
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
File: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft (raw, json)
Hash identifier: pZvs8ObsnI3UwBwVghr+QtUHC2lCx5b/CljubCmyApY=
Subject key identifier: F0:C3:6C:72:5B:05:32:CE:FB:5C:1E:86:95:41:AE:5B:65:CC:2D:64
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 07761459F5508228DA1EF6356F4775D398178AE7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
Manifest number: E5
Signing time: Thu 24 Sep 2026 08:49:29 +0000
Manifest this update: Thu 24 Sep 2026 08:44:29 +0000
Manifest next update: Fri 25 Sep 2026 12:08:29 +0000
Files and hashes: 1: AS401776.roa (hash: 3/VVi4Lv+TCbuSKPrGgpz1UqSXXGkeq58pnf45HvX38=)
2: AS402976.roa (hash: I7odSl4zXwZgCcLVH3lOtxDj9LSnAalofTGcPDzTh7k=)
3: AS218869.roa (hash: FaW1gSR+mt5afQMFjN67xrhZ3Y2nfLQ8lXJFIYXo/ms=)
4: AS142482.roa (hash: Dc5Np2N/qmuMkBf6HZ9KC3hoIPYe+ydJFxqLEPVVIqs=)
5: AS151331.roa (hash: KOIDyP+B3v1bNYePZw0W2UPgD2RDFCVVZvkbAyjty6M=)
6: AS199707.roa (hash: sv6ZzdmyG8Y9GDq5Ll+PVRNe8Hn7yePVtrKaa8T3SyE=)
7: AS212259.roa (hash: zNQq/1t8AWu55ZVEvvRm0lpu7iSCnytRBreY8+7BULE=)
8: AS402866.roa (hash: jWpfISEXb6U9Dip9km0xrCrOUXOTpGFf7SpErtVgnYM=)
9: AS218809.roa (hash: PeAHc+FqZJfxtbLo2bdOBcCXbRGP7xCaZgF2Zzn/yvA=)
10: AS212335.roa (hash: 1oU1IhK+hQD+oH27PJZsjnACGEmPQ3Xrrj2sOQ0Ah/s=)
11: AS9304.roa (hash: HOFtg0dAehWbTZuRoeQjk8aEOpyQX+rIPl7w69GXMqo=)
12: AS199436.roa (hash: /XDttTZQHNysK5unMGcv+6ZxXx2SkiY6eJJrnZzv4/4=)
13: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl (hash: reHxcqw3becCgfG/fGgwT2TNvqcjsPavhrtc2hEif8w=)
14: AS210000.roa (hash: iiF++j4Xh0hUiUQraSKUnIDrmP2LvsFq1fQB/08xV6U=)
15: AS215817.roa (hash: ex8AgMQbjifvZAvVqdxuIG4idrC5V69fp3mXtgPgMt0=)
16: AS401362.roa (hash: PHXY9xxlsCIRkppSNt/mbcYeH68Lvly5axx8PgN9AiQ=)
17: AS219427.roa (hash: 6Brq3ZMWcgPa9y9VejjMnjqYfCFfzEJYDD3UZ81qR48=)
18: AS402288.roa (hash: OEEinHqxnU0FMkxuHzshKnSVDKpMhILy3bHegSBea1M=)
19: AS834.roa (hash: ETVsklrkcm22APPxfqr7SpWNK96qhj2ODNNbzmMJnz8=)
20: AS152179.roa (hash: l1j7kWPvLQ/WvGC9RDWkmB/AHxwR2kK2wVZ1vfOS3A0=)
21: AS142146.roa (hash: 7myjmY/+xitRLiUrkrL/yl4tHj7WjFZpxQNplov4OQY=)
22: AS204244.roa (hash: 9o11Dv3XZ6sMYHEXTk/r3OHQTDqVJyWwW5o3ssJ1a0g=)
