
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
File: 411E2D411D687BCB4449C3DF45BEEDC041007D94.mft (raw, json)
Hash identifier: I8MBFH6CChDiTmLehL5c7QdIFPGctGLfCgTB4Z9+jLg=
Subject key identifier: 52:EB:0E:34:AC:1A:AB:FB:B8:54:5E:9D:3E:6D:3C:C7:F8:0E:9E:84
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 7FB3FA4CB071A2D1B8DB42C2F7301C6EAB9E1BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
Manifest number: DC
Signing time: Wed 25 Mar 2026 08:30:32 +0000
Manifest this update: Wed 25 Mar 2026 08:25:32 +0000
Manifest next update: Thu 26 Mar 2026 10:25:32 +0000
Files and hashes: 1: 326130663a316363353a3335303a3a2f34342d3438203d3e203331383938.roa (hash: QJ1csjeuHABkpJ32K/1KJg7dS60h731VP2eAeXrOYVQ=)
2: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (hash: 8+UeIsdjHRsho3hm72Zq62QcdYxLHdat1mG4wxsTodU=)
3: 326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa (hash: KPdxYweyaoN6aJ1WDQcAbIzYbTq2UWw3eNhM2zo446w=)
4: AS44324.asa (hash: HAsbEqXPiKSC9XmkvLBGl8MgjCwKSjimcWJh9LRT6MM=)
5: 326130663a316363353a31303a3a2f34342d3438203d3e20313533333736.roa (hash: HGaLio0Jo6U3+NxUmzAYGoR9w/tlCge/EFE0NkxzeVQ=)
6: 326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa (hash: 8U6uSk7tsPccVTskG2OLsMSqghKHOmq5AIh1lYBYbH4=)
7: 326130663a316363353a313130303a3a2f34302d3438203d3e20323135363139.roa (hash: 3ieELc5m08pyqFMvyZGwvLU4zxh5CWdP2r+xgmPYVZ0=)
8: 326130663a316363353a3230383a3a2f34382d3438203d3e20343031383034.roa (hash: EQpCRpN9ibDfHgTaJHEYJFB6B1hk2QAmeIReX+XIClo=)
9: 326130663a316363353a323530303a3a2f34302d3438203d3e20313533333736.roa (hash: 6Namxrf43YQyS33tbhmcxyljur2zp+JmJmQQBoRyqdg=)
10: 808DAC70271F8080A22C1AEE42EFAF98E1776954.cer (hash: CN45Ez+M2vYahrL4T9F4S9FbNKE4AsSthOsRoXNZFZM=)
11: 326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (hash: FHO6yQdE9pVoMQZDbmdnV97e+QL5O1Qj0xNfbrOZSso=)
12: 326130663a316363313a3a2f33322d3438203d3e20323134303236.roa (hash: 0Mmksrtruh7fbUKALb2tK8xrOixD39y8EOgMrAELKKs=)
13: 326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa (hash: uTnixv9hxV4t+/MNYIl3JI/v2d7u+7nTSEPq/Xubyao=)
14: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer (hash: mXOWkVI+O5dfAGsBgGASZf8zQGRkapL7Yid77qUV13A=)
15: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (hash: iz1tU+n1QM8JuIsf3A3u8SxRanJcAgiwVHnAaQQiyLs=)
16: 326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (hash: g8hKj91W7Xvro//u0J6C0VC1r489GP2/wMZRbU9A2RM=)
17: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer (hash: Y59Iau9nin7BF25bY/G3aQb/k2UfFjDTb0NVecR9cTA=)
18: 473F2085BBDEE25875BDA78FE4469ABD64842C90.cer (hash: vxflQFoBSNv6tUWtL5VfvoO2DNwcW7jNZBxiLjkD3uo=)
19: 326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa (hash: zOwHDjdhedqSqEGyWds4coIp7+ut0lW+Oo9tUWToG3g=)
20: 326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa (hash: NiIvuZazmDP3kGdz61QEI+q94NtgxG3Gr/oHjOzpBtE=)
21: 326130663a316363353a3630303a3a2f34302d3438203d3e20323134393333.roa (hash: QAVw3nto63ezajf647rQJV/gJ9ugJ4OboWETYueKwa0=)
22: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (hash: IlSzSHDNIZ6+6aFd92vwII4f0I4UgOAOOCbXoAxD+t0=)
