
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: UPCabBVLUOH0fqWo7WS+5s2RGutpQAP8Ryp2eLHegfU=
Subject key identifier: AD:9B:DF:71:51:82:6B:73:A3:1E:98:8D:13:DF:D6:3C:26:03:13:E1
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5CDEE28B2F1CC7150399116749DF8714681B5738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 068E
Signing time: Tue 28 Apr 2026 14:51:32 +0000
Manifest this update: Tue 28 Apr 2026 14:46:32 +0000
Manifest next update: Wed 29 Apr 2026 18:32:32 +0000
Files and hashes: 1: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
2: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
3: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
4: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
5: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
6: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
7: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
8: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
9: 322e35382e38352e302f32342d3234203d3e20333939343638.roa (hash: DxOq5kGC1UY7gmuJl9GjMiorjvhCP4eEet6VwfLbzJ4=)
10: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
11: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
12: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
13: 34352e382e3137332e302f32342d3234203d3e20343032323134.roa (hash: hRMpZt50rHA/kNyP9JTpxG/2+AVVgI2kmc0YKSYBUlY=)
14: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
15: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
16: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
17: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
18: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
19: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
20: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
21: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
22: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
23: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
24: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
25: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
26: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
27: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
28: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: Yn1WCXF3Jm8ffWAQejIIza+sF/YfSpIhKVGYyMJ5R9s=)
29: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
30: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
31: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
32: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
33: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
34: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
35: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
36: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
37: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
38: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
39: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
40: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
41: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: p+Be19DO+AcFb4gkjYPxJHkKBEIAgNCzzJgXrpyeezM=)
42: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
43: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 18:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:de:e2:8b:2f:1c:c7:15:03:99:11:67:49:df:87:14:68:1b:57:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 28 14:46:32 2026 GMT
Not After : Apr 29 18:32:32 2026 GMT
Subject: CN=AD9BDF7151826B73A31E988D13DFD63C260313E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:83:ac:16:ce:8b:ce:6d:a1:d7:f8:ce:79:
07:80:07:d7:56:23:3f:2b:7f:df:fc:5d:b4:b3:0c:
5f:11:b5:ce:c6:ca:92:90:04:36:9f:37:d4:f8:c7:
72:a3:40:64:24:84:72:7e:60:0d:82:22:58:a6:ff:
19:53:b8:23:e2:07:15:53:55:c1:f0:23:1a:05:ab:
85:9c:8a:16:d3:29:f5:c7:00:1d:d6:2f:19:68:e7:
df:e9:12:e0:cb:ac:d3:b6:51:d3:02:96:56:7d:b6:
43:d9:df:11:a2:3d:82:42:16:21:8a:1d:3c:d4:da:
c7:41:7d:8d:be:f6:e6:f6:57:b7:a0:25:c0:47:02:
94:22:e3:41:1e:1d:35:91:bc:34:24:ab:97:b1:e1:
92:b4:df:a2:47:29:97:d4:57:73:55:68:1e:3a:a6:
7c:97:ba:31:24:90:ba:eb:91:04:1b:93:27:dd:19:
3c:f0:1c:6f:de:39:04:63:94:b6:f0:eb:47:73:22:
d8:bb:d7:7d:6d:a2:08:7b:c0:d2:4b:96:61:6e:a7:
67:c0:a0:3b:cd:7e:31:6c:b0:a6:a7:58:66:ef:3c:
ea:3f:25:80:26:2a:7d:c0:c6:66:cf:6f:8e:31:bc:
8c:6c:36:e5:e8:a6:3f:2e:09:1a:2d:25:1a:cf:c2:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9B:DF:71:51:82:6B:73:A3:1E:98:8D:13:DF:D6:3C:26:03:13:E1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e9:30:30:e5:dc:d9:45:fc:2e:5b:40:65:60:1e:83:13:3a:
74:7b:3b:d7:88:f4:ae:76:7c:a7:b6:51:95:88:4f:0a:bb:60:
af:67:97:0e:65:69:81:61:ee:df:4c:a4:01:64:ff:15:e1:11:
62:a5:a4:a7:b2:26:01:a5:d3:59:cd:07:77:4f:22:07:8f:d7:
b1:77:f2:84:87:99:e8:0b:fa:58:c5:ca:e6:df:ba:34:00:d7:
a1:10:36:17:43:da:4f:77:58:f8:35:26:c3:0f:02:53:0d:1c:
0e:b2:86:bb:97:86:42:7a:22:63:62:b3:0b:e6:24:4f:2a:d4:
d7:fb:46:6a:fc:5f:83:2f:e0:49:17:e6:fd:8e:1e:0f:45:5b:
f3:9d:e6:46:62:a5:61:13:a0:af:44:73:43:a4:55:a0:7c:e9:
c6:0a:02:7f:ce:7d:48:8f:06:2d:e0:9a:98:44:b3:8c:09:ac:
d1:2a:c3:c2:95:21:ad:81:b8:89:05:19:84:6e:4c:c3:68:48:
95:df:48:8d:03:34:a3:23:75:30:d9:df:e1:99:f5:0e:8e:da:
40:36:2d:8a:d2:f7:64:06:b6:ae:e9:54:92:70:95:71:a0:af:
04:07:5d:0f:78:c7:54:c7:12:be:ea:0d:78:f1:74:c2:b3:ff:
cb:c8:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 05:41:46 2026 by rpki-client