
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: qvnsL5ekbek5QQZsMgrxorCx9+K6DlM6iPhsy9GGk3I=
Subject key identifier: 49:69:11:F7:DC:67:73:A4:DB:2F:EB:1E:AE:02:05:4D:39:6A:1F:E6
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 336752F663315C19C32A7C48F41978F00F8BABCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 070E
Signing time: Thu 23 Jul 2026 10:49:14 +0000
Manifest this update: Thu 23 Jul 2026 10:44:14 +0000
Manifest next update: Fri 24 Jul 2026 12:15:14 +0000
Files and hashes: 1: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
2: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
3: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=)
4: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
5: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
6: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
7: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
8: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: 8Y+ZfHFdmpLv0d6DWNNovv6WkJAKz7Z1mLfa/dD/zzg=)
9: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
10: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
11: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
12: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
13: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
14: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
15: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
16: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
17: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
18: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
19: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
20: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
21: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
22: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
23: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
24: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
25: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
26: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
27: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
28: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
29: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
30: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
31: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
32: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
33: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
34: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
35: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
36: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
37: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
38: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
39: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
40: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
41: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:67:52:f6:63:31:5c:19:c3:2a:7c:48:f4:19:78:f0:0f:8b:ab:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 23 10:44:14 2026 GMT
Not After : Jul 24 12:15:14 2026 GMT
Subject: CN=496911F7DC6773A4DB2FEB1EAE02054D396A1FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:b2:8b:f5:84:71:a8:dd:fa:bd:e8:c2:e7:
8e:65:3c:cf:2d:9a:da:86:d9:d2:3f:44:df:1f:88:
a7:39:59:6a:c9:8e:51:89:6e:f3:03:c5:02:c5:c1:
53:a0:7c:06:ab:d7:be:4a:fd:99:ee:5f:f2:ed:2a:
6b:32:f6:50:4c:ad:62:d3:ab:a1:e6:74:44:84:90:
c4:99:f5:4c:1c:de:96:d2:f7:9d:51:3a:94:71:ce:
37:eb:5c:4a:87:e1:2b:7c:3f:46:c6:f2:e8:36:82:
eb:ec:18:63:04:9b:92:8b:19:16:bd:9d:32:bf:a0:
c6:4f:a1:04:00:dc:2c:22:bd:03:ff:0e:11:cc:ac:
77:e5:5b:6b:12:63:0b:3c:49:a3:99:7f:7a:21:79:
48:da:22:3d:95:23:60:05:77:e6:05:68:a8:9d:a7:
ac:a3:51:ea:37:bb:bc:74:8f:b7:c5:d2:5b:f5:c8:
a2:b8:15:a1:e1:e9:3c:a7:1a:26:67:f9:86:6a:fe:
64:c1:6e:6c:5b:df:47:ee:33:7a:c9:07:90:13:f0:
55:55:36:86:9a:4b:26:a3:bd:f8:49:ba:57:e4:ad:
6e:8f:12:f4:14:fb:d5:d2:b4:61:c8:c2:22:cc:d4:
b8:50:47:e7:4c:41:98:c7:df:c9:b5:8e:8a:c6:68:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:69:11:F7:DC:67:73:A4:DB:2F:EB:1E:AE:02:05:4D:39:6A:1F:E6
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ba:21:83:dd:da:89:f0:52:2d:9a:75:dd:67:63:c3:0e:c0:
ed:c8:1b:b2:12:ae:8a:99:06:b0:18:ef:aa:fb:28:18:72:6f:
39:65:c9:2f:11:95:da:46:7c:57:48:15:6a:34:26:c7:01:3f:
35:16:48:67:ad:63:85:8f:54:2e:25:ca:64:b8:67:fa:6d:05:
3a:a7:95:4d:9b:06:1f:cc:6f:08:54:4d:8f:f7:f9:8d:c0:d9:
82:6d:bf:af:74:08:0a:69:17:c9:65:f0:e3:b0:8c:a9:71:d2:
35:68:ef:1e:a1:bb:85:6c:f3:f1:28:2a:87:fb:41:dc:a5:11:
5b:6a:f3:58:9f:d0:d1:e1:c5:80:7b:7b:05:ef:5d:2b:b7:39:
53:fb:dd:4e:93:bc:61:50:90:84:a7:db:bb:dc:49:65:c2:36:
86:33:49:ec:7e:69:24:3e:a6:56:24:a7:34:ec:8a:97:00:67:
40:cc:4c:7a:63:ea:a4:84:33:5a:f5:b8:ec:fb:c0:74:05:95:
af:7b:e4:33:45:67:d8:1f:f1:2c:29:64:00:c8:96:bb:96:2e:
3a:ee:4e:3b:74:14:43:69:84:c5:9e:48:30:18:36:da:c5:5c:
3a:1b:69:2e:06:ca:8e:d0:5f:39:6f:26:ce:61:4b:de:40:32:
40:e1:7d:67
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUM2dS9mMxXBnDKnxI9Bl48A+Lq8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA3MjMxMDQ0MTRaFw0yNjA3MjQxMjE1MTRaMDMxMTAvBgNV
BAMTKDQ5NjkxMUY3REM2NzczQTREQjJGRUIxRUFFMDIwNTREMzk2QTFGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SLKL9YRxqN36vejC545lPM8t
mtqG2dI/RN8fiKc5WWrJjlGJbvMDxQLFwVOgfAar175K/ZnuX/LtKmsy9lBMrWLT
q6HmdESEkMSZ9Uwc3pbS951ROpRxzjfrXEqH4St8P0bG8ug2guvsGGMEm5KLGRa9
nTK/oMZPoQQA3CwivQP/DhHMrHflW2sSYws8SaOZf3oheUjaIj2VI2AFd+YFaKid
p6yjUeo3u7x0j7fF0lv1yKK4FaHh6TynGiZn+YZq/mTBbmxb30fuM3rJB5AT8FVV
NoaaSyajvfhJulfkrW6PEvQU+9XStGHIwiLM1LhQR+dMQZjH38m1jorGaIYFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUSWkR99xnc6TbL+sergIFTTlqH+YwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02
ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx
ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLohg93aifBSLZp13Wdj
ww7A7cgbshKuipkGsBjvqvsoGHJvOWXJLxGV2kZ8V0gVajQmxwE/NRZIZ61jhY9U
LiXKZLhn+m0FOqeVTZsGH8xvCFRNj/f5jcDZgm2/r3QICmkXyWXw47CMqXHSNWjv
HqG7hWzz8Sgqh/tB3KURW2rzWJ/Q0eHFgHt7Be9dK7c5U/vdTpO8YVCQhKfbu9xJ
ZcI2hjNJ7H5pJD6mViSnNOyKlwBnQMxMemPqpIQzWvW47PvAdAWVr3vkM0Vn2B/x
LClkAMiWu5YuOu5OO3QUQ2mExZ5IMBg22sVcOhtpLgbKjtBfOW8mzmFL3kAyQOF9
Zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:49 2026 by rpki-client