
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: Iebjjzso/hmgjfqx3AweeW/w9pJqJxvtMR9UWqlyHHU=
Subject key identifier: 8F:FC:3A:13:3A:02:B7:FF:7A:B6:04:66:BC:AD:C4:2B:5F:EE:D1:A7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 146B0D5D23A7D20DE448AD02D934D7CF026B7B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 0674
Signing time: Sun 12 Apr 2026 15:49:16 +0000
Manifest this update: Sun 12 Apr 2026 15:44:16 +0000
Manifest next update: Mon 13 Apr 2026 16:42:16 +0000
Files and hashes: 1: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
2: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
3: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
4: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
5: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
6: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
7: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
8: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
9: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
10: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
11: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
12: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
13: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
14: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
15: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
16: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
17: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
18: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
19: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
20: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
21: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
22: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
23: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: otFditnRVZ1jEHNpgAKfIDM1ZDNbaTxlqnI80DFQ2yQ=)
24: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
25: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
26: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
27: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
28: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
29: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
30: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
31: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
32: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
33: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
34: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: p+Be19DO+AcFb4gkjYPxJHkKBEIAgNCzzJgXrpyeezM=)
35: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
36: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
37: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
38: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=)
39: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
40: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
41: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
42: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
43: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 16:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6b:0d:5d:23:a7:d2:0d:e4:48:ad:02:d9:34:d7:cf:02:6b:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 12 15:44:16 2026 GMT
Not After : Apr 13 16:42:16 2026 GMT
Subject: CN=8FFC3A133A02B7FF7AB60466BCADC42B5FEED1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:97:6e:4a:9b:bc:49:56:6e:b8:82:1d:ba:
d7:ca:b3:d6:ff:b1:72:3d:3c:1e:ea:98:13:60:30:
08:24:f1:56:42:b9:a3:54:bd:96:21:cf:31:95:d4:
6d:14:0a:ad:9b:84:11:29:dc:09:2b:93:6c:3e:65:
81:5f:4e:93:fe:e3:85:f0:31:5d:03:81:f8:61:f2:
64:0c:51:ba:65:a7:02:e0:98:79:de:6c:90:25:20:
c5:2b:71:9e:43:61:2c:62:a8:59:cb:5f:b6:d5:97:
b5:41:b7:10:86:43:5e:8c:26:9a:69:12:5d:06:46:
3f:08:06:ce:23:e9:f5:b1:de:fe:43:df:5a:05:7d:
7e:a4:ea:c9:15:01:bd:9f:7f:28:2c:27:a0:6c:41:
48:80:cb:95:f8:8b:2c:e6:2d:83:c8:5c:65:2a:94:
19:74:94:38:4b:8f:db:16:cb:61:03:d5:29:e0:d6:
fc:aa:54:cd:9c:3e:5b:f9:24:3f:6b:ae:75:5f:6a:
f2:49:80:7b:b6:23:56:fb:df:53:35:b2:59:7d:8b:
cc:c8:32:16:1e:d6:ed:39:92:4b:38:e1:d7:49:cc:
75:6c:4d:f6:f3:19:7a:f7:dd:a8:17:2a:80:63:bd:
de:8f:0e:f4:f9:23:36:0c:0c:58:52:72:9e:4c:2c:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:3A:13:3A:02:B7:FF:7A:B6:04:66:BC:AD:C4:2B:5F:EE:D1:A7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:70:b9:1a:5d:06:90:6e:97:32:cc:68:61:9b:aa:c7:23:
b7:2b:7f:41:c5:28:ac:13:b7:e8:86:67:fa:45:1a:c2:7e:3a:
a3:34:07:c0:03:36:2e:3f:0a:62:90:3c:ed:27:4c:04:e2:7e:
39:f7:0d:5c:b8:df:f1:de:52:3d:52:d7:be:77:25:f8:d2:a1:
37:1d:a3:16:1f:0a:b3:58:08:9c:f6:88:71:44:f2:5f:1e:23:
a4:33:2b:f4:9f:bd:70:8c:ee:a3:48:4c:d6:13:3e:90:9c:51:
6c:75:23:28:d4:b2:e6:74:b0:4d:86:57:f9:3b:be:48:eb:0e:
7a:77:9e:6c:52:11:8d:12:27:a2:23:46:ac:aa:26:fa:17:dc:
b9:6b:b4:7a:0b:b0:a0:29:18:b3:25:0d:a5:65:06:2b:9b:b3:
ee:8a:22:2e:25:f3:ba:35:85:46:92:1e:d0:62:d3:d5:dc:09:
76:3d:1e:67:07:36:7d:00:d6:a1:c1:f2:80:6d:7e:e3:c7:76:
e1:4b:2b:85:89:77:51:10:af:fb:9a:d8:ea:ab:80:e5:58:14:
a0:0d:ae:38:b8:ea:d5:e1:05:41:3f:0e:5c:4e:a0:f5:21:ed:
7b:62:d8:f1:6c:84:43:c3:99:58:ea:e3:df:3c:07:00:4f:18:
f0:c6:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:40:05 2026 by rpki-client