
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: XZ7DSsKuj77CbJGWzdacZOGKkGjVS7UuXQezsUWBKb8=
Subject key identifier: 34:9D:EA:54:CB:8B:26:6D:CB:AF:B6:C7:04:6D:4B:10:BA:01:AC:AB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6C172F15F1006B98ECC1C0611767B7082A7D5D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 0663
Signing time: Tue 31 Mar 2026 05:15:03 +0000
Manifest this update: Tue 31 Mar 2026 05:10:03 +0000
Manifest next update: Wed 01 Apr 2026 08:47:03 +0000
Files and hashes: 1: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=)
2: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
3: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
4: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
5: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
6: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
7: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
8: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
9: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=)
10: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
11: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
12: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
13: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
14: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
15: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
16: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
17: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
18: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
19: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
20: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
21: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
22: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
23: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
24: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
25: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
26: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
27: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
28: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
29: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
30: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
31: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
32: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
33: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
34: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
35: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
36: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
37: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
38: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
39: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
40: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
41: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
42: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
43: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: +DYM06B3kTpLjCpNFuGAyTcI39xQ86csZknnO2uCTU8=)
44: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
45: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 08:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:17:2f:15:f1:00:6b:98:ec:c1:c0:61:17:67:b7:08:2a:7d:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Mar 31 05:10:03 2026 GMT
Not After : Apr 1 08:47:03 2026 GMT
Subject: CN=349DEA54CB8B266DCBAFB6C7046D4B10BA01ACAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:90:be:ab:53:d6:4f:ad:31:fd:40:52:da:
45:09:88:c0:85:d8:c8:2a:50:a1:50:9a:cd:cb:e8:
03:8f:96:83:fe:f7:c7:17:d0:71:45:ca:4f:98:f7:
4d:ae:ca:e0:10:61:ba:57:6a:5d:68:44:90:6a:2a:
f2:02:0f:af:b6:5b:84:ce:66:6d:56:84:6a:50:ac:
2c:d4:67:23:5d:ae:d9:f1:93:e6:76:b4:f1:4e:3e:
7a:f2:c4:56:b3:c1:ed:47:c8:23:7b:6c:5e:7e:b3:
49:d6:7e:eb:03:6d:05:fa:18:19:0b:87:0e:75:ed:
e8:56:7d:9c:9f:76:d6:ad:61:89:d0:17:a2:a9:a8:
73:92:6b:79:6f:78:13:70:85:30:f0:d6:bb:8f:1b:
26:35:bb:e0:9b:b6:c0:73:6f:da:0a:f9:24:db:2b:
2f:e7:81:f3:da:d6:b2:23:49:9f:46:48:95:ea:4d:
6e:3e:78:c8:33:97:cb:ba:1e:d7:05:fb:93:5b:7b:
b4:48:ee:10:0c:d2:94:22:cb:5c:4b:80:01:0b:32:
ae:f9:64:ca:51:83:35:74:58:21:9d:f0:af:e7:98:
80:d5:a6:84:27:b8:3f:e8:e9:4f:95:6b:15:a0:0a:
6b:50:f4:3a:af:db:83:3a:0b:6b:40:a4:67:b1:94:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9D:EA:54:CB:8B:26:6D:CB:AF:B6:C7:04:6D:4B:10:BA:01:AC:AB
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:ab:89:43:f1:ea:f4:28:39:4c:e4:2a:70:49:cb:d7:47:
0b:4a:9f:40:6f:77:80:57:ff:42:ca:75:8c:11:47:98:73:43:
c1:5c:42:aa:56:ab:77:e6:ac:b2:ce:1a:10:b8:5b:92:20:47:
14:48:44:35:9d:63:c8:ce:9d:d4:56:17:c1:c8:7a:2e:b9:c9:
01:e2:78:ae:49:14:73:fc:b8:92:6e:3f:bc:65:40:53:31:42:
1f:91:09:a9:f5:4a:42:4f:23:4a:c3:fb:fb:4a:a9:86:96:af:
35:a6:ca:ea:d6:28:d3:47:35:90:ea:d5:a9:3b:a0:19:e3:85:
30:46:3e:1a:97:34:91:15:ef:c4:cc:b7:00:ad:68:48:14:89:
26:f1:16:2d:33:b1:dc:45:40:a3:06:f8:13:fb:0b:12:37:0a:
9a:22:ef:c6:03:26:19:71:8d:d6:57:e8:4d:f7:b2:b4:53:e8:
57:8f:15:b1:2a:8a:fc:49:c6:5d:93:7c:32:24:93:b9:a0:b2:
9d:ad:2d:e1:e7:f9:1c:78:a6:0d:c7:4e:50:78:6b:c4:0c:1a:
e2:86:db:94:86:dd:5c:e8:88:41:33:35:52:fb:f8:19:81:8b:
c3:f3:3f:61:2f:75:55:c9:5b:12:76:33:c5:ab:bb:38:73:41:
0b:a3:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 02:31:02 2026 by rpki-client