
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json)
Hash identifier: EYKZbvDmLUenpIO+NM3XrYaWO8jPNJ+BCe8RkpAKrk8=
Subject key identifier: 2F:08:57:AC:CF:F0:A7:37:00:C3:48:37:20:73:FD:B3:66:3F:73:9A
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 6CDE2BCCBA340AFE6FE8EA6DE91556CBC7E9BB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
Manifest number: 03CE
Signing time: Thu 23 Jul 2026 23:34:55 +0000
Manifest this update: Thu 23 Jul 2026 23:29:55 +0000
Manifest next update: Sat 25 Jul 2026 01:28:55 +0000
Files and hashes: 1: 33312e39392e3230332e302f32342d3234203d3e2039303039.roa (hash: ukWKTFNy0nhBe+FLsHfZ/BgA8cd8+jxoh9zUxPcORkk=)
2: 3139352e35382e3134382e302f32342d3234203d3e203633303233.roa (hash: oBeeeU3GnT2oMITYsHzfevINcnN3rBvPI2W5i1+sVPw=)
3: 3139352e35382e3133322e302f32342d3234203d3e20323134343332.roa (hash: nSd7tNxK+1fgE72eYcC000lKH/osex2GFQhwLy+AE64=)
4: 33312e39392e3230372e302f32342d3234203d3e20323136313338.roa (hash: KEwn+7zILM5/r3LpTKFJRe00Rd6OV3jrUelJoTJ/baQ=)
5: 3139352e35382e3134362e302f32342d3234203d3e20323030363531.roa (hash: QX2HsAQ+V/zHW2FFlc9Bj/caHNvb19HdNE8LLNWbEWM=)
6: 3139352e35382e3133302e302f32342d3234203d3e203231383539.roa (hash: k591NQN+aq5GOAJctvYRnaCZlXbb2X79lNSZeNRbDbY=)
7: 33312e39392e3230372e302f32342d3234203d3e203535323031.roa (hash: LWKdaHsgGPyn+M9xKVi0OmJ5F3Y2EclXH2IefhHFlAI=)
8: 3135302e3235312e3232392e302f32342d3234203d3e2039303039.roa (hash: JJTteUvrmiPY+U+momyu9uK2wrpU9K7XzaRj5OzwPkc=)
9: 3139342e33342e3235342e302f32342d3234203d3e203531383532.roa (hash: za0HM3w55tiDFbhPrhUh3FtVd5oKhUm8JuFZ8lH0DiA=)
10: 33312e39392e3230322e302f32342d3234203d3e203231383539.roa (hash: PivFy+em9dzGbPGu8x4FOFsif2QpZ9yZJ/cvuxfHAnM=)
11: 3135302e3235312e3232352e302f32342d3234203d3e20323132323338.roa (hash: 5++guIPzefH5qk3d1r10m+wo361JOjbMdqdsBD/FSXg=)
12: 33312e39392e3230372e302f32342d3234203d3e2039333034.roa (hash: RG694VF+Ywi1+rDjW0DImFmJfL21VRcESGSJ9oUeN2M=)
13: 3139352e35382e3133342e302f32342d3234203d3e20323033373538.roa (hash: cF8g+YnTuUZTSmpqY8eYqJJ8ewBqfSd6TlufY6uCyow=)
14: 3139352e35382e3133312e302f32342d3234203d3e20323035343839.roa (hash: 9B1lpzhU/NSTxjJCq5aiKfoHr9L6F1O5LXUa2dNoNdo=)
15: 3135302e3235312e3232382e302f32342d3234203d3e20323134343332.roa (hash: 2KoIymDUs9jOiQNM3x5WVfabYD3YWH6MK0lMLsNNo+8=)
16: 3139352e35382e3133332e302f32342d3234203d3e20323134303833.roa (hash: nqclwP/GocppbLWyUcK+vNP09UGhIbB3v7ZBYl0q7zE=)
