
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier: ZuI2TIVAFgT8KYtvtDdGrg502tByVp0zDykSw5hAv28=
Subject key identifier: 29:08:A4:16:2A:B5:BA:EE:73:FA:14:1D:3E:4B:5B:A5:9A:BF:3E:27
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 15E8F7CC89ABF5F98BB8B8CA8EBD7E0D40CC97BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number: 033F
Signing time: Tue 12 May 2026 23:00:17 +0000
Manifest this update: Tue 12 May 2026 22:55:17 +0000
Manifest next update: Thu 14 May 2026 01:10:17 +0000
Files and hashes: 1: 3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa (hash: 5++guIPzefH5qk3d1r10m+wo361JOjbMdqdsBD/FSXg=)
2: 33312e39392e3230332e302f32342d3234203d3e2039303039.roa (hash: ukWKTFNy0nhBe+FLsHfZ/BgA8cd8+jxoh9zUxPcORkk=)
3: 3139352e35382e3133352e302f32342d3234203d3e20323136343331.roa (hash: gezzVEAXNfEHkX7ccEEnJqNTNH1SM3/ga2rOHek063I=)
4: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
5: 3139352e35382e3134342e302f32342d3234203d3e20323136343136.roa (hash: LZtf5PuLGvpowcFbx/Fb+tNNEtLJKNgrQFlg29pREA0=)
6: 3139352e35382e3133302e302f32342d3234203d3e203231383539.roa (hash: k591NQN+aq5GOAJctvYRnaCZlXbb2X79lNSZeNRbDbY=)
7: 33312e39392e3230352e302f32342d3234203d3e203136323736.roa (hash: iY6Z6WsOmh7cm9RSrsKpdBWAVKfI3GwyklAdOa/akGA=)
8: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
9: 33312e39392e3230372e302f32342d3234203d3e20323030393139.roa (hash: Sx4gimOMm/cDt00enlx4Don8b0BAMFnFutmPQSumeeM=)
10: 3135302e3235312e3232372e302f32342d3234203d3e20323032373931.roa (hash: AEn8tTs6i3Wn6/AJ3IvF0e3WYXLEjpMG1Qxt5oii3So=)
11: 3139352e35382e3133332e302f32342d3234203d3e203633313939.roa (hash: 5noFDIEnAdeG18LR9IsYvqtNKW3temWwogR5eHF0tvI=)
12: 3139352e35382e3132392e302f32342d3234203d3e20313534343130.roa (hash: 719pz1J2M9LBzXYfxJZD7IOABsm+fjKN2rYOrlfaeGU=)
13: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
14: 3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa (hash: nBVQUxoc2ECQR4gh4v5xdeMnohNknC3pHq03e7cz2d4=)
15: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
16: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
17: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
18: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (hash: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=)
19: 33312e39392e3230302e302f32342d3234203d3e20323032303736.roa (hash: 9aCU0WrowHQDEddqo+4gFdH5kjWR15/2+hM8MI1EWF8=)
20: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
21: 3139352e35382e3135302e302f32342d3234203d3e20323039383838.roa (hash: 75kKSWuTAcCxuCVoGmf6y8s6f7AnPyLhz9c9nMTZ46g=)
22: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
23: 3139352e35382e3133342e302f32342d3234203d3e20323033373538.roa (hash: cF8g+YnTuUZTSmpqY8eYqJJ8ewBqfSd6TlufY6uCyow=)
