
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
File: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft (raw, json)
Hash identifier: tXd4JtbZT3KzoY57m1f5LkR3c6njzBnJbzpDaKxxk9A=
Subject key identifier: F2:44:A9:EB:76:53:9B:7C:88:28:01:70:75:CA:22:B8:97:06:27:7E
Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
Certificate serial: 1414BD20BD47E523C813E5D677CD7906C5137256
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
Manifest number: 09
Signing time: Wed 09 Sep 2026 16:57:24 +0000
Manifest this update: Wed 09 Sep 2026 16:52:24 +0000
Manifest next update: Thu 10 Sep 2026 17:07:24 +0000
Files and hashes: 1: 326131343a373538363a363130393a3a2f34382d3438203d3e20323036303639.roa (hash: McsutBYilHSf+D+zQp4WS0ZrKs44K8YIfKiqGRIwOWI=)
2: 326131343a373538363a363131313a3a2f34382d3438203d3e20323036303639.roa (hash: I/2PHJxZeyEqiNbxH92CNv0UFHW8YzcvKl6PJAgo1vY=)
3: 326131343a373538363a363130363a3a2f34382d3438203d3e20323034323131.roa (hash: IlRx4OBitw3wFaQW1PrD42/DA4szNKP16B3GuMogB1E=)
4: 326131343a373538363a363130303a3a2f34382d3438203d3e20323034323131.roa (hash: pg01dmJKb4i6N1OISbtyGBdxn2HbVOxCfGKdfLBgGBU=)
5: 326131343a373538363a363131333a3a2f34382d3438203d3e20323034323131.roa (hash: lMmihb/04tHKQfah94vqyGtRBoUBSLViWROoIfWb+R0=)
6: 326131343a373538363a363530303a3a2f34302d3438203d3e20323032333936.roa (hash: kdcm2E2yjrBce2LkLk9pfeJaQAKXQlbcSuNncUIilzU=)
7: 326131343a373538363a363130333a3a2f34382d3438203d3e20323034323131.roa (hash: OMQ39sE0xuD98pyJIF5ctj0i+Akl1K8L7lf+usOHEvQ=)
8: 9868B8A018D41E9D418D93B52C0A31174F40F11E.cer (hash: 4KBRiqpbfzMxNtKxapzftoYGyWwxn63j8/x6y95lvCY=)
9: 326131343a373538363a363130373a3a2f34382d3438203d3e20323034323131.roa (hash: tM02Frjt9GqAYw9AMT9AJQYlUSur+I4aPvxlBdDO/ZE=)
10: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer (hash: J/NXoqSNBar5f3P2XQDX/ArWGpydgBQJacXUbW8Kctg=)
11: 326131343a373538363a363131343a3a2f34382d3438203d3e203131343231.roa (hash: PRwacz5vYeETLuuqiKn4eg+u9MO1E7cOtPxt6n2Kwa4=)
12: 326131343a373538363a363130323a3a2f34382d3438203d3e20323034323131.roa (hash: IposJX1/dkIc9KCM9TFTNcoPJOct8JFXE8VYQyXCQGI=)
13: 326131343a373538363a363131353a3a2f34382d3438203d3e20323034323131.roa (hash: +RG7e4Mpaw7aAtFGJRkNP32SqsoyKJ3HXkxQmF48EME=)
14: 326131343a373538363a363131303a3a2f34382d3438203d3e20323034323131.roa (hash: Xss1rIY1/9LH0JkCd4kH4TTvOENF78QImpavOtUADkw=)
15: 326131343a373538363a363130353a3a2f34382d3438203d3e20323034323131.roa (hash: AXSbGIUNn4IvcJ8FCvZh2aj1rjw4XLS45akYolms3s0=)
16: 326131343a373538363a363130313a3a2f34382d3438203d3e20323034323131.roa (hash: OYC7HLv+BuvqzRe89yDGqiEIKOoLGwOVCrrcTvt7S0I=)
17: 326131343a373538363a363131323a3a2f34382d3438203d3e20323036303639.roa (hash: nQYOSOAU88ZOUN4XRe2kH036UdabGxGwJVqLchFMc84=)