17: 3139342e33342e3235352e302f32342d3234203d3e20313431393638.roa (hash: iQ9RYSqOmsvIqARX4nqI9wEFn//drkKsHCDo7XaSdTU=)
18: 3135302e3235312e3233312e302f32342d3234203d3e20313333313530.roa (hash: nBVQUxoc2ECQR4gh4v5xdeMnohNknC3pHq03e7cz2d4=)
19: 3139342e33342e3235322e302f32342d3234203d3e203632343033.roa (hash: yqnINfgqTqrJdEB+ub9ugFguo27lxXV2a2kAcYnphqk=)
20: 33312e39392e3230362e302f32342d3234203d3e20323130343935.roa (hash: OC80Hx5Gq1jN6Ym5UmCqnC8fGlp8VQazYJOfXpnB8WU=)
21: 3139352e35382e3135302e302f32342d3234203d3e20313938343230.roa (hash: Yb8ZggmQm15ny9FM1xtYILR46C/kYmvLDoVrroOiEjA=)
22: 3139352e35382e3134342e302f32342d3234203d3e20313937313936.roa (hash: rqqV5dAyZMltGaI1IrPEkmhvL8lAkaDtIMwPt73lL/E=)
23: 3138352e3231332e3235302e302f32342d3234203d3e20323032383238.roa (hash: cvWbud/Q3B4zVr3PrPYyxiTjcQyvCffxgDgg+5VMZYE=)
24: 33312e39392e3230312e302f32342d3234203d3e20323133363530.roa (hash: LZe/oPKdzHBDXdq7jgdrUvSsiw189QvXVXiPjXqJiLQ=)
25: 3135302e3235312e3232372e302f32342d3234203d3e20323130383039.roa (hash: eyLd11fakGFFDhUP1FOBvFuoLUKafobuh0+Bmto2/p8=)
26: 38352e3131372e3232392e302f32342d3234203d3e20313439313037.roa (hash: Mdj3IIZJ097ibJGhSOfHP4GOBLdG4jAp1zNpVSxesFg=)
27: 3139352e35382e3135312e302f32342d3234203d3e20323032343538.roa (hash: S52wGd4ZwVigg1qwK1PLqhCMszEkIbLvDfCCJBJzY5Y=)
28: 3138352e3231332e3235312e302f32342d3234203d3e20393834.roa (hash: A919/Bekrj6rZbVlRAQ3zY8i9Bm4Qio6XVxQpWLOfQM=)
29: 3139352e35382e3134392e302f32342d3234203d3e20383334.roa (hash: qCWycbQVx/jK5mBrjj3kwCObJZ5oDGAXY9R8G4vR8dM=)
30: 38352e3131372e3232382e302f32342d3234203d3e20323134343538.roa (hash: rcAG2FX2+ZD0Qb1+KeZK9os832Q7CwzkoxVHQi9yY7k=)
31: 33312e39392e3230372e302f32342d3234203d3e203233353332.roa (hash: YMiDlEuFwiUmBJ750UnQ/2kXWbSgbu6U7u+ywjD409w=)
32: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: GEbFfS+LLMgocx0zl/qOrB6oO+BgTD8IsbF49GAbNus=)
33: 3139352e35382e3133352e302f32342d3234203d3e20313334393236.roa (hash: QpMWGK6S5I3qQ+qu8dr+zlt0sser18tOcrfaVpAuVw0=)
34: 3139352e35382e3132382e302f32342d3234203d3e20323134343833.roa (hash: o+8ninmvlC+dukIS/K8Lc7XABpjARzkzIFvUt8DaBlM=)
35: 3135302e3235312e3233302e302f32342d3234203d3e20313534313332.roa (hash: CNqSsi3S99uzFpnsXJMbKqRDJfbOBRxYooSl4UfOx2c=)
36: 3135302e3235312e3232342e302f32342d3234203d3e20323134343332.roa (hash: haWca6+aqQDXSnTE28SZx8fHsKAOLip+iOuBZOi5vh8=)
37: 33312e39392e3230342e302f32342d3234203d3e203334393839.roa (hash: JVWFxpQPMnUSUYXGgXSKiWACaODSdFmwWfY1F1nUBQA=)
