
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: nPJC4ALNr/kV6evKfsgwH+eCL4rVkTbNIgW2h71sfoA=
Subject key identifier: 37:8F:7B:6D:3B:C6:71:D3:56:64:F3:47:FD:B7:00:36:FD:3E:DA:CF
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 242D3A7C1E2F19B57CEB3C002E6E4906078D12EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 0276
Signing time: Wed 25 Mar 2026 17:31:16 +0000
Manifest this update: Wed 25 Mar 2026 17:26:16 +0000
Manifest next update: Thu 26 Mar 2026 21:12:16 +0000
Files and hashes: 1: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
2: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
3: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
4: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
5: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: /2uplQi96l6pkTZiMyKOqVWKhn+SmSNh/n8d9K5oR1o=)
6: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
7: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
8: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
9: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
10: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
11: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
12: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
13: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
14: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
15: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
16: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
17: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
18: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
19: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
20: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
21: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
22: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
23: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
24: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
25: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
26: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
27: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
28: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
29: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2d:3a:7c:1e:2f:19:b5:7c:eb:3c:00:2e:6e:49:06:07:8d:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 25 17:26:16 2026 GMT
Not After : Mar 26 21:12:16 2026 GMT
Subject: CN=378F7B6D3BC671D35664F347FDB70036FD3EDACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:97:9c:d2:99:2e:8e:21:a4:00:41:7a:bd:
dc:d5:19:76:90:b5:66:45:fd:1a:9a:a0:42:1c:53:
7e:2f:23:45:30:fd:81:5f:da:bb:00:b6:2c:7f:9c:
b7:40:b4:71:6a:b7:b1:f8:ee:97:79:9d:20:8d:fc:
f1:38:86:75:8e:42:e9:f5:11:2d:aa:02:34:c2:4d:
93:d6:e2:c5:63:b8:df:e9:24:dd:ee:56:ba:df:dd:
35:5d:24:9e:d0:88:2a:45:d8:fc:18:bf:f2:71:43:
7b:c6:e2:cc:0a:cc:6b:21:e4:92:98:76:35:16:b2:
fe:a4:7a:a0:be:13:0d:12:70:b1:cc:61:6e:03:e1:
3a:80:92:ac:c0:e6:d6:f7:b7:54:b0:03:c0:f5:8d:
61:eb:43:c3:b7:1f:7b:98:cd:ad:40:cb:48:95:e2:
c2:a8:8e:c2:d6:e8:5b:22:aa:21:47:0c:cf:80:a1:
19:45:94:39:8a:9e:09:1a:3d:ee:2e:b9:30:d3:2f:
4f:35:9d:56:c7:a8:ae:c3:7c:7b:2d:96:82:24:48:
58:c2:3f:4e:dc:ba:ad:f7:c9:15:b0:2d:d1:21:07:
f7:bf:dc:20:85:60:fc:81:29:cc:53:08:c7:12:a0:
12:d6:c4:8c:96:1a:ee:a9:b8:c2:19:af:ed:54:48:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:7B:6D:3B:C6:71:D3:56:64:F3:47:FD:B7:00:36:FD:3E:DA:CF
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:76:9d:d7:7a:2c:0c:4b:45:d7:64:48:df:cf:1b:85:a8:
b7:b7:41:61:70:d5:08:1c:61:42:d4:5b:d2:06:6b:6e:70:e4:
1a:78:f0:f1:c6:a9:7d:2e:21:c2:fa:bd:d5:14:fb:95:40:5a:
26:10:5b:8e:65:d9:4d:ba:66:fa:d6:6c:44:b0:3f:15:62:4f:
49:9c:65:ba:7c:55:20:9d:b8:37:35:f7:ce:a9:2b:26:c4:df:
56:ca:27:07:1a:dd:4c:62:16:ea:35:f6:82:6b:c6:5a:81:49:
d6:c7:ef:85:74:4f:26:30:46:b2:9f:a8:ec:09:52:a4:7e:61:
15:d0:61:75:8b:d0:07:6d:8f:4a:65:6e:f9:4f:42:36:2f:c3:
d8:2c:a4:21:fd:9a:52:ea:81:66:57:fb:11:b2:08:e6:36:0a:
87:98:8b:60:8b:9d:59:41:7b:19:d6:f4:19:ef:98:ea:ca:b4:
e4:f5:79:b8:69:d7:6c:57:16:99:d7:d7:dc:74:ea:bc:d7:d1:
06:e3:fc:b9:2e:83:04:6a:68:92:f9:cf:f9:3d:41:b2:b0:cd:
3b:7a:51:79:5b:f9:c2:31:5b:ff:29:65:bd:ce:dd:6e:a9:d3:
11:d3:59:e8:2a:87:01:26:eb:18:02:d1:fa:5a:c9:f9:a7:f5:
09:c9:89:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:31 2026 by rpki-client