Wed 25 Feb 2026 17:16:40 +0000
Manifest next update: Thu 26 Feb 2026 20:44:40 +0000
Files and hashes: 1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
2: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: acUSIxv3KvngJbvdVU/La5rHUGlqaFAhBD9Y3laVS8c=)
5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
8: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
9: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
10: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
11: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
12: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
15: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
16: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
17: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 15:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:0d:81:03:77:f1:bc:cf:95:c7:14:6f:fa:28:f3:44:b9:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Feb 25 17:16:40 2026 GMT
Not After : Feb 26 20:44:40 2026 GMT
Subject: CN=642AFDCF956DD44A6DC1116977F813CC5C6C887D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:8c:f1:c0:07:13:67:17:d4:cc:39:1e:00:
f9:d0:f2:f9:50:67:69:85:af:32:ac:12:bc:65:77:
c4:c2:21:a4:72:27:23:cc:43:cd:e6:25:d2:32:a3:
65:7a:14:a4:66:1d:58:b1:60:2d:a2:26:51:d1:db:
45:38:aa:16:34:d9:57:12:a7:4e:00:41:0e:7b:8e:
7c:c8:78:5f:68:15:95:7d:70:68:f8:7f:70:88:87:
bc:29:ba:e9:6a:a2:f8:9e:03:63:c0:d5:e2:95:d8:
e5:4b:ac:a7:00:fb:a8:30:1c:31:b0:7d:b5:57:dd:
42:98:09:94:08:c5:aa:f4:35:12:a0:f8:be:47:52:
da:e9:d0:53:07:7a:94:fc:b2:d3:0f:b9:49:e3:13:
30:82:e6:fa:9d:12:de:c0:bd:89:46:54:98:1e:43:
dd:6a:f1:c4:49:93:29:9f:24:22:3e:1c:0c:00:77:
b0:91:0d:56:39:97:4b:66:43:50:9b:8e:32:17:eb:
8f:39:49:1e:f2:17:28:13:08:01:a4:7f:27:83:15:
09:e9:0a:87:70:61:76:1a:1d:4f:32:83:f0:a7:78:
9f:77:e1:df:dd:a2:63:40:8e:06:9e:4d:a0:a3:92:
10:93:53:91:f9:f3:77:08:93:24:f9:ae:50:ab:91:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2A:FD:CF:95:6D:D4:4A:6D:C1:11:69:77:F8:13:CC:5C:6C:88:7D
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:b9:f0:7d:d1:90:44:a0:46:86:ae:92:3b:fb:64:32:05:
2e:f7:5c:3c:96:bf:3e:40:c6:ce:06:28:4a:2a:58:de:3c:04:
6f:2d:3c:77:db:f1:6b:37:43:d2:58:6e:2a:c7:08:f6:e0:c9:
a0:7a:05:21:7d:5e:fb:0a:da:47:28:eb:10:a0:0d:96:cb:62:
af:07:56:0d:a5:9d:89:eb:10:c1:85:c2:68:61:2f:7d:9f:17:
0c:aa:7b:77:61:a1:cd:59:83:18:89:3f:82:fc:b9:df:77:9e:
02:ff:23:f3:8e:a2:c8:3a:05:9c:51:d5:18:c9:e9:ea:c8:e1:
1b:65:6e:cc:f4:71:7c:fd:71:a4:74:c3:f9:8f:4e:a1:67:1a:
ea:5b:ed:76:36:04:5d:20:97:ab:8c:c6:d5:ef:c5:a1:11:b5:
65:58:b1:4e:27:2c:00:ab:74:3f:e8:a7:7c:25:73:24:de:8e:
e9:ad:18:df:8e:0f:16:77:14:93:f7:fa:a2:a0:39:ab:df:75:
c7:4b:d6:ca:3d:96:b7:02:2f:16:de:25:da:30:05:e6:f7:cd:
84:4a:5a:61:91:0b:55:0a:ba:3f:c3:12:2d:08:0a:87:d7:14:
8a:00:79:93:c6:7a:7d:45:46:42:24:6d:1e:dc:52:8c:82:96:
bb:6b:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 19:43:43 2026 by rpki-client