23: 326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (hash: BkW1C05jo1OHjmQfgh6BSthITjhcqgr7WoujWuOO764=)
24: 326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa (hash: LD1kZoESri8SSiT70G4BwNPurj1h2Z8rsheZy9D25wQ=)
25: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: rra7K6FfnmdhsuCKYcUdQImHwFvo7h9/pjiSjqvVfjg=)
26: CECA73092344CA9B6F74C1A83D6C747962186C47.cer (hash: pTKz89FvFAzeNtV7lHRv93V5HEUDzySXmIkbDozvIdY=)
27: 411E2D411D687BCB4449C3DF45BEEDC041007D94.crl (hash: WhxIpnaFL0endSOBifeFvI/EamBnMmqssximqwnApN8=)
28: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (hash: JjNm5rDvtwoxVpKuyNODbWvZAo/OVdErv9yLLiqZwbQ=)
29: 326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa (hash: aeHFhugMkHAq+hujmnc0CAWqcy4S7rlH+hTvTizIIcQ=)
30: 326130663a316363353a36303a3a2f34342d3438203d3e20323038373533.roa (hash: RDD6g8PAEL1HWOwQwjZyw/4ALXZK/Kzfr25y8YIHWYY=)
31: 326130663a316363313a3a2f33322d3438203d3e20323033333134.roa (hash: 3CbPZlZdBv1wijTy1xiC/sWOE+eNUnisRKG/PEqX4Ls=)
32: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer (hash: ji6sF/pbFHw0dk9l03JsSI1lTa/vQmzHwyiisPTjG2M=)
33: 326130663a316363323a3a2f33322d3430203d3e203535323031.roa (hash: GoVxMbuxvRYAhL8X1ylPrO2LPPd0V08hTTxPYE/XoV8=)
34: 326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa (hash: bo1SBRM8XSA6XMG/cECAtn9xvjXWplHBDXvg2PuT6oE=)
35: 326130663a316363353a3230303a3a2f34302d3438203d3e20323033313638.roa (hash: UwWJ4yE2EjTc5x64fHQ/I+GpVPIkiv2b+8JEYIG398g=)
36: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (hash: OkA7mE2By1tX1d9l2TmDX/6EpIF8txUZN6tihggXGTs=)
37: 326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa (hash: /phJ7IvkIJjQqedc+6zIS2gYoqHi+Ocf/hRYSoER9/g=)
38: 326130663a316363353a34303a3a2f34342d3438203d3e20323131353735.roa (hash: 6w5bQISM5/f3Xx7fnLIHrjymZJmICgp/4YLl/tppTc4=)
39: AS214720.asa (hash: +U4auO/V8nlV4camGgHaMOAhD4vWi6ijODldNL0Ba0k=)
40: 326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa (hash: KBjHfA9kjqW8OLDitF/Wf34xfbXVf7rNOb2IaI6UkFY=)
41: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: PJthaD3Dqq1MsFvHVoT7SFWUfWl9HRqCSrg1Gh5Hnbs=)
42: 326130663a316363353a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: /wBjERMVRUk3eATx7xB8KQMRotjHS8Dx8tee6UNFQoc=)
43: 326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa (hash: URwclaYoVILE99k3dHkDkNvZg1XOMo4nTmtLuMv/9so=)
44: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (hash: 2itISUuyiq2kJ3p6MrMIH40PF2ksGE3/FGvvEXcIVOY=)
45: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (hash: 8Lg12+qS457Clceh7CRKK2dYQVdupidFacGSjFmqeRY=)
46: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (hash: cu3myeTajLRffV1p90jDI0TXRI0bh3Dv5VJAXzLfnts=)
47: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (hash: 6r/3C/Tu9WqIAMRf5wqBgloGFaXd48/YhtGn/rLklQA=)
48: 326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa (hash: a9VTadKi3X1qXhii/AdM18H2c+kqhz05BGXKnS6Oxrw=)
49: 326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa (hash: RUR4g5rbDAp6ciVfkAyWU6prG9LPyX+46qC6E1BXuuI=)
50: 326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa (hash: caS1uw+tIHonGiirp27ihWFLNvPI3Lqgcb7cJY/5URU=)
