
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: /+RsmXLfmM7Thx3ErJ00w0Sgkie2Bbia2oUlvzFyCt4=
Subject key identifier: C1:CB:D3:E5:A7:59:25:0F:B2:A0:73:AE:B8:08:9A:0D:53:7D:53:3C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 048740247CE749CCCA1DEA2D8A34EF5DB06FA0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 0780
Signing time: Thu 23 Jul 2026 11:38:08 +0000
Manifest this update: Thu 23 Jul 2026 11:33:08 +0000
Manifest next update: Fri 24 Jul 2026 13:37:08 +0000
Files and hashes: 1: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
2: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
3: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
4: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
5: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
6: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
7: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
8: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
9: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
10: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
11: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
12: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
13: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
14: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
15: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
16: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: UYplWrPuNpBK4+VRoAMeNfrXsCP+FyebbT8k9JdoYnw=)
17: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
18: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
19: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
20: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 6GB1gmRsk5Bjkd0JUfCnrbmjcGP3QTregKHZ4qfwv3o=)
21: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
22: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
23: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
24: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
25: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
26: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
27: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
28: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
29: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
30: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
31: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
32: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
33: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
34: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
35: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
36: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: MsiGjvSieUCa/T21XIqsNppHCh9EmLMqXVv3uxcO8n0=)
37: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
38: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
39: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
40: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
41: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:87:40:24:7c:e7:49:cc:ca:1d:ea:2d:8a:34:ef:5d:b0:6f:a0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 23 11:33:08 2026 GMT
Not After : Jul 24 13:37:08 2026 GMT
Subject: CN=C1CBD3E5A759250FB2A073AEB8089A0D537D533C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:13:65:68:08:0a:80:82:de:c2:95:4e:4c:
8b:bf:5d:e7:b6:28:bd:d5:cd:ca:e0:62:a6:b2:51:
83:b0:ab:ac:6b:66:b1:b1:6d:06:07:11:65:d6:55:
50:8a:4b:d8:aa:82:44:28:9c:07:95:18:74:90:ba:
aa:44:5d:23:90:03:23:64:f0:ac:10:db:64:05:30:
c3:d6:81:c1:1c:9d:94:50:57:ab:88:43:ec:75:4d:
05:d5:bc:b3:ae:62:82:b7:8e:ab:ce:aa:48:cb:c6:
71:d8:d5:fc:b5:81:21:6f:99:58:9b:9f:27:e1:2d:
16:bb:b4:bf:7e:4c:90:9f:37:b2:a7:c8:0f:5b:7b:
32:08:f5:b5:df:41:55:5c:b3:06:0a:33:1f:88:39:
fe:0f:b8:29:88:df:b3:10:f4:94:58:f7:ca:7c:84:
64:b6:7d:bc:7d:3f:01:1b:64:4e:4e:fd:ad:d3:c3:
4b:3e:f7:51:21:cb:61:77:d9:59:e4:db:14:9e:7d:
49:a2:e4:76:92:db:37:1f:01:9b:16:a8:3a:32:0a:
1b:60:72:5d:c9:7f:70:96:09:27:c9:11:c1:d7:77:
4c:5e:60:f7:01:97:e0:9c:58:6b:57:b2:a5:68:30:
73:6d:e0:4e:4f:f2:39:34:07:4a:5d:16:04:34:f5:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:D3:E5:A7:59:25:0F:B2:A0:73:AE:B8:08:9A:0D:53:7D:53:3C
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:36:35:a5:59:85:8e:a3:ed:f7:a4:0f:2d:ae:c8:32:16:
93:63:da:ad:33:b5:0f:8d:80:0f:eb:d7:84:d2:94:42:6d:9e:
0e:1e:e1:54:b1:27:f6:21:75:1a:93:c1:54:30:3b:69:82:b8:
fd:e8:d6:54:41:64:5f:e0:0a:63:15:d1:67:44:71:87:3b:d4:
c8:90:8c:79:8c:19:96:e8:c4:55:a9:d2:75:40:c2:bc:74:c5:
b2:13:4a:52:ca:51:02:a0:7d:b3:72:7a:93:47:c8:76:f9:82:
e0:97:18:27:d3:08:9b:92:95:3b:b8:7b:28:cf:7e:6d:6b:3d:
dc:92:ca:19:78:3f:45:9a:a3:68:b8:c3:17:2c:fc:6b:8e:73:
16:83:29:76:d0:36:02:62:d3:b5:b4:21:91:e6:77:39:fc:77:
2c:d0:1f:6e:82:78:95:fc:32:ef:e1:35:52:44:fc:0c:62:61:
f4:96:e0:aa:bd:88:a3:e0:8c:a5:0e:b3:dc:06:e3:54:3f:3c:
11:60:30:2a:c8:11:b5:b3:45:33:af:e6:e1:8d:e2:85:a7:ae:
fc:78:d1:95:5e:1b:9c:3c:06:45:0b:30:df:7f:03:59:46:2d:
bf:84:f7:bf:d7:ee:4a:82:ae:61:be:8a:b7:75:db:c7:74:fa:
d1:f2:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:56 2026 by rpki-client