
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier: Qgg1ikkcMlGZ0QRuf7gCmHRYH0v3mnJOVsRYM1eNWM4=
Subject key identifier: 3D:DC:8A:06:92:5C:C4:B0:C7:F3:A2:24:18:E4:5B:B1:A2:B1:8A:DA
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 3ADC01FEAEFC08B6152750967DC75E7A02E082C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number: 0156
Signing time: Thu 23 Jul 2026 01:37:19 +0000
Manifest this update: Thu 23 Jul 2026 01:32:19 +0000
Manifest next update: Fri 24 Jul 2026 02:42:19 +0000
Files and hashes: 1: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
2: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
3: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
4: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=)
5: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
6: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
7: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
8: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: G7/Td7qJAWkUDmWHm/lFU0FrJMm9YKd2ZtXx3Wok6JM=)
9: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
10: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
11: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
12: 3139342e3234362e33362e302f32342d3234203d3e20313532313739.roa (hash: Qgu5Tvm9W5X7SEvK1a2hylvdBTNEStW6QJu77ozFsGM=)
13: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
14: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
15: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
16: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
17: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
18: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
19: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=)
20: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 02:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dc:01:fe:ae:fc:08:b6:15:27:50:96:7d:c7:5e:7a:02:e0:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Jul 23 01:32:19 2026 GMT
Not After : Jul 24 02:42:19 2026 GMT
Subject: CN=3DDC8A06925CC4B0C7F3A22418E45BB1A2B18ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:bb:29:cd:95:59:ca:cd:ea:9f:a8:cd:af:
0e:9c:25:21:79:42:10:e0:e3:a4:5d:73:e7:19:81:
4a:4c:94:d9:35:10:af:1f:0d:1a:40:d4:b5:c1:12:
af:c6:42:2a:52:5e:5e:50:a8:ed:46:f8:e6:89:b0:
86:f0:6f:1c:0d:15:a0:13:9b:98:35:71:82:9a:d6:
53:90:a6:8c:e4:ae:45:4b:8b:9c:58:6c:42:4e:58:
95:87:b1:50:f8:75:3b:f9:34:63:cf:0a:78:b5:44:
8d:dd:8e:3e:a1:fc:5d:85:89:f3:37:de:8d:bd:f6:
e2:65:02:10:be:d3:f1:f6:ca:ec:56:cf:73:e4:ea:
64:31:e0:86:cd:a3:31:0f:90:ac:78:04:92:94:ab:
eb:09:d1:e7:df:bf:cc:3d:1e:11:08:b9:db:41:bd:
73:d8:7a:9c:ce:3c:b9:03:97:0f:ec:e4:1d:bd:d8:
97:53:47:f6:20:0e:2f:a0:c5:76:ab:c4:f5:1e:ee:
05:09:e3:40:c2:85:d4:6a:ce:8b:8c:19:ad:fb:c0:
af:a2:dc:48:ed:a7:d9:01:3c:07:77:7f:b9:f8:7f:
9d:c3:55:e4:65:0b:82:fc:71:bb:9a:57:fa:61:8e:
38:e2:de:ed:e0:c8:2e:f2:dc:1b:fb:43:82:b4:2f:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:8A:06:92:5C:C4:B0:C7:F3:A2:24:18:E4:5B:B1:A2:B1:8A:DA
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5d:9d:e2:ae:65:f1:9b:4f:3f:b7:f1:81:e4:2f:9a:67:cd:
0a:bb:1e:f1:f8:52:00:65:cf:f6:35:6a:cb:2c:cf:b4:f5:78:
76:67:f0:5f:9a:ae:3d:15:61:28:f2:f8:49:d7:0c:87:ed:78:
2e:e3:08:10:39:f9:d9:0b:6c:37:5f:e4:a9:71:ac:4b:64:a4:
63:6c:10:21:6b:20:9f:70:b4:9a:7a:69:3e:e1:0e:ae:36:5e:
df:7c:c3:a0:c1:92:7e:0d:37:2a:dc:fd:be:49:59:54:2c:4a:
4e:e3:d5:bc:bc:9e:54:04:49:b7:a3:63:42:25:5e:ae:d5:4a:
09:bf:47:0a:00:eb:59:04:3d:64:6a:7f:a4:d0:b5:be:b1:6a:
ed:90:c2:f8:a4:7c:42:f4:cd:5a:11:bc:b0:bd:ad:4b:55:50:
b7:48:39:54:87:3d:cc:b8:ba:29:38:ef:95:2f:87:98:33:bd:
59:6f:df:39:c0:df:28:6b:7f:63:bf:95:53:b4:15:7a:40:f7:
76:fa:82:99:e3:a4:28:5f:68:94:eb:a1:91:a1:68:de:e9:25:
f5:88:a4:59:4b:23:47:ad:fe:be:87:a3:1a:7b:89:91:00:ca:
77:0b:aa:f6:5f:31:86:66:d0:fe:12:59:73:34:6e:62:3c:7b:
33:a4:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:53 2026 by rpki-client