
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: UAuSMsEcA3bCFJSHzEvcC+x0iovYSt1k6SWstOlxw3I=
Subject key identifier: 13:2F:3F:3B:80:64:A5:5A:9F:D3:F5:11:0E:32:73:4D:A4:F9:23:0B
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 3C4CC4D78D593A574D4269F8798DF882F093F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 0324
Signing time: Fri 24 Jul 2026 02:40:22 +0000
Manifest this update: Fri 24 Jul 2026 02:35:22 +0000
Manifest next update: Sat 25 Jul 2026 04:09:22 +0000
Files and hashes: 1: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
2: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
3: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
4: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
5: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=)
6: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=)
7: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
8: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
9: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
10: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: hDtRiT0SQzgZUHZyP6rYdnPDfgmnlmO2JptGXw0sWdk=)
11: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
12: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (hash: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=)
13: 3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa (hash: kYjiruSevjnCCTw8m8yV3pSGFVyrKV1r+hKtIWWhj6Q=)
14: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
15: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
16: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
17: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
18: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
19: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
20: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
21: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
22: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
23: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
24: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
25: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:4c:c4:d7:8d:59:3a:57:4d:42:69:f8:79:8d:f8:82:f0:93:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jul 24 02:35:22 2026 GMT
Not After : Jul 25 04:09:22 2026 GMT
Subject: CN=132F3F3B8064A55A9FD3F5110E32734DA4F9230B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:49:27:f1:79:21:24:64:0c:8d:71:33:8c:
a0:62:9a:91:ed:12:39:94:4a:e7:a6:2b:26:24:cc:
c4:8c:33:fb:0c:2a:6e:d5:58:4e:c4:8f:ab:33:c2:
9c:4b:0d:f8:6e:56:ce:56:77:6d:5c:91:f6:f3:16:
c4:34:30:e3:1a:62:08:41:b5:c1:64:0f:d9:c0:cd:
93:33:87:71:4a:04:81:89:c5:83:f0:f2:97:2a:0d:
0d:32:dc:eb:f9:6e:be:d4:5e:e3:ff:7e:bb:b0:98:
0d:3c:93:7c:aa:72:61:48:05:d9:7e:a8:ac:81:84:
c3:db:06:9f:81:97:1f:33:34:47:e9:fe:ba:51:43:
b9:5e:86:90:c6:f1:d8:68:fb:0a:75:b1:27:f8:18:
46:c0:7a:f1:bf:51:7c:fc:04:c1:14:d0:35:60:ce:
24:2e:b9:16:2f:35:61:10:37:e4:92:b0:73:50:59:
b8:b9:e2:18:7f:ca:b0:71:6a:29:27:c2:39:ba:7c:
7b:f1:54:d8:fb:20:2c:f0:a0:2d:24:ac:42:fb:be:
55:d2:4e:65:7e:d6:a9:d8:81:cd:8e:ce:6d:60:6f:
f6:3e:8d:00:9b:df:34:92:c1:f1:f6:63:37:92:c4:
52:97:47:69:70:38:f6:25:c8:61:22:d3:36:f0:fd:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:3F:3B:80:64:A5:5A:9F:D3:F5:11:0E:32:73:4D:A4:F9:23:0B
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2f:35:f6:db:4d:62:6a:b5:6a:a0:af:98:66:ed:4b:45:2b:
07:a1:fc:ef:1a:83:1d:be:14:1c:dc:12:97:65:56:9e:a3:60:
0a:34:b8:11:0a:08:90:73:f3:ba:94:59:70:8b:c4:62:58:d4:
23:dc:09:1f:a6:c0:48:48:6d:15:bb:c3:ae:56:60:09:8c:62:
8c:4e:1e:b2:94:ae:3a:e7:62:61:0a:4a:56:cb:51:79:c0:77:
cb:7c:08:bf:de:9f:0b:43:d7:2b:7c:85:d6:bc:88:3a:4d:a8:
9a:b8:fd:3a:91:08:18:3c:6d:58:5e:36:e2:cc:5f:66:9d:28:
b6:b1:f5:ba:32:f8:a1:54:a6:0b:05:28:0d:a9:15:c4:3f:73:
72:88:d4:8e:1b:df:1f:ba:c5:0d:32:f9:44:2c:d7:99:dd:52:
cf:6d:be:ea:d6:8c:cb:b4:6d:c6:c2:db:38:ed:4a:a2:9b:4d:
66:29:a1:70:6d:6b:26:c1:40:4a:62:b6:e6:21:cf:ac:c3:e8:
c6:ca:ca:f4:0c:d0:f2:46:8a:dd:ba:4e:02:ea:64:6b:1e:92:
2f:03:37:7e:c4:d8:6a:31:0d:6e:76:79:53:6e:63:aa:0f:a7:
9e:de:5c:35:0e:d4:c2:9a:b9:bb:da:75:7e:0e:22:6b:c1:ae:
8d:71:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:34 2026 by rpki-client