
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier: NcCb1c1ZnVXN6LhcSW22lixf02NKs/wW17cW4P7lDR8=
Subject key identifier: 74:A1:90:B8:5F:89:86:D7:06:82:55:6F:44:68:1D:02:7C:28:22:0C
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial: 37636775E40EB4C47C5CF7D1F79317299680DBF4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number: 06CF
Signing time: Tue 29 Sep 2026 14:46:59 +0000
Manifest this update: Tue 29 Sep 2026 14:41:59 +0000
Manifest next update: Wed 30 Sep 2026 14:53:59 +0000
Files and hashes: 1: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: 5615Ny7sVmjEhhHlRGRDH3u/ySBnlb2mwndcttt3V9g=)
2: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: 3/JDrgPcwa3QkItCqhf73S0kH72VYqnJSSE72cvYDCQ=)
3: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: EOUQ1JZ1oz2xZOU8+mEukp9ybbKV7scsmw0lQsJAxX4=)
4: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: axDMINA+fsh/dpfRJarkl0ngrWnti1nZhRBa3/Pvw1o=)
5: 326131343a316563303a3a2f33322d3332203d3e2030.roa (hash: l1LgH+twMvgdn7/1KBWGxkEdCOcMXQ/E9AMQuJ/4pWU=)
6: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: M7y4yNzKisPGrMDI6N/h2uK0LmUwgVtJCXB3eT1YcCs=)
7: 326131343a316563313a376234303a3a2f34342d3438203d3e20323139353339.roa (hash: lk2g+VMPJ2e0ffh4BXNf9T04tdPmSZpAFUml3dW+JwM=)
8: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
9: 326131343a316563313a376235303a3a2f34342d3438203d3e20323135363835.roa (hash: IzwkS06+TU6xlgmjKohwCnvrPjgEE+53/+TvwhGB5Kg=)
10: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: O5hXxs076gE3Ctu2AmKUIcSxIccZcu0zLTOjhJ6fNNY=)
11: 326131343a316563313a313630303a3a2f34302d3430203d3e20323139353233.roa (hash: 9E1PsTjd11hXDLZSZeoJaNnT7ONzxHIoAoZBFV00R+U=)
12: 326131343a316563313a313030303a3a2f33362d3438203d3e20323131303636.roa (hash: VwMdcB7cjunOknijcMaBRHJjTJhyW3Liym/2KH9Cpo0=)
13: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: 0MGh72HtcBIx2dyROH4vCwTGrkjWjpybf+czr46U9xA=)
14: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: 7XqZ13Ef/+b1VNSXq2rgololpGJoJrZKisEm3FKehVE=)
15: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: 8VhdvV/ADl1dQyHcZOJm0iqoZEaI9FAWV7wRLCn1Kkc=)
16: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: wCpGpHKdqFN1DO1NvTXNItL3x3NUD8VGRqAFwBrJITc=)
17: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: 5zFC0aBKrn16Glyaue2oFptFutD2x5iVGxip/IIewrc=)
18: 326131343a316563313a313030303a3a2f33362d3438203d3e20323135313336.roa (hash: Hy38nW7g7jg3g8NEUSSR9hX3QcE4UfBQyRuLYa5OQGw=)
19: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: 6P+R6wuEEP+euC2TgU6pJdRCRgvMs4VP4k8K/rgjYxU=)
20: 326131343a316563313a313730303a3a2f34302d3430203d3e20323139353233.roa (hash: A8bwWH9/ybdeySNN01RK//BZzg4rKSE3B00g1VeCR5M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:63:67:75:e4:0e:b4:c4:7c:5c:f7:d1:f7:93:17:29:96:80:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Validity
Not Before: Sep 29 14:41:59 2026 GMT
Not After : Sep 30 14:53:59 2026 GMT
Subject: CN=74A190B85F8986D70682556F44681D027C28220C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:39:7e:40:dc:7d:6e:c7:48:81:d5:70:8f:
64:a9:a6:54:49:00:85:e6:17:9d:38:ae:37:b5:92:
75:67:b0:ea:09:f7:b0:9a:58:1c:b2:ac:a3:ac:9f:
1c:63:0f:63:0a:3b:e3:4e:b4:45:18:da:a1:26:60:
23:d0:ec:fd:77:af:af:b8:cf:06:19:fd:ec:94:b3:
d8:08:af:28:d8:86:cd:ac:e1:c1:58:ac:9d:8d:2f:
c7:ef:05:58:8e:18:62:bd:f9:01:5f:bd:7f:2c:da:
cb:0b:36:aa:00:c1:4f:05:01:54:26:fe:ea:86:56:
26:15:c5:2c:ec:e3:c5:3c:a2:bb:62:b8:ac:7f:f7:
0e:5f:a6:80:4a:f0:dc:f5:84:5e:02:fc:c9:8b:5c:
aa:73:80:ba:a0:23:38:6b:18:1e:75:89:30:9a:9d:
4c:75:fc:54:48:aa:53:8b:b3:6d:d2:23:ae:83:c8:
d6:30:ac:59:96:ed:d4:a8:a9:fd:f1:f7:a8:c6:1c:
42:37:d0:b2:a7:e8:d5:4a:c7:e5:e6:4d:48:62:79:
0c:1e:2a:e4:b4:87:a6:9e:d0:8b:a4:73:9a:6d:c6:
74:94:1a:f3:f2:37:47:08:d1:d6:24:4d:1d:38:c6:
0e:83:28:8a:cf:5d:47:b1:62:52:71:c1:79:0e:c4:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:90:B8:5F:89:86:D7:06:82:55:6F:44:68:1D:02:7C:28:22:0C
X509v3 Authority Key Identifier:
keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:ee:b3:25:ef:6a:11:fd:3b:f1:f2:6c:f0:40:a7:15:3a:
b3:48:8a:08:25:02:e5:16:de:8b:41:0b:92:88:58:c3:02:92:
35:30:3b:34:80:ca:32:f0:ea:3d:1b:aa:3f:3e:d3:ef:06:d6:
a8:e3:b5:42:da:97:e4:00:eb:65:c3:67:18:31:9a:95:2c:fc:
37:68:26:e1:a1:a0:05:79:35:ba:ca:c7:e6:80:9d:2f:b4:43:
b8:f4:c7:e4:dc:b2:48:fc:3a:b5:0b:46:f6:61:07:46:70:c6:
9f:5a:48:b9:f9:29:75:8f:5e:68:b7:dc:da:08:b3:3f:51:92:
7c:6a:2a:53:14:21:3b:8d:69:fa:3e:89:e6:4f:80:e2:53:b3:
d5:97:bd:f1:1f:81:42:9d:9a:b7:9a:17:7d:0d:e8:fa:02:f1:
7e:33:d0:89:dd:92:c3:31:fe:45:fe:fe:10:dd:83:69:1a:74:
86:e9:2e:3d:4f:89:4c:12:f6:b0:be:d0:3e:c8:ef:31:63:4a:
ff:ad:f3:0f:09:04:66:b3:94:53:64:01:23:fb:6c:80:a4:22:
2f:ac:6e:0f:45:ee:94:87:de:59:3b:92:08:53:59:b6:25:3f:
28:78:1c:8f:8e:2a:96:ef:47:8f:e3:34:91:90:0c:58:2d:a3:
83:7a:8d:2c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUN2NndeQOtMR8XPfR95MXKZaA2/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG
NEFCREVDNjAeFw0yNjA5MjkxNDQxNTlaFw0yNjA5MzAxNDUzNTlaMDMxMTAvBgNV
BAMTKDc0QTE5MEI4NUY4OTg2RDcwNjgyNTU2RjQ0NjgxRDAyN0MyODIyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsjl+QNx9bsdIgdVwj2SpplRJ
AIXmF504rje1knVnsOoJ97CaWByyrKOsnxxjD2MKO+NOtEUY2qEmYCPQ7P13r6+4
zwYZ/eyUs9gIryjYhs2s4cFYrJ2NL8fvBViOGGK9+QFfvX8s2ssLNqoAwU8FAVQm
/uqGViYVxSzs48U8ortiuKx/9w5fpoBK8Nz1hF4C/MmLXKpzgLqgIzhrGB51iTCa
nUx1/FRIqlOLs23SI66DyNYwrFmW7dSoqf3x96jGHEI30LKn6NVKx+XmTUhieQwe
KuS0h6ae0Iukc5ptxnSUGvPyN0cI0dYkTR04xg6DKIrPXUexYlJxwXkOxLGRAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUdKGQuF+JhtcGglVvRGgdAnwoIgwwHwYDVR0j
BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm
NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD
QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD
MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAg5u6z
Je9qEf078fJs8ECnFTqzSIoIJQLlFt6LQQuSiFjDApI1MDs0gMoy8Oo9G6o/PtPv
Btao47VC2pfkAOtlw2cYMZqVLPw3aCbhoaAFeTW6ysfmgJ0vtEO49Mfk3LJI/Dq1
C0b2YQdGcMafWki5+Sl1j15ot9zaCLM/UZJ8aipTFCE7jWn6PonmT4DiU7PVl73x
H4FCnZq3mhd9Dej6AvF+M9CJ3ZLDMf5F/v4Q3YNpGnSG6S49T4lMEvawvtA+yO8x
Y0r/rfMPCQRms5RTZAEj+2yApCIvrG4PRe6Uh95ZO5IIU1m2JT8oeByPjiqW70eP
4zSRkAxYLaODeo0s
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:42:15 2026 by rpki-client