
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier: NEoJLXiP6IDwV/6LPrg6ZO2O3gndL6gd4TA47Wk7M7g=
Subject key identifier: 1B:4D:12:21:9D:FC:03:AB:BC:8A:B8:38:7B:35:5B:91:8B:74:C2:D2
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 0A3498420BC2841D84C7CE7A4BB9992541366B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number: 021B
Signing time: Wed 25 Mar 2026 16:16:05 +0000
Manifest this update: Wed 25 Mar 2026 16:11:05 +0000
Manifest next update: Thu 26 Mar 2026 16:20:05 +0000
Files and hashes: 1: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=)
2: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=)
3: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=)
4: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=)
5: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: 5Nw95IkveuJZBKqj4NvSuF1DJNqhu4N0HPyb5hh0ygg=)
6: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=)
7: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=)
8: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=)
9: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=)
10: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=)
11: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=)
12: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: b01UE1W2EGfzUcIfvNzwNjLl6EWZ+fK9rU0UVH/isX8=)
13: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=)
14: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=)
15: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=)
16: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=)
17: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=)
18: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=)
19: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=)
20: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=)
21: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=)
22: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=)
23: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=)
24: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=)
25: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=)
26: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=)
27: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=)
28: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=)
29: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=)
30: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=)
31: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=)
32: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 16:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:34:98:42:0b:c2:84:1d:84:c7:ce:7a:4b:b9:99:25:41:36:6b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 25 16:11:05 2026 GMT
Not After : Mar 26 16:20:05 2026 GMT
Subject: CN=1B4D12219DFC03ABBC8AB8387B355B918B74C2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:3b:5a:15:c1:a2:42:8b:ef:fa:d5:21:21:
0c:a8:71:c4:ac:eb:93:2b:85:74:6d:9c:57:ed:8d:
b4:55:53:7a:d0:c2:80:4b:81:0f:21:6c:dd:4f:bd:
30:09:40:37:0e:77:c7:3a:8a:01:72:cd:7f:d5:cb:
d7:b4:ef:9e:9e:d8:68:ed:4c:ef:f2:09:53:c5:e8:
c8:18:a9:dc:c7:2c:b5:d6:6f:21:90:fb:5f:a9:08:
d3:6c:f7:0f:5a:95:f4:ed:f0:a5:c2:f4:67:88:a7:
a6:bc:b1:3e:02:00:9b:2e:44:a8:3c:b5:f7:49:ad:
b7:dc:da:87:0a:1f:ee:bb:24:9f:50:9a:19:e6:6f:
bb:37:44:1d:2e:93:22:ec:ca:83:bd:97:2b:f6:e3:
1c:ae:1f:32:2e:aa:3e:bb:25:56:28:8c:d2:1e:06:
5e:7b:5c:bd:02:7c:72:b2:e8:d2:67:dd:51:b9:a8:
e5:e6:50:d9:52:ca:e4:62:db:4a:32:cb:56:59:f0:
c6:56:52:14:1a:1a:01:30:79:4d:c1:a8:38:05:0e:
3c:58:56:9c:a6:a6:e7:b6:89:8d:9b:61:5d:c5:3a:
76:30:01:91:b9:71:5e:d6:4f:55:5c:f9:42:a7:8c:
14:13:4d:f7:27:7b:11:b8:aa:9d:c0:a2:fa:f6:42:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:12:21:9D:FC:03:AB:BC:8A:B8:38:7B:35:5B:91:8B:74:C2:D2
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:37:1c:91:45:de:b8:1a:c3:a2:ed:cb:86:85:fb:e4:5f:
e6:7f:54:a2:33:17:22:39:dd:1d:56:e7:ab:27:8e:a8:8b:92:
45:1b:af:71:f4:fd:21:65:1d:52:54:4d:8d:e1:1a:af:87:1c:
76:ca:9d:5c:ae:ca:1f:85:92:9b:55:50:e8:8b:50:4a:be:02:
0f:29:a0:7a:1e:15:6c:c9:6d:5f:e0:70:8e:0e:36:d7:b0:92:
34:81:ce:98:84:1c:e0:b1:74:a8:f0:5d:bc:67:a4:f6:fd:81:
1d:79:c4:8c:81:1a:f0:aa:63:a8:9a:31:9a:9a:ca:1c:7a:04:
af:dc:e1:64:e0:dc:f1:f1:2c:d0:87:ed:9c:89:f9:c6:f3:6c:
67:c1:f6:41:5b:66:12:39:08:d9:2f:0c:45:c8:15:42:5b:94:
4f:20:d3:be:41:ca:fe:c7:6f:89:5f:cf:c2:f4:15:8f:e5:77:
c5:d7:53:39:23:03:4b:b2:e4:17:83:f3:0b:22:c7:fa:65:ce:
8f:00:8a:1a:36:ae:5e:52:c6:9c:2f:2a:45:86:58:a7:cb:7f:
45:14:4c:7a:61:9c:dc:03:0f:a8:98:f9:7c:b5:39:d6:b3:d4:
00:85:09:a3:12:49:39:a4:1e:1e:b1:48:41:5e:0f:80:a8:12:
aa:06:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:22 2026 by rpki-client