24: 3135302e3235312e3233302e302f32342d3234203d3e20323134363638.roa (hash: 5oRkZNHY5jOHApMzLJhjusPpBUXkcMRnJe0gClp6VvQ=)
25: 3139352e35382e3133322e302f32342d3234203d3e20323134343332.roa (hash: nSd7tNxK+1fgE72eYcC000lKH/osex2GFQhwLy+AE64=)
26: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
27: 3135302e3235312e3232362e302f32342d3234203d3e20323134353738.roa (hash: C1Xnl1s5qrsOjZZAOSJQtaQY1S3j/20f4ciZNXhnp3I=)
28: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
29: 3135302e3235312e3232382e302f32342d3234203d3e20323136313239.roa (hash: ymjbqRa7LlbWqFxGGhUyWJeWONvw58RqD6TISmOcLfs=)
30: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
31: 3139342e33342e3235322e302f32342d3234203d3e203439353831.roa (hash: CdOWg7XQ7TdzzLDF2E3vbhyf4TDBRs7VuKir2QIc0i4=)
32: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
33: 3135302e3235312e3232342e302f32342d3234203d3e2039333034.roa (hash: BzTkrv0CEdwvD2amKDiqUDeOvl89WiEx4gDSFunGD3Q=)
34: 3139352e35382e3135312e302f32342d3234203d3e20323032343538.roa (hash: S52wGd4ZwVigg1qwK1PLqhCMszEkIbLvDfCCJBJzY5Y=)
35: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: KTVPVjJUeOuLavU6Oa4i7/jMWolwdDs6JMPn908p4QE=)
36: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
37: 3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa (hash: QX2HsAQ+V/zHW2FFlc9Bj/caHNvb19HdNE8LLNWbEWM=)
38: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: 8IKg8thyu9dLhwFBGLZfUxLhRPMfYtuTi0crlUXcUVI=)
39: 3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa (hash: JJTteUvrmiPY+U+momyu9uK2wrpU9K7XzaRj5OzwPkc=)
40: 33312e39392e3230322e302f32342d3234203d3e20323133363530.roa (hash: 0Bngyrmrdfz47mx/mnuSCDuWlf2EDWIUujRrINoh4uI=)
41: 3139352e35382e3132382e302f32342d3234203d3e20313938363231.roa (hash: l+XTLQfX5yQ3z7ZHO1eIgcb1r1mW4fYeJV4EXq4TWow=)
42: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
43: 3139352e35382e3133312e302f32342d3234203d3e20313939343233.roa (hash: S5v7wMzaS/2PJOI+MPHcglquqzX4dyj4jouiNoRRJok=)
44: 3139352e35382e3134392e302f32342d3234203d3e20313939393135.roa (hash: 3Mj/czyKvzJvBOAr+N4/hqCZ4Nz6TSfuuRSmK4rh/zQ=)
45: 33312e39392e3230342e302f32342d3234203d3e203334393839.roa (hash: JVWFxpQPMnUSUYXGgXSKiWACaODSdFmwWfY1F1nUBQA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e8:f7:cc:89:ab:f5:f9:8b:b8:b8:ca:8e:bd:7e:0d:40:cc:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 12 22:55:17 2026 GMT
Not After : May 14 01:10:17 2026 GMT
Subject: CN=2908A4162AB5BAEE73FA141D3E4B5BA59ABF3E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:00:c2:02:cc:80:02:b5:0f:42:bf:f3:a9:
4a:43:83:a7:79:30:74:33:25:e7:73:0b:94:46:97:
09:da:13:c8:9e:de:1e:7d:79:96:75:48:f8:35:29:
f3:18:1e:92:c5:aa:40:b6:a7:5c:39:ce:fb:e8:1c:
ec:b6:85:c6:01:ab:09:f0:49:5d:ee:a5:5f:f3:82:
