
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: WeQaC24Okd0tEz1SkVNP26tqRkgtZtilj9MrR8RqkAQ=
Subject key identifier: 65:F8:5C:60:90:66:76:0D:DA:29:66:E3:6F:1D:33:F8:53:31:C6:58
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 1ABFED5E3C44117DA497A1C7328C905CB0019084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 07DC
Signing time: Fri 25 Sep 2026 09:49:35 +0000
Manifest this update: Fri 25 Sep 2026 09:44:35 +0000
Manifest next update: Sat 26 Sep 2026 09:55:35 +0000
Files and hashes: 1: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: Set9jSjJnZk4FzDhKsQCeyo0iC0093IITgk8mXGFRYE=)
2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
3: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: /pttCsH3EqNiBOKmYU2SEK0bSx+Q89rOic38LmDTjfU=)
4: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: PkrjX5lEKZeku6HbTZFd/bgZgjS0Ra0J+FcQrImRmsQ=)
5: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: pCuQNjK5vxSYZwtC7uzq87OexUIwDcw+LKWQti/Nk9E=)
6: 36322e332e32302e302f32342d3234203d3e20323132393830.roa (hash: f/GL2G2QMX1DeHxo/IzFzuj9b3uiMiTDtg1wGwI4Lb8=)
7: 34352e382e3231362e302f32342d3234203d3e20323131343430.roa (hash: e8OtHDGrOLuThDlvGfoczJuukmiEX6Dq6BRiXUAdwSs=)
8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: wLYhvbcU/etiFzebOUkFMR3b0g4xeh82nSHNvUEIAsY=)
9: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
10: 352e3138312e3138342e302f32342d3234203d3e20323132363039.roa (hash: 6u+5ELEJLeXXB4+8NHbO0dG4EQaKYkOwI0K9os45OcQ=)
11: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
12: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
13: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: d9+cKpTdsfno2v/b+IKbhlhODzZZZTwj8EEe6uEOYgw=)
14: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
15: 322e35392e36302e302f32342d3234203d3e20383334.roa (hash: 6oFhbwS32nNztM+MkZFvFVF8FZ6win/Ti/cCKIVdiGM=)
16: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: tIeHJEF41zbDRQ8KbMBp/GsLGj1RgNxno+RElBJQNMw=)
17: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: X70d0T4GWN6rC/5/Z7B3IR7A4QtMvYWM6LmuwXwdnH0=)
18: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
19: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: VVBKfj3oX4V4HqDYQe/w0vIXEHmTptmcb2dA6LN81Ys=)
20: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
21: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: 1VJONXDxJnPHUDzUm7XiO/UF/aXr3KYuVDC6vKiNDOc=)
22: 34352e382e3231372e302f32342d3234203d3e20383334.roa (hash: lxgDM+2IpOwskjSyLj/88e3oNG4qGZLEbcXn/wQBWJ8=)
23: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: kUgYR/Kxqx56Hy24JaK1nIBftzOVeuZOaTeGulm2cfI=)
24: 34352e39352e3231342e302f32342d3234203d3e20383334.roa (hash: 4X6EQaqJTKhKvN3TJ9GVIsbRzqsZ4tWpY3NIa3KMmkU=)
25: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=)
26: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: 2zHb0T4tIHau6aSZ9D+c/6DXvLxBGB8a+KLhel+Tre4=)
27: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=)
29: 3139342e33312e3139372e302f32342d3234203d3e20383334.roa (hash: 5xlOHrC9cQ2pMdiC9jU0zHtgYmHcu7FKSMzeO+SOiwQ=)
30: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: a81beBwcXvnxQQXt8vP0FnYxX0zBkKmQl4zg0OFOfqc=)