18: 326131343a373538363a363130383a3a2f34382d3438203d3e20323034323131.roa (hash: kvgThrWNimya9GZ+Hb1hmWRsjnt4ZTY4cOtVrvum5N4=)
19: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl (hash: mTNwcGH1wPrYf2KU1JV5MioGF8hwPO/CqxU3uex1lv0=)
20: 326131343a373538363a363130343a3a2f34382d3438203d3e20323034323131.roa (hash: hh9Rd6v92uybHSKZay0GAXY+0l2OkBQ3MefYFze7J1I=)
21: 140CF895225100CF571959173341D92070FF6E7C.cer (hash: GiVhe5wCSmxcIMA/bvZQYg7bw4oKTm6bJhvYg/eFDeY=)
22: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer (hash: EdwXjb+WYDK6QiRhUSjJHcf+DUC+lEkWQDa3ePFThcg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 17:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:14:bd:20:bd:47:e5:23:c8:13:e5:d6:77:cd:79:06:c5:13:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
Validity
Not Before: Sep 9 16:52:24 2026 GMT
Not After : Sep 10 17:07:24 2026 GMT
Subject: CN=F244A9EB76539B7C8828017075CA22B89706277E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:ca:58:b2:9c:38:14:8d:1a:69:53:d4:6e:
eb:fc:72:02:8a:92:3b:45:eb:5e:e6:3e:54:b1:95:
71:e5:e3:af:11:70:87:ff:c7:f6:e4:fb:ee:46:1f:
30:b8:96:14:f4:46:ad:70:69:28:f4:ab:55:9f:99:
fc:c0:7f:6d:23:2b:52:bf:ea:2b:6d:88:60:37:7f:
e3:e5:af:3f:1b:6c:65:09:d7:5e:b3:34:ea:6e:ed:
a8:27:eb:62:1d:2d:bf:fc:fd:94:1f:7c:1b:3a:ad:
f3:fe:2f:0b:55:04:73:17:2c:04:18:2f:3b:a5:91:
b4:f4:ff:9b:88:5f:87:9c:8d:40:9f:40:e2:28:21:
13:7a:67:f8:0a:2c:51:70:c0:7f:41:9c:63:a9:84:
f5:52:34:85:0f:dd:5e:cb:a4:e7:f6:af:ab:5c:f6:
db:64:4a:4c:09:7b:bd:3b:f5:e7:6e:ad:58:9d:76:
be:6a:96:0c:bb:1e:95:fa:f3:3e:ee:63:04:bb:1f:
68:a9:25:81:7a:18:11:93:83:a7:99:8b:d7:0a:d4:
f4:e8:f2:ae:a9:1e:3e:d5:71:00:d5:26:d9:7c:77:
44:5f:cb:07:34:a9:00:e6:01:a6:b9:65:c0:41:31:
7a:da:16:9b:c1:2c:5f:d5:4f:fd:9a:6d:07:17:09:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:A9:EB:76:53:9B:7C:88:28:01:70:75:CA:22:B8:97:06:27:7E
X509v3 Authority Key Identifier:
keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b6:8d:a0:39:34:bd:76:72:b3:46:10:c8:44:fa:74:41:3e:
33:18:68:c3:29:14:09:2f:a3:a0:2b:0e:7e:59:43:ad:f8:44:
68:74:d6:5a:ed:a2:4b:60:58:65:76:23:cd:07:94:05:23:1f:
0d:24:5e:69:19:79:58:8f:14:fe:67:73:d3:4f:41:26:64:79:
8c:56:bc:81:be:fb:0e:83:a3:b9:28:c1:b8:c6:f6:8a:13:75:
84:7f:04:22:0b:4d:ce:cf:ff:12:67:1f:c3:bc:a1:8c:f4:98:
ee:37:c4:20:ec:19:41:34:1a:81:1b:69:b4:d6:59:1e:b6:7b:
3b:6a:27:70:53:3e:2c:49:32:09:1f:2b:f1:aa:a6:41:63:4a:
b0:db:86:e6:bb:1c:11:ff:02:06:c4:4a:f3:3c:29:be:94:e2:
65:92:9d:9a:fc:21:b5:2f:32:fe:38:6b:16:11:9e:d6:5d:e8:
90:58:d8:f6:97:93:ef:82:96:68:bf:32:a8:9f:29:a1:42:40:
1c:18:74:67:f0:f8:d7:f3:56:20:6a:39:3d:c8:94:78:b6:76:
5c:bd:39:28:0b:ab:05:a1:23:b6:be:67:bf:79:00:06:5a:71:
32:62:9d:99:35:5c:51:9c:7f:20:ee:2c:59:b2:5f:df:d4:61:
aa:7e:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:28 2026 by rpki-client