
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: aXKnYgrRtuw6VUkXoVtshEUjwXeTx8YCc2fWBiMilU8=
Subject key identifier: 9E:FC:56:F7:BA:DB:C1:F7:91:AB:5B:0D:01:AD:09:6E:52:66:CC:5A
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 55891565D7F54730047A64935BEFF813C669648A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 037E
Signing time: Wed 23 Sep 2026 10:55:51 +0000
Manifest this update: Wed 23 Sep 2026 10:50:51 +0000
Manifest next update: Thu 24 Sep 2026 14:06:51 +0000
Files and hashes: 1: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
2: 3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa (hash: T+iZECI6Nf8vhVyjHs4Cq+4DAetjvDN8JYaeWCDcmBw=)
3: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=)
4: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
5: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
6: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
7: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
8: 3130392e3233342e3231322e302f32342d3234203d3e20313734.roa (hash: 9HNBf+LUgxtel5YdAqtqWUZ01j9gnH5Sgj9ujQE2GCs=)
9: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (hash: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=)
10: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
11: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
12: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
13: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
14: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
15: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: LDqZZoLow0mbDS+Axbw5uzgHB6hrJjPXmfZptqZ1ClQ=)
16: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: O58U7PWZy8imeyXfNYpolxNqqGk5vQ/pfpTujarGxIw=)
17: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
18: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: MBztO8w9bm5wzqzKDfI65gL2GObfIUagWkGy+v8p1Mw=)
19: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
20: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
21: 352e3232362e3139302e302f32342d3234203d3e20343032323635.roa (hash: HgLcsaXc8NU0IQnjr5slaD2eRW6BWSzmDjuz7IxzdcA=)
22: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
23: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=)
24: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
25: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
26: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: B40Es9ewathPmfZCjQLluF0Rb3TtvK/44Yn/vhATNIU=)
27: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
28: 3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa (hash: qLaDwBI1BZ2zG398ZRVTsFr0j0hBs/moxNHBTZQAZ1w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:89:15:65:d7:f5:47:30:04:7a:64:93:5b:ef:f8:13:c6:69:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 23 10:50:51 2026 GMT
Not After : Sep 24 14:06:51 2026 GMT
Subject: CN=9EFC56F7BADBC1F791AB5B0D01AD096E5266CC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:cf:7c:fc:11:63:07:1b:3b:25:5b:36:b7:
e0:27:b0:96:7d:5e:c3:6c:95:93:1d:23:4b:42:67:
c0:6a:37:51:ea:aa:04:c8:07:20:15:1c:2e:71:b2:
d8:5c:c0:c0:1b:3e:a1:4a:8f:ee:f1:15:43:04:96:
4c:b0:41:e0:c9:4f:a3:cc:6b:2f:2d:7b:d5:17:1c:
51:94:a6:e3:7f:b0:30:02:f1:c9:b7:69:68:31:88:
d0:e1:e3:39:c7:ed:99:75:66:d8:06:23:b1:7d:27:
f3:ab:91:1a:ae:9c:96:c1:6a:31:7a:2b:ac:5b:45:
a1:4b:06:72:27:34:ed:0d:b1:07:bc:ea:82:ab:7f:
64:36:15:e7:de:d6:2e:d9:c4:97:bd:ed:a6:51:3f:
55:d6:b3:2b:7d:2c:af:93:18:2a:66:f3:8c:e9:a3:
b6:69:d8:2a:4d:8a:d2:a3:c2:fa:93:4d:0a:4c:85:
a6:71:47:9e:0e:2b:0a:33:ce:a9:66:59:66:f3:26:
1a:c7:9b:aa:1a:05:66:0e:92:2a:ac:9b:11:97:ee:
05:c0:e6:4e:84:b6:98:92:78:73:17:e6:9a:dc:d8:
33:29:3f:8c:f9:45:e5:ff:c8:4a:5e:ab:7c:1f:4d:
11:5d:82:79:22:6a:f7:ff:81:35:8b:24:58:60:83:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:56:F7:BA:DB:C1:F7:91:AB:5B:0D:01:AD:09:6E:52:66:CC:5A
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:4d:aa:70:ca:01:ef:7c:48:d0:66:13:a3:de:68:27:33:
e8:bd:cf:36:cb:97:96:a3:f4:7f:d6:95:ea:72:97:47:4c:c5:
cc:fc:ab:f6:fa:50:5f:94:97:43:b1:71:8c:ed:f4:49:f4:6b:
7a:24:c1:f3:c4:86:b7:d3:39:d4:a7:1e:0d:ce:58:54:5c:f5:
f5:cb:9f:e5:66:ec:c6:ba:8c:99:70:e7:76:55:a9:c7:1d:70:
a1:16:f5:db:fe:50:18:d8:c4:05:75:ae:5c:7c:9c:0a:a0:9a:
a6:be:36:e9:c6:5d:dc:74:7f:75:05:eb:61:cc:f2:a6:c6:55:
5b:00:e5:05:25:f7:04:d6:95:f4:04:51:0b:f0:02:db:ab:89:
ca:41:e3:a2:79:9d:62:05:c3:fa:c8:ac:82:80:dc:86:9e:46:
8d:f6:77:5c:69:ad:b5:ee:f3:a3:76:c2:7b:2e:75:68:f8:66:
6f:d6:46:31:bb:a8:47:85:2c:d1:bf:dc:44:c3:05:be:cf:6d:
a0:40:c3:89:b3:fb:5e:7d:f6:1c:50:8a:4b:51:2d:09:b9:bd:
99:c8:20:96:d9:23:a2:07:98:14:fb:4a:8a:02:fd:3a:e7:85:
bf:4e:0f:ce:90:49:b1:8e:2a:fd:83:b1:b2:88:61:3f:9d:54:
6e:7d:9a:ce
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVYkVZdf1RzAEemSTW+/4E8ZpZIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA5MjMxMDUwNTFaFw0yNjA5MjQxNDA2NTFaMDMxMTAvBgNV
BAMTKDlFRkM1NkY3QkFEQkMxRjc5MUFCNUIwRDAxQUQwOTZFNTI2NkNDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNM98/BFjBxs7JVs2t+AnsJZ9
XsNslZMdI0tCZ8BqN1HqqgTIByAVHC5xsthcwMAbPqFKj+7xFUMElkywQeDJT6PM
ay8te9UXHFGUpuN/sDAC8cm3aWgxiNDh4znH7Zl1ZtgGI7F9J/OrkRqunJbBajF6
K6xbRaFLBnInNO0NsQe86oKrf2Q2Fefe1i7ZxJe97aZRP1XWsyt9LK+TGCpm84zp
o7Zp2CpNitKjwvqTTQpMhaZxR54OKwozzqlmWWbzJhrHm6oaBWYOkiqsmxGX7gXA
5k6EtpiSeHMX5prc2DMpP4z5ReX/yEpeq3wfTRFdgnkiavf/gTWLJFhgg8pdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUnvxW97rbwfeRq1sNAa0JblJmzFowHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIlNqnDKAe98SNBmE6Pe
aCcz6L3PNsuXlqP0f9aV6nKXR0zFzPyr9vpQX5SXQ7FxjO30SfRreiTB88SGt9M5
1KceDc5YVFz19cuf5WbsxrqMmXDndlWpxx1woRb12/5QGNjEBXWuXHycCqCapr42
6cZd3HR/dQXrYczypsZVWwDlBSX3BNaV9ARRC/AC26uJykHjonmdYgXD+sisgoDc
hp5GjfZ3XGmtte7zo3bCey51aPhmb9ZGMbuoR4Us0b/cRMMFvs9toEDDibP7Xn32
HFCKS1EtCbm9mcggltkjogeYFPtKigL9OueFv04PzpBJsY4q/YOxsohhP51Ubn2a
zg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:01:45 2026 by rpki-client