31: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: iATVUumriorK7Pdv5iKgHpx/CwKgX/9pfUHykvA0Wrc=)
32: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
33: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: DPH0dq8YDEtGyRSQJNel2HWBEDDjKDRiZ8kPBGCbV5I=)
34: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: J1EW+hHtD32FPQGp7ofq9HLTlopn5evJHbexaxjWVK0=)
35: 322e35392e36322e302f32332d3234203d3e20383334.roa (hash: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=)
36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: sgoOb4bX1m2rIZlacxTZqlmJneicsHhOxQYCb/BB8fA=)
37: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: KfeNISya2tovJRmjko+xuWndut4FlXIQdjsS4kkTpNQ=)
38: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: l2LIzKinG0BfxQ8d6ejTKmtFPNdSKUK9y0vPJ8skqFk=)
39: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: qc608O9yB+6tqsDBDhoINI3nGVPIPfhQ49+yA4p+itg=)
40: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: mYDAbrfXE2SMRwMvSEq6zRWmL22fizr0hTNDEPKCMHw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 09:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:bf:ed:5e:3c:44:11:7d:a4:97:a1:c7:32:8c:90:5c:b0:01:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 25 09:44:35 2026 GMT
Not After : Sep 26 09:55:35 2026 GMT
Subject: CN=65F85C609066760DDA2966E36F1D33F85331C658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:6d:58:c8:f8:3e:87:d6:d6:60:ea:1e:94:
33:27:85:fa:ef:7a:29:be:de:4f:11:27:0a:f4:46:
e0:66:f7:8f:72:f1:0b:23:8e:a8:5d:af:31:fe:61:
cf:ee:75:e2:f4:2b:2a:e8:6a:4a:a5:ec:57:a8:4d:
3e:a1:dd:8d:04:cf:a6:b9:c3:17:7d:91:bc:f0:2e:
f3:07:63:95:0e:59:cd:42:50:32:43:33:a2:51:e9:
47:08:ae:b8:2a:04:73:bc:8b:bc:37:1f:3a:54:7e:
19:d4:20:f4:3c:d8:9a:93:ca:b1:44:5a:91:19:6c:
49:9c:b9:ce:ae:a7:64:25:30:53:dc:7a:fa:d5:0b:
70:1a:4d:8b:ce:9c:2c:03:28:36:e4:42:a8:24:47:
ff:54:5f:60:b2:f8:4d:be:da:54:9b:b5:6f:9b:c9:
22:6b:13:2f:f7:8f:e0:e3:39:1e:9a:a4:8b:29:77:
d3:3b:4d:41:cd:3d:3b:57:af:0f:59:9b:67:a2:0f:
ca:fc:9c:54:33:82:15:0a:fe:8b:5a:bd:97:09:16:
01:a4:ba:57:66:90:c4:48:97:8c:d7:72:67:70:da:
b2:3a:ef:af:ce:8c:68:e2:7b:0f:ba:d9:e6:36:0e:
ac:89:00:ac:89:7c:71:52:6e:b6:0b:90:25:1a:ea:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:5C:60:90:66:76:0D:DA:29:66:E3:6F:1D:33:F8:53:31:C6:58
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:66:1f:e6:31:10:15:27:e3:8c:9d:38:bd:af:91:d5:14:
28:24:b1:04:0c:37:bf:d2:9f:62:df:a8:ed:d1:50:8f:54:d3:
2b:3e:b9:2a:79:25:9b:54:66:56:3b:dc:58:de:c7:c1:2b:3f:
0f:db:27:f2:9a:3b:55:e9:db:cd:1d:53:49:69:ef:1b:0f:2e:
02:61:c2:98:3d:fd:17:26:92:06:da:79:02:15:bc:e1:b8:69:
0b:33:cd:c0:c4:f1:fd:a7:aa:e2:a3:bd:47:90:7e:a9:f5:5a:
68:56:48:37:fc:34:0b:6f:98:5d:a5:dc:ca:d3:92:6d:44:94:
5f:05:41:83:55:ba:5e:a4:6e:df:ef:a5:6d:df:0e:34:e4:45:
49:93:93:bb:33:7d:6a:63:4e:15:9b:c7:2c:35:f5:ef:a6:24:
1f:e5:5b:ae:82:41:4c:3b:f9:60:db:f6:44:93:d9:30:bb:cd:
5c:f1:a7:1e:c9:30:ee:4f:23:60:91:24:6c:bf:a6:3b:01:d4:
9c:78:ab:29:da:08:f7:f7:b1:0b:d6:a2:7e:98:c6:0a:be:e2:
2f:6c:52:42:b3:87:1e:7f:eb:db:89:46:ec:a9:12:09:5d:7d:
87:b5:0e:72:e9:6c:af:d6:46:b8:40:27:41:48:7a:44:ad:61:
c0:4b:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:04:04 2026 by rpki-client