
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: ESCZbpTZbcTJDxMAoyFoNOxatkCzOHSeDSW5nVPKMqU=
Subject key identifier: BA:34:B6:AC:1B:99:3B:E1:20:23:F0:E7:2F:18:A9:FD:E1:3E:59:EE
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 0250BC414A3E11DE111ACD3F42049CD42579D4E8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: C2
Signing time: Tue 12 May 2026 21:49:00 +0000
Manifest this update: Tue 12 May 2026 21:44:00 +0000
Manifest next update: Wed 13 May 2026 22:37:00 +0000
Files and hashes: 1: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
2: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
3: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
4: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: wHerrJlJr75p19EccjbfuDoxJ692o3LYZp4H57uFbEg=)
5: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
6: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
7: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
8: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
9: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
10: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
11: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
12: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
13: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
14: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
15: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:50:bc:41:4a:3e:11:de:11:1a:cd:3f:42:04:9c:d4:25:79:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: May 12 21:44:00 2026 GMT
Not After : May 13 22:37:00 2026 GMT
Subject: CN=BA34B6AC1B993BE12023F0E72F18A9FDE13E59EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:d2:36:53:c0:da:58:fd:1c:e6:c0:a8:b7:
fb:ee:b8:38:6b:bb:9a:12:25:ff:c9:2c:67:34:51:
fe:4e:8c:b8:be:bb:75:79:6e:a6:32:9f:0c:e5:0b:
e6:de:66:75:0d:5e:3b:aa:db:36:41:04:e4:c4:48:
48:60:d3:b5:db:8f:f0:b9:27:a3:30:20:13:68:5b:
b9:24:71:a5:bb:47:24:5b:d4:4c:5b:bc:86:d9:85:
ed:54:b8:04:b8:94:0a:8c:69:83:84:1c:67:60:ec:
60:76:72:d4:0f:d9:20:ce:f7:e7:31:96:1f:aa:8a:
e1:a8:56:9d:9f:0b:a2:4f:76:1d:45:03:19:72:29:
b7:a5:05:5d:3c:85:8b:ca:ca:e5:fe:6c:2b:11:9b:
36:c7:32:02:48:d5:78:79:87:7a:57:89:98:3e:96:
14:a3:6b:5e:9f:53:03:70:5f:92:f8:1b:97:b5:45:
24:38:22:d1:67:89:10:8b:81:cb:88:a2:b2:a7:66:
e8:35:a1:6f:f2:ac:3d:49:7c:9f:13:c0:98:a8:b0:
ec:cd:03:5b:1b:b9:c2:32:a1:c9:0d:de:89:b6:6f:
1c:db:15:72:61:11:b8:35:bd:1e:36:8f:94:ec:e0:
84:43:43:30:ec:de:0a:b0:67:5b:0c:f6:ce:a7:7b:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:B6:AC:1B:99:3B:E1:20:23:F0:E7:2F:18:A9:FD:E1:3E:59:EE
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6f:66:6c:63:0f:55:a7:25:d5:98:53:a6:05:8b:ca:74:b1:
1f:bb:c6:6a:6b:1d:b0:ac:67:6e:d7:d4:96:2a:ec:11:1f:1d:
a0:c1:bd:66:97:7a:ca:de:3d:52:49:7a:18:e9:23:4f:14:46:
cc:0f:1f:05:29:c8:49:1b:31:ac:fd:52:a3:40:76:04:21:80:
76:5d:56:e7:f7:74:2e:ad:90:f1:ce:4b:9d:0c:8d:3c:31:7f:
d3:87:56:02:f3:7b:b2:61:eb:e2:ea:5a:5a:3d:b4:e3:46:bf:
67:09:4f:3b:ef:2d:66:75:dc:e7:84:95:a2:ed:35:fe:f9:dc:
59:26:1c:b1:ed:c5:86:01:94:e8:f8:0d:da:f2:a7:9e:14:6f:
38:22:e8:d7:90:69:88:2f:16:2c:2b:43:97:f9:55:7e:5c:7a:
08:7f:94:fe:3b:ea:21:64:7c:0b:6c:0d:09:dc:b6:12:af:17:
d4:b9:81:fc:03:17:8a:e5:79:70:60:1b:bd:c3:8a:f2:91:cb:
cd:8c:23:55:5a:37:5f:31:6d:0f:90:4a:59:6b:d1:4f:34:63:
24:05:17:82:7a:19:a7:33:db:ad:02:bd:2b:5d:80:b5:9e:ab:
c8:88:60:03:ea:52:3f:e7:67:7d:25:8c:68:69:26:41:c5:c4:
4e:be:f4:ea
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUAlC8QUo+Ed4RGs0/QgSc1CV51OgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1
QUREOTREOTAeFw0yNjA1MTIyMTQ0MDBaFw0yNjA1MTMyMjM3MDBaMDMxMTAvBgNV
BAMTKEJBMzRCNkFDMUI5OTNCRTEyMDIzRjBFNzJGMThBOUZERTEzRTU5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtutI2U8DaWP0c5sCot/vuuDhr
u5oSJf/JLGc0Uf5OjLi+u3V5bqYynwzlC+beZnUNXjuq2zZBBOTESEhg07Xbj/C5
J6MwIBNoW7kkcaW7RyRb1ExbvIbZhe1UuAS4lAqMaYOEHGdg7GB2ctQP2SDO9+cx
lh+qiuGoVp2fC6JPdh1FAxlyKbelBV08hYvKyuX+bCsRmzbHMgJI1Xh5h3pXiZg+
lhSja16fUwNwX5L4G5e1RSQ4ItFniRCLgcuIorKnZug1oW/yrD1JfJ8TwJiosOzN
A1sbucIyockN3om2bxzbFXJhEbg1vR42j5Ts4IRDQzDs3gqwZ1sM9s6ne1VlAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUujS2rBuZO+EgI/DnLxip/eE+We4wHwYDVR0j
BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5
NDEyNDFFRDVBREQ5NEQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8zLzlCODQ4MTYz
QzcwNDkxMjI3MDJFOEQzNzk0MTI0MUVENUFERDk0RDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApb2Zs
Yw9VpyXVmFOmBYvKdLEfu8Zqax2wrGdu19SWKuwRHx2gwb1ml3rK3j1SSXoY6SNP
FEbMDx8FKchJGzGs/VKjQHYEIYB2XVbn93QurZDxzkudDI08MX/Th1YC83uyYevi
6lpaPbTjRr9nCU877y1mddznhJWi7TX++dxZJhyx7cWGAZTo+A3a8qeeFG84IujX
kGmILxYsK0OX+VV+XHoIf5T+O+ohZHwLbA0J3LYSrxfUuYH8AxeK5XlwYBu9w4ry
kcvNjCNVWjdfMW0PkEpZa9FPNGMkBReCehmnM9utAr0rXYC1nqvIiGAD6lI/52d9
JYxoaSZBxcROvvTq
-----END CERTIFICATE-----
Generated at Wed May 13 07:20:55 2026 by rpki-client