
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: IJOr3UU4jDpCWphkyMZcQNL39RWVd678GuODDxq1YWk=
Subject key identifier: 9D:13:C9:86:73:E4:88:43:EC:3D:E6:82:C2:0A:EB:35:CE:97:3D:F6
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 204BC9DFF5CD9AAACD7D247C71109A8708044A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 0771
Signing time: Fri 25 Sep 2026 20:56:42 +0000
Manifest this update: Fri 25 Sep 2026 20:51:42 +0000
Manifest next update: Sat 26 Sep 2026 23:10:42 +0000
Files and hashes: 1: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=)
2: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=)
3: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=)
4: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=)
5: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
6: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=)
7: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=)
8: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=)
9: 3138352e3231322e3131332e302f32342d3234203d3e20343032303732.roa (hash: aBhrQSVCfQIV8eOjrP1uZjYlErCjol/H24f32qPxiRo=)
10: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
11: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=)
12: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
13: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: AyIGAtB3APsYD1e6ZaokymKrlQeIz5CuW6jTAhuX3ZM=)
14: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=)
15: 38332e3133382e35302e302f32342d3234203d3e20313436383133.roa (hash: j1y2TfleyZuxfj76wiDc/LnmU3f8J5P0KaZqs+mnqDY=)
16: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=)
17: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=)
18: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
19: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=)
20: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=)
21: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
22: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=)
23: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
24: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=)
25: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=)
26: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=)
27: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
28: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=)
29: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=)
30: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
31: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=)
32: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=)
33: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=)
34: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
35: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
36: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=)
37: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=)
38: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=)
39: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=)
40: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=)
41: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=)
42: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=)
43: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=)
44: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4b:c9:df:f5:cd:9a:aa:cd:7d:24:7c:71:10:9a:87:08:04:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 25 20:51:42 2026 GMT
Not After : Sep 26 23:10:42 2026 GMT
Subject: CN=9D13C98673E48843EC3DE682C20AEB35CE973DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:9e:7f:02:e4:bf:e8:36:2a:71:6e:a9:dc:
10:66:32:e1:6f:ec:31:f9:f0:62:ec:13:8a:3e:5b:
3d:d3:96:c6:ac:5d:96:4e:12:40:4a:49:27:b6:97:
02:36:e5:5a:40:7e:6a:73:78:a1:68:a8:8f:f8:50:
2c:03:a7:97:75:8b:cc:87:ec:dc:c0:6c:e9:74:6b:
ea:bf:75:70:6d:ca:6a:42:4e:be:82:dc:02:9b:cd:
1a:33:19:2e:74:65:7b:4d:87:6a:8f:39:e3:21:45:
1d:03:af:a9:eb:f7:7b:a8:df:6e:af:ca:4a:9b:48:
da:4e:21:12:4c:e2:b9:37:a7:5a:f3:a7:7f:f8:8a:
1a:1d:7f:29:be:50:6a:88:41:9d:e1:b5:32:c6:22:
77:96:1a:87:08:d9:c5:51:21:ba:1b:19:67:f6:3d:
63:a5:7e:80:e1:ed:37:36:9e:bd:58:10:13:22:cb:
77:98:6b:e5:c4:ff:d9:05:1a:92:58:6f:2e:65:e3:
86:1b:26:3f:fa:d0:22:44:d7:96:4f:d0:d6:16:b9:
97:5c:72:2b:4d:fa:10:a4:22:ec:66:e5:18:f5:10:
d6:07:88:05:6c:84:92:36:25:53:1f:e2:c6:4a:89:
89:cf:a1:a6:c0:2c:7b:76:23:70:ea:00:78:6b:45:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:C9:86:73:E4:88:43:EC:3D:E6:82:C2:0A:EB:35:CE:97:3D:F6
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d7:ea:00:20:21:87:4d:a1:bb:32:c7:2b:29:07:3d:90:c2:
1a:e8:32:15:7c:64:a5:92:a8:4b:4a:5f:13:d5:8a:1f:3d:3f:
3d:ea:71:1a:ae:8b:8e:b6:16:c6:5c:76:e6:65:90:4d:43:85:
c9:86:96:0d:b6:77:cf:66:e9:ad:06:61:bf:c1:6c:7c:93:83:
38:c7:4d:3b:0e:34:dd:3b:d9:22:bb:9f:35:c4:83:65:7a:a8:
8e:32:88:a6:da:9e:56:d5:77:d5:ad:12:e1:f3:05:59:dc:60:
d2:b5:33:fc:c8:d4:4d:d9:bc:fd:b3:80:ec:31:86:c5:19:55:
cd:ab:9d:31:f9:19:50:1c:54:1f:fa:7a:3e:c7:8c:1a:8f:2e:
69:b7:e0:5c:1d:a3:91:83:ff:94:ea:4e:4d:62:1a:79:a8:4d:
52:f3:4e:1c:05:b8:34:7e:88:27:5d:c1:33:83:dc:e9:7d:20:
fe:55:8f:4f:d8:df:11:92:91:2e:a6:12:4b:37:b8:5b:5a:ba:
f6:f1:25:82:45:e1:bc:2e:43:b9:86:2e:12:45:c8:02:ad:c9:
2d:9b:e8:ad:df:98:76:9b:29:b3:49:83:99:e0:de:ae:a9:c1:
f7:50:3a:da:34:1c:4c:63:f9:69:e4:3e:3f:62:44:18:82:d8:
0d:77:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:52:46 2026 by rpki-client