
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: gIU14pXC4hfzW9bp5Y6ZCOepnOa050GF3ljZbzMQxak=
Subject key identifier: 3F:39:2D:0B:2D:FE:03:FB:6E:1B:9A:D7:79:AB:0B:24:55:96:53:CA
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 12DB823A44100CEF6FA1C62CEC62EC887C5EF7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 0716
Signing time: Wed 29 Jul 2026 12:32:52 +0000
Manifest this update: Wed 29 Jul 2026 12:27:52 +0000
Manifest next update: Thu 30 Jul 2026 16:13:52 +0000
Files and hashes: 1: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
2: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: FMlN2I7ZkSkG9FZf3ysxqiqp6JY+ujFUSpOKYKLyfHA=)
3: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
4: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
5: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
6: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
7: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
8: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
9: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
10: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
11: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
12: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
13: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
14: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
15: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
16: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
17: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=)
18: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
19: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
20: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
21: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
22: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
23: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
24: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
25: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
26: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
27: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
28: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
29: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
30: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
31: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
32: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
33: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
34: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
35: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
36: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
37: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
38: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
39: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
40: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
41: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 16:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:db:82:3a:44:10:0c:ef:6f:a1:c6:2c:ec:62:ec:88:7c:5e:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 29 12:27:52 2026 GMT
Not After : Jul 30 16:13:52 2026 GMT
Subject: CN=3F392D0B2DFE03FB6E1B9AD779AB0B24559653CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:cc:81:ce:87:4e:96:c0:bf:e6:fd:6e:9d:
33:21:09:23:f1:2b:61:8a:a1:91:32:02:ae:53:74:
a6:18:bc:d1:49:a9:69:bd:5f:70:0d:da:27:04:95:
2d:ab:eb:c2:a9:2e:53:bc:bb:95:58:30:ff:3b:21:
7d:8c:2f:51:49:5c:69:fb:88:c3:92:0e:13:69:3c:
7e:c3:0e:03:d8:0a:76:ad:e8:a1:01:0f:2d:fe:ba:
ff:6a:f6:3d:fe:61:00:ea:20:74:5a:95:98:f4:6c:
19:4b:4d:38:c4:28:d2:e0:03:e2:df:2d:fa:fc:25:
ea:6d:bf:cc:35:4d:82:15:9c:26:e0:a2:f1:47:8f:
28:de:df:03:bd:e9:39:77:67:78:63:f0:71:8f:a9:
cc:29:4e:a4:59:ac:fc:81:1b:32:a1:19:f2:85:6d:
66:02:58:f7:6f:b9:72:c5:46:1d:f3:04:35:05:ef:
8a:48:b2:40:35:d0:de:cf:9e:0c:19:6c:5e:4b:a4:
80:1f:e4:d8:6b:dd:67:51:75:9a:ae:e2:08:47:b4:
16:4d:91:53:0f:05:6e:fe:23:6a:b9:30:05:4b:2b:
81:58:26:eb:98:d7:8e:41:50:d0:79:d0:d7:bb:f9:
cd:aa:f7:04:8e:9d:7f:89:3d:0c:59:2b:5c:d8:39:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:39:2D:0B:2D:FE:03:FB:6E:1B:9A:D7:79:AB:0B:24:55:96:53:CA
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:77:4d:e8:81:5e:9b:55:34:b7:f3:c2:39:fe:38:ed:88:
ba:da:ff:06:e6:f5:bf:61:88:43:a6:3d:ad:dd:6d:18:6c:d6:
c4:48:48:8e:35:e6:67:18:f0:2b:1a:91:b7:9f:47:b1:ce:9c:
da:a8:3c:37:8d:62:0d:46:23:e9:25:cc:b5:36:a4:61:ab:eb:
ab:47:9d:03:39:d4:ac:55:d8:dd:e0:76:94:73:77:38:de:1c:
57:f1:b3:9f:0c:06:0d:5f:8b:a0:9d:c6:41:d5:85:7c:9b:1b:
e4:6e:3f:34:8d:2d:79:a5:98:69:7a:2a:3c:d7:25:e8:e2:ef:
8e:9d:82:33:a4:48:8d:11:52:eb:a7:13:41:54:73:75:7a:97:
c6:b1:23:f1:f8:5c:70:3d:79:a3:82:aa:f4:61:0a:b1:8c:51:
f2:e3:f9:7d:94:02:d3:19:82:33:be:f9:57:6f:61:1e:c4:c6:
36:63:59:27:eb:3e:c5:f3:b0:54:d6:bc:95:73:43:a5:c1:a2:
d5:e7:13:bf:68:56:2a:07:43:83:6c:98:ba:8e:29:87:d9:9b:
dc:de:4d:79:e6:dc:82:a4:54:ba:75:32:62:e2:34:1b:ca:de:
07:1d:de:5c:cf:08:90:e2:bb:9f:b6:58:99:34:98:91:e2:b3:
26:6d:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:57:56 2026 by rpki-client