
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: VARhwiVLSivGO0+oDY9HkTSVCvP47cg+a6OWBZZQB7E=
Subject key identifier: 7A:EF:EF:96:82:C3:4A:3A:5B:81:D4:0B:9A:B7:3E:D9:EA:34:EE:EC
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 05966FBCA628621D3C8D73ABC82B008EF849C983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 0660
Signing time: Sat 28 Mar 2026 21:55:38 +0000
Manifest this update: Sat 28 Mar 2026 21:50:38 +0000
Manifest next update: Sun 29 Mar 2026 22:06:38 +0000
Files and hashes: 1: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
2: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
3: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=)
4: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
5: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
6: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
7: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
8: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
9: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=)
10: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
11: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
12: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
13: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
14: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
15: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
16: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
17: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
18: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
19: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
20: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
21: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
22: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
23: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
24: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
25: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
26: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
27: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
28: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
29: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
30: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
31: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
32: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: rmpBehI3TSENMWKYdhOKsIDi2wLXAxsJ3MsxQzO/Dmo=)
33: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
34: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
35: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
36: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
37: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
38: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
39: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
40: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
41: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
42: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
43: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
44: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
45: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:96:6f:bc:a6:28:62:1d:3c:8d:73:ab:c8:2b:00:8e:f8:49:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Mar 28 21:50:38 2026 GMT
Not After : Mar 29 22:06:38 2026 GMT
Subject: CN=7AEFEF9682C34A3A5B81D40B9AB73ED9EA34EEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:ff:01:6d:f7:e2:96:39:85:0a:32:d9:b8:
f3:42:b5:9b:57:d9:d9:5a:cc:da:e2:49:42:34:02:
26:c0:a7:b3:01:cc:a0:74:1b:6a:54:40:39:14:f6:
9e:a4:f9:1c:ff:61:78:d2:66:0d:ee:fc:5c:a2:62:
aa:5b:65:62:34:14:1f:62:df:ed:4c:4c:a6:39:c9:
a0:e6:2b:a5:0e:1a:53:63:ea:90:ff:35:31:fc:67:
70:cc:f0:89:2c:8a:f2:82:96:84:7e:c5:07:ac:53:
94:ad:18:55:d7:59:99:f9:62:fe:31:34:be:c7:bd:
2c:23:21:49:96:71:31:e6:af:94:ed:da:cf:c8:4e:
88:11:52:df:1d:c6:0c:0b:95:47:0c:74:15:ad:84:
7a:17:23:0b:24:38:97:fb:10:16:39:5e:a9:9b:05:
b9:40:8e:ac:13:cd:6a:f3:23:da:2d:71:50:32:fd:
d6:12:71:6f:8e:0d:ad:29:82:b7:7c:26:3e:f2:05:
8d:a6:82:b6:0d:35:a7:03:c6:af:95:b4:40:1f:4e:
f6:b3:ee:a2:7a:51:ea:89:69:8d:58:b9:2e:88:58:
6f:d3:b8:86:ae:84:7e:6f:8c:77:54:86:e7:31:67:
1c:5c:71:84:48:10:c2:4e:f9:5d:d0:76:07:94:79:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:EF:96:82:C3:4A:3A:5B:81:D4:0B:9A:B7:3E:D9:EA:34:EE:EC
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a2:5d:e3:74:14:fb:2d:3c:d4:99:84:ff:68:1d:d8:ab:65:
81:3a:a1:8b:f7:2f:5a:13:1c:fb:30:99:2e:b7:30:fd:aa:e4:
2a:af:17:0b:54:c7:ff:a8:cc:3a:a4:bc:7f:8c:f1:14:54:8a:
b6:58:22:f6:a5:a6:26:7e:32:6f:3c:0c:41:13:1a:0b:ca:f5:
76:5e:14:a7:6b:8e:cf:60:34:25:9d:1b:77:96:27:32:95:8d:
d1:c6:1e:83:02:68:b6:37:f8:e1:94:7f:77:3f:c7:9f:f9:48:
40:18:9b:2f:86:59:ab:76:92:57:3b:09:8e:b6:77:a5:f0:42:
47:f2:37:e2:41:8d:a6:e6:d5:2c:e2:66:e5:b8:d1:ac:56:a4:
c8:fb:43:4a:72:d6:c5:c6:6b:ea:b2:04:9e:82:97:dd:0d:4f:
6c:83:b7:57:c2:ab:20:68:82:ad:da:cb:22:a0:75:40:82:41:
50:ba:89:f2:10:56:b5:0a:01:04:47:69:31:7d:da:b1:c1:a7:
03:1d:1e:18:3c:a3:ce:de:0d:43:fc:5f:a1:da:65:ef:13:d4:
b2:03:01:4b:d5:44:18:fa:52:f8:9c:c7:6c:f7:53:e2:d4:fe:
05:5f:98:de:f5:34:04:00:8f:73:98:6c:81:93:50:25:4a:85:
8b:d1:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 02:30:49 2026 by rpki-client