51: 326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (hash: glctOSn6s4Xj9+H9ebH8OBXBfYfFT2hJPUufn2SZLJY=)
52: 326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa (hash: 8bqKwz8sj3sbN6VTB3pi6s7mX6CCSGrFYbUBfIR2kCw=)
53: 326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa (hash: 41VnGMIsMh3o9pctowqTD26wfCcnjcgLC79guvJR91I=)
54: 326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa (hash: ALGIA29NNbeFSJiSIRW+cPqzoSQbByDZ7Tc3zl5bUzE=)
55: 326130663a316363353a323330303a3a2f34302d3438203d3e20323031373635.roa (hash: 0mufkKNz+35ID25JmWy4iw3ddzarlEtW5ptpwnxBezU=)
56: 2A91778ACCE76333081468D9784DE132C2985976.cer (hash: jaQi5vFpWZxrP+5SgB0/Nof0i0h5yIIkFhb/WKoltSY=)
57: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer (hash: X7BtIqYuY9CGfqbBF9famZoZLIlZWc4+DDZ02mC1ZUY=)
58: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer (hash: DIMe7+ndBd4xOfx7S5h5CTG7lj1QM5198hbxcwrCbF8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b3:fa:4c:b0:71:a2:d1:b8:db:42:c2:f7:30:1c:6e:ab:9e:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Mar 25 08:25:32 2026 GMT
Not After : Mar 26 10:25:32 2026 GMT
Subject: CN=52EB0E34AC1AABFBB8545E9D3E6D3CC7F80E9E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:a0:15:0d:c4:1b:e8:f3:46:ad:ea:6f:da:
f7:34:6e:6e:65:da:74:cb:ea:a5:d6:c6:53:3d:29:
bc:e8:79:ea:a8:30:41:5a:8f:87:e5:bb:1a:60:ea:
46:76:44:0b:40:bd:e7:96:98:77:be:f4:0d:ed:a7:
88:b4:15:ba:ca:2a:a4:2b:93:bc:ba:74:f4:83:6d:
88:c6:3f:45:ec:75:04:3d:d3:c0:3f:49:bf:b5:e0:
c2:8f:36:00:00:5d:1c:c4:38:d4:8b:95:b0:3a:13:
7d:c3:e0:4f:8d:77:ab:bc:27:b5:e5:43:20:3d:d9:
06:c6:eb:88:f3:8d:f1:fa:71:b4:5a:a7:27:cb:61:
91:fa:35:32:3c:81:bf:94:58:86:e7:24:3e:ea:ab:
68:7b:6b:75:68:80:e6:e7:e5:a2:ad:f9:f0:09:6e:
1d:bf:be:de:a3:75:ac:8e:7a:6d:73:e9:97:e4:9d:
1a:8f:b8:74:58:eb:85:8b:12:44:01:84:5b:5e:a6:
ec:22:f6:4c:51:ba:e2:a6:1c:e0:c9:e8:10:fc:26:
75:82:cd:5f:02:28:fc:24:9b:7c:4c:33:49:bf:36:
74:2b:e0:d9:5d:6c:34:8b:3d:4e:53:56:cf:4c:32:
9c:89:8b:e7:df:74:e7:a9:97:8c:6d:66:af:b5:18:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:0E:34:AC:1A:AB:FB:B8:54:5E:9D:3E:6D:3C:C7:F8:0E:9E:84
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:06:c9:28:20:c1:9d:bf:db:5f:ab:8a:31:d9:15:58:fb:f2:
bb:e4:fb:c9:cb:d6:dd:26:79:96:61:ce:cb:b6:3d:f6:af:fc:
32:40:4f:8b:8e:0e:63:39:86:56:67:83:05:53:5b:6e:b1:14:
4d:bf:41:89:bf:97:ca:5c:60:4b:29:53:b6:89:90:15:a2:86:
22:56:bd:24:1b:89:7a:d9:2d:64:77:67:6c:66:10:ce:7a:80:
73:1a:d5:03:c0:4c:02:dd:83:20:32:6d:b1:2e:b4:3a:eb:72:
f1:97:c5:1f:a5:66:ed:56:c1:93:8b:bc:cb:51:05:bc:c9:f2:
1f:b6:32:24:43:1e:ab:5a:b5:5b:08:cf:84:98:6b:67:17:b1:
c0:8a:f8:ea:4a:ee:a6:e3:08:d8:c3:4f:44:a9:29:53:e9:ab:
6f:dd:7a:e3:1e:78:50:5d:25:3f:a3:8f:b3:22:1b:ab:72:c7:
c8:12:89:e1:c7:c3:82:91:7c:7a:e0:e9:c7:cd:c9:0b:bb:dc:
51:28:a5:bd:8d:31:1d:c8:8e:6b:0a:65:d2:12:0a:e2:bb:d4:
25:7b:dc:fd:72:21:46:d5:d1:80:cc:62:7f:cf:2e:b6:32:3f:
97:8c:4b:30:2b:76:32:dc:25:d7:08:a2:35:6f:63:3d:0e:c8:
c1:df:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:39 2026 by rpki-client