38: 3135302e3235312e3232362e302f32342d3234203d3e20313339353536.roa (hash: HSmhZrLc9ib5GfzVl+opd1OmPYjcv1AuaQiV3OGbGOU=)
39: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: q+xCVLrPuqahCRWvO/fHjtj69DYP8GecidWAA6uQtTo=)
40: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: WxHcRq5WCH3YmKS5+Il6T1ro4Oc3AucTAyVboxN6cYg=)
41: 3138352e3231332e3234382e302f32342d3234203d3e2037353336.roa (hash: 3Ow4dhqcQd/FeupsTtXE+3P69G/MvUe02J04AXHX428=)
42: 3139352e35382e3132392e302f32342d3234203d3e20313534343130.roa (hash: 719pz1J2M9LBzXYfxJZD7IOABsm+fjKN2rYOrlfaeGU=)
43: 3138352e3231332e3234382e302f32342d3234203d3e203231383539.roa (hash: l5LzFYeAYRpBxI6rZTLSPCbjfPY+STOvzGpAtsNNCfk=)
44: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: KTVPVjJUeOuLavU6Oa4i7/jMWolwdDs6JMPn908p4QE=)
45: 39312e3231302e34332e302f32342d3234203d3e203633303939.roa (hash: oAwjVGPwU25ceOih3rJWmllATU7l2YARbFutZVfy2iM=)
46: 33312e39392e3230352e302f32342d3234203d3e203136323736.roa (hash: iY6Z6WsOmh7cm9RSrsKpdBWAVKfI3GwyklAdOa/akGA=)
47: 3139352e35382e3134352e302f32342d3234203d3e203137343333.roa (hash: eHTOtIuDBTIVqfM4qOnIATmNiGNzwSelAsR/FAYQ0kQ=)
48: 33312e39392e3230302e302f32342d3234203d3e20313532313739.roa (hash: LrL+lQ/AbcaRCFr0c17JfrYgj6f2uT8cisd22winong=)
49: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: PbuFJWIaFPfS/fUezjEhjeDUJ1OpDE0MDCs7HAI2pDY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:de:2b:cc:ba:34:0a:fe:6f:e8:ea:6d:e9:15:56:cb:c7:e9:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jul 23 23:29:55 2026 GMT
Not After : Jul 25 01:28:55 2026 GMT
Subject: CN=2F0857ACCFF0A73700C348372073FDB3663F739A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:82:9d:41:a7:a7:1f:8c:aa:d8:a3:7b:80:
bb:f5:1e:ae:2a:a1:9a:24:28:4d:1b:a9:7b:39:68:
18:47:1e:f6:5e:1d:fd:95:af:78:ae:97:58:22:e9:
46:47:c4:ec:eb:07:d4:67:0a:de:f5:f1:6f:7d:b4:
30:e8:fa:f0:33:2d:56:3c:b5:c0:91:47:57:14:68:
0a:b9:8e:31:4d:3e:f8:d8:91:cc:0d:c1:dd:86:d5:
b7:3c:c6:66:eb:0c:0a:f6:7e:75:73:c4:22:60:ab:
8f:b7:4f:1b:9d:36:2c:e2:1d:31:78:ea:b3:5e:c5:
6f:ab:2d:8a:e0:d1:b1:dc:ef:67:cc:42:fd:ab:26:
92:75:af:4a:d6:55:c8:a0:ae:a7:ad:91:1a:be:4a:
2a:60:a6:5e:e9:d3:fc:56:42:e9:7c:9e:f2:2c:89:
4f:ad:5a:ec:20:1e:6d:67:6d:1c:cb:b1:db:d1:68:
29:26:71:69:4c:53:84:18:91:c8:37:34:a5:8c:57:
d9:19:3e:4e:dd:04:39:61:fb:5c:50:2a:fd:f2:0f:
4e:eb:d4:1e:88:1b:a8:96:43:5a:99:06:ea:5b:85:
a7:86:ad:7f:49:25:be:8a:a9:31:4e:50:9a:e4:35:
4e:dc:6e:3b:9a:05:39:78:fc:c4:f3:a8:c8:1f:85:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:57:AC:CF:F0:A7:37:00:C3:48:37:20:73:FD:B3:66:3F:73:9A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dd:41:56:19:ad:28:ce:60:b1:04:01:7e:c7:fa:71:dc:8f:
8f:12:d4:e3:45:8e:54:91:45:59:fb:77:ec:14:57:06:07:15:
24:d3:69:7d:ff:56:5e:30:2f:51:33:ee:2c:85:59:1f:b1:a5:
4a:e2:6d:9f:a8:7d:85:36:c0:7b:aa:0a:f9:90:38:0c:6e:b5:
7b:19:cf:f7:77:21:a9:dd:dc:d9:1b:28:f1:26:bc:99:77:c8:
fd:91:fa:4f:4c:39:2a:a2:47:2f:08:6d:69:3d:e4:80:0f:b8:
d3:52:3f:de:28:e2:43:e8:4a:84:89:47:bb:e1:19:15:a3:96:
72:5f:f6:5a:68:c8:a1:4a:95:9a:03:10:5e:0a:bf:40:64:b3:
bb:cd:67:22:88:78:11:d5:17:06:98:22:81:01:30:82:04:0a:
5c:8a:a0:b8:e8:de:3c:4b:43:6a:34:94:36:f5:15:a4:ee:fe:
66:30:7c:ba:27:11:5b:5d:f6:cd:8a:3c:bd:df:33:ca:62:7a:
f7:d2:2b:10:67:aa:da:aa:c8:b4:22:08:8f:ce:ee:1c:c2:07:
9f:4e:61:44:94:19:b2:a1:92:55:b3:47:7e:19:ff:5d:05:6e:
5a:52:fe:8d:2e:a2:d9:d5:cd:ed:55:35:ab:8d:52:7c:37:d6:
37:7c:3d:3d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbN4rzLo0Cv5v6Opt6RVWy8fpuzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl
ODQxYTRkMzAeFw0yNjA3MjMyMzI5NTVaFw0yNjA3MjUwMTI4NTVaMDMxMTAvBgNV
BAMTKDJGMDg1N0FDQ0ZGMEE3MzcwMEMzNDgzNzIwNzNGREIzNjYzRjczOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/YKdQaenH4yq2KN7gLv1Hq4q
oZokKE0bqXs5aBhHHvZeHf2Vr3iul1gi6UZHxOzrB9RnCt718W99tDDo+vAzLVY8
tcCRR1cUaAq5jjFNPvjYkcwNwd2G1bc8xmbrDAr2fnVzxCJgq4+3TxudNiziHTF4
6rNexW+rLYrg0bHc72fMQv2rJpJ1r0rWVcigrqetkRq+Sipgpl7p0/xWQul8nvIs
iU+tWuwgHm1nbRzLsdvRaCkmcWlMU4QYkcg3NKWMV9kZPk7dBDlh+1xQKv3yD07r
1B6IG6iWQ1qZBupbhaeGrX9JJb6KqTFOUJrkNU7cbjuaBTl4/MTzqMgfhSDfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQULwhXrM/wpzcAw0g3IHP9s2Y/c5owHwYDVR0j
BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4
Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o
QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03
YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG
ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft1BVhmtKM5gsQQBfsf6
cdyPjxLU40WOVJFFWft37BRXBgcVJNNpff9WXjAvUTPuLIVZH7GlSuJtn6h9hTbA
e6oK+ZA4DG61exnP93chqd3c2Rso8Sa8mXfI/ZH6T0w5KqJHLwhtaT3kgA+401I/
3ijiQ+hKhIlHu+EZFaOWcl/2WmjIoUqVmgMQXgq/QGSzu81nIoh4EdUXBpgigQEw
ggQKXIqguOjePEtDajSUNvUVpO7+ZjB8uicRW132zYo8vd8zymJ699IrEGeq2qrI
tCIIj87uHMIHn05hRJQZsqGSVbNHfhn/XQVuWlL+jS6i2dXN7VU1q41SfDfWN3w9
PQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:50 2026 by rpki-client