b6:b8:22:17:0a:15:1d:27:66:ac:38:fc:4e:a1:69:
05:92:ef:8d:71:c8:50:83:be:bb:1b:f3:9f:54:8d:
2c:fc:8c:de:14:f5:22:8c:db:d0:3f:00:bd:fb:0f:
eb:5c:ee:c2:0a:69:45:11:de:5b:38:23:1d:b3:33:
ca:fa:06:37:f2:2f:7d:5e:c1:3e:2e:4a:a9:d8:1d:
f1:fd:c9:7b:c7:5d:66:96:72:9c:22:8f:0d:2d:42:
2f:77:9b:14:03:fe:f1:a9:69:e5:e6:29:91:1d:a1:
0d:4f:3c:7d:5d:7d:98:27:47:fd:db:97:a8:67:ea:
f3:1d:1d:ff:1d:b4:d6:a4:12:50:31:51:2c:91:a1:
dc:4d:0a:7f:ce:2e:8f:0e:c2:7e:16:f6:3f:77:4b:
39:ba:22:1f:a0:13:e3:04:82:9b:4e:9f:57:bb:6f:
38:a2:00:f4:3c:7c:c8:0b:36:cb:68:e7:e6:70:5c:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:08:A4:16:2A:B5:BA:EE:73:FA:14:1D:3E:4B:5B:A5:9A:BF:3E:27
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:43:6a:5e:51:55:03:14:29:9e:26:29:18:dc:b1:ee:dc:36:
1c:aa:ca:61:60:a7:a3:af:ba:81:10:77:65:fb:4c:83:6c:60:
9a:60:e5:38:18:24:e3:53:58:6f:16:bf:af:3b:3d:24:a8:05:
87:56:aa:8b:84:4b:53:6d:ec:37:bc:cf:dc:5a:04:99:89:90:
06:d2:5a:84:fb:c6:f3:80:92:60:3d:72:76:16:fd:6e:c3:4f:
19:ec:58:02:17:6b:72:a6:e9:4b:ea:09:26:c7:19:e2:7f:1b:
56:fb:b9:df:11:f3:db:c9:67:83:33:40:bc:01:86:25:1f:e2:
09:cd:0d:9f:ff:55:f3:8e:c9:f5:53:cb:85:ba:fa:61:c3:81:
e5:19:06:97:ac:e8:10:43:60:80:57:b0:58:d3:a8:f1:54:29:
b1:00:45:cb:ea:c1:75:72:66:8f:2c:bf:7d:75:8b:c3:2d:b9:
8c:27:d7:66:0f:d0:28:2f:c5:e9:d3:23:7e:87:35:51:e5:6c:
b9:db:80:df:9d:24:6e:08:4c:84:67:0a:12:2c:cd:91:cd:12:
60:ce:d0:d1:8d:9b:19:93:5a:85:b4:c5:3e:ff:c5:df:a9:c9:
e4:7f:a3:df:25:c1:0c:25:e2:8b:c6:07:98:eb:f2:ee:de:81:
19:b6:f4:57
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFej3zImr9fmLuLjKjr1+DUDMl7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA1MTIyMjU1MTdaFw0yNjA1MTQwMTEwMTdaMDMxMTAvBgNV
BAMTKDI5MDhBNDE2MkFCNUJBRUU3M0ZBMTQxRDNFNEI1QkE1OUFCRjNFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/ADCAsyAArUPQr/zqUpDg6d5
MHQzJedzC5RGlwnaE8ie3h59eZZ1SPg1KfMYHpLFqkC2p1w5zvvoHOy2hcYBqwnw
SV3upV/zgra4IhcKFR0nZqw4/E6haQWS741xyFCDvrsb859UjSz8jN4U9SKM29A/
AL37D+tc7sIKaUUR3ls4Ix2zM8r6BjfyL31ewT4uSqnYHfH9yXvHXWaWcpwijw0t
Qi93mxQD/vGpaeXmKZEdoQ1PPH1dfZgnR/3bl6hn6vMdHf8dtNakElAxUSyRodxN
Cn/OLo8Own4W9j93Szm6Ih+gE+MEgptOn1e7bziiAPQ8fMgLNsto5+ZwXNAbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKQikFiq1uu5z+hQdPktbpZq/PicwHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhENqXlFVAxQpniYpGNyx
7tw2HKrKYWCno6+6gRB3ZftMg2xgmmDlOBgk41NYbxa/rzs9JKgFh1aqi4RLU23s
N7zP3FoEmYmQBtJahPvG84CSYD1ydhb9bsNPGexYAhdrcqbpS+oJJscZ4n8bVvu5
3xHz28lngzNAvAGGJR/iCc0Nn/9V847J9VPLhbr6YcOB5RkGl6zoEENggFewWNOo
8VQpsQBFy+rBdXJmjyy/fXWLwy25jCfXZg/QKC/F6dMjfoc1UeVsuduA350kbghM
hGcKEizNkc0SYM7Q0Y2bGZNahbTFPv/F36nJ5H+j3yXBDCXii8YHmOvy7t6BGbb0
Vw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:32:58 2026 by rpki-client