
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier: kIXdyBIpN+v1QxMSJzDVTcE1I2egrHHMGkpHObuvkoM=
Subject key identifier: 9E:CB:3D:72:9C:77:F3:F3:F2:5A:0F:93:EE:47:12:5B:C4:68:13:4F
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 32160CA67C9809B6B1075A527752EF22B0A0B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number: 0380
Signing time: Wed 25 Mar 2026 16:33:47 +0000
Manifest this update: Wed 25 Mar 2026 16:28:47 +0000
Manifest next update: Thu 26 Mar 2026 17:38:47 +0000
Files and hashes: 1: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
2: 326131343a366634343a636133303a3a2f34342d3438203d3e20323030333738.roa (hash: FMuCbBdzp6p9ySj22p+fUaROVQxj2tYK0a25mbwUBXo=)
3: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
4: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
5: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
6: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
7: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: XmLB23ceAp/vpo+Z51lgQhonJXFAxfhru29SRgbybUc=)
8: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
9: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
10: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
11: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
12: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
13: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
14: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
15: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
16: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
17: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
18: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
19: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
20: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
21: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
22: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
23: D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer (hash: Q2vhZWloe/hFTaW+/yQJuXwBq/8isuRI5XNeSyWobfQ=)
24: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
25: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
26: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
27: AS200242.asa (hash: MTBOWqmzNf0Vnku8o0Fu5uKujpvtI67QUi2gh/CZB+M=)
28: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
29: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
30: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
31: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
32: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
33: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:16:0c:a6:7c:98:09:b6:b1:07:5a:52:77:52:ef:22:b0:a0:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Mar 25 16:28:47 2026 GMT
Not After : Mar 26 17:38:47 2026 GMT
Subject: CN=9ECB3D729C77F3F3F25A0F93EE47125BC468134F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:7f:2d:3a:cf:f5:29:25:de:0a:b5:8a:9d:
46:32:ba:49:9d:29:86:01:5c:66:04:4a:24:55:a2:
67:97:60:f2:34:94:1d:c7:8a:50:ed:8f:7d:4a:5c:
bc:d7:a6:49:c0:5f:7d:ad:fa:fa:5e:53:c5:39:9b:
10:ef:a8:10:73:33:6a:bd:ae:54:de:e1:fc:f9:91:
57:fa:47:de:03:ac:49:3f:6f:c0:fe:9c:07:7b:e6:
f1:d1:ec:e7:65:71:9a:08:b9:12:78:30:cd:9c:00:
b8:a6:11:64:c7:37:61:92:1c:17:f8:c1:73:db:31:
3a:47:84:49:8d:5d:cd:95:cb:7a:f2:93:01:65:38:
36:d4:c0:9d:1f:b5:c5:75:59:71:62:8a:d9:be:34:
00:cd:c5:f6:e8:88:8b:b1:5d:34:64:92:8f:04:15:
84:b7:72:e1:dc:f3:ad:67:45:46:f6:98:bb:bf:25:
2f:9f:c3:9d:35:7b:35:db:0a:25:17:7d:45:02:54:
e9:52:89:48:7a:a1:ea:d6:ef:b9:74:d2:6d:3c:0a:
7e:54:82:ac:15:01:d3:5d:5f:2e:95:8b:fe:55:f0:
5d:d1:43:2d:84:cc:f1:ad:7a:3b:a5:16:31:83:91:
2a:a4:77:c6:7a:80:4f:65:c9:0d:2d:d3:41:f2:cc:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:3D:72:9C:77:F3:F3:F2:5A:0F:93:EE:47:12:5B:C4:68:13:4F
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:2b:8a:81:21:f7:b1:2f:12:14:ae:62:87:69:3f:a3:ee:
71:b9:64:8e:cc:f3:5e:2b:5f:8f:79:f1:19:38:06:ce:3f:98:
02:d0:fa:20:0a:fe:21:8b:76:b9:be:ee:1e:8c:02:69:79:78:
76:71:dd:0e:9e:66:50:8b:7c:25:71:e7:bb:76:c0:1c:ae:66:
40:a1:39:5e:1c:67:b8:62:a6:76:1c:28:d7:c6:66:3a:d2:d2:
c8:9d:ce:d4:0f:85:cb:f9:f2:d2:40:ae:f3:15:83:f1:8b:96:
db:5e:c4:27:a1:3a:b1:7e:85:50:b0:88:b3:19:e8:0d:f5:c6:
1a:ce:01:80:4e:0f:c9:a5:f3:ba:76:da:a7:6e:5e:e5:cf:0a:
8a:42:7c:5a:ca:9d:54:70:f5:84:bb:1b:1a:f3:1c:8b:11:7a:
41:2c:27:e0:ea:44:c2:30:ac:80:54:f6:31:ce:52:3e:e3:d0:
04:51:1f:01:e3:86:6d:01:60:a8:9a:d3:c9:14:1b:ec:d6:6a:
39:d9:9b:7e:8b:ad:30:83:ec:5b:34:a1:50:22:c3:5d:58:a2:
d3:28:27:06:05:14:3d:b7:2f:25:a9:58:8f:0d:b3:69:0b:6d:
84:9c:1e:31:88:da:1f:3f:50:32:05:7e:ef:54:8c:1c:2a:e7:
aa:2a:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:05 2026 by rpki-client