23: AS40929.roa (hash: NFPVwkQ+qH/NGlUlMTMzkMTwNqB1QwCWmHUslRedvJg=)
24: AS275723.roa (hash: t02ogZWuSdS9zpAaeAW5H8TGJmR58B4pTimYNg6FGXk=)
25: AS204921.roa (hash: RmRHiFfGuqcrqUxGkm7ZymJy7zhFZWE9xiZy8VXjZQc=)
26: AS147281.roa (hash: RUnpmVEYUVyEQ8Yzdsp907zH5saHxG9Xpv00e+d+aN4=)
27: AS16276.roa (hash: agPNPFxgj6sQI3Uv7U7nN/7eFPfSjHEWIhdrPxSVKhA=)
28: AS399359.roa (hash: kvKOc7Vr9ZGNYLUeIev5D0XFXiGMzOVcfFRYz0YWSAY=)
29: AS402628.roa (hash: BhjZmTb2jSKhhBGUMzdTXx26j9raY2BFVuX3zr2+trI=)
30: AS36530.roa (hash: c5oyfNpSaLAs1++vuJ/bwf616yaSJHvllt9e4SVMKNQ=)
31: AS219057.roa (hash: 7w2zM3dHnBkga4E3GqoQ6+flU05IE/Th7yuOZJo7Sl8=)
32: AS402857.roa (hash: yVJup3ETK9rbDO0rMUoCEKydOL+1gS7N39tSuyvC+Rk=)
33: AS214483.roa (hash: TCXoVYqDb/uy+ZTPW/q0zVwe/v4nHCK+NnTW83O+Pbk=)
34: AS275761.roa (hash: 0qUE/p9BI3NpiIyXK6Aes2Tf0wH347tNc8jYOV2DJRU=)
35: AS402265.roa (hash: ZvIuLLE2sOOk8RHJ21epFiUKYEI0r8Efgmc3PMiNzew=)
36: AS215023.roa (hash: jdCqv2qUKm7D91uKI/rmgleo6syXsEAbm+EoYR/s1eo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:14:59:f5:50:82:28:da:1e:f6:35:6f:47:75:d3:98:17:8a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Sep 24 08:44:29 2026 GMT
Not After : Sep 25 12:08:29 2026 GMT
Subject: CN=F0C36C725B0532CEFB5C1E869541AE5B65CC2D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:a0:dc:2c:20:8a:47:d5:fb:13:95:f3:f1:
29:7a:6a:83:93:c5:04:ac:ce:39:a7:0f:e1:ff:17:
bc:b8:01:27:49:e4:a8:91:93:aa:6c:1d:89:73:7d:
68:9c:f2:dd:4c:43:57:11:4c:cd:6c:be:6d:90:ae:
48:55:31:ac:e5:a7:4a:29:eb:b9:b6:56:8d:ea:54:
79:15:ed:be:69:c4:00:c0:94:4d:c2:02:f3:1d:b6:
97:43:b6:e6:60:5b:6b:7b:69:2b:5d:6d:5a:bd:a4:
c3:a5:4d:97:4a:66:e5:f4:f9:97:86:3d:ea:00:20:
ca:a9:c6:53:ee:77:61:58:fc:f7:d8:e6:99:db:f6:
2b:e7:92:2d:e0:9b:1e:6c:11:81:09:d8:37:db:6c:
6d:f9:89:4e:46:60:6f:f6:21:03:b4:b5:5c:26:3e:
26:ba:1c:49:bb:6d:82:9a:63:04:f5:12:06:33:8f:
cb:37:80:22:ec:19:4f:f3:d2:2e:25:dd:96:55:13:
bb:06:71:87:f9:af:fe:78:c8:4b:a7:d4:d6:56:8f:
3e:15:87:a7:0d:df:b4:6e:44:eb:51:1a:ea:12:89:
05:82:2f:90:98:a5:a0:ee:16:46:37:35:8b:64:63:
15:5b:78:48:8a:a6:7c:93:4d:ed:08:f3:da:1f:b1:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:6C:72:5B:05:32:CE:FB:5C:1E:86:95:41:AE:5B:65:CC:2D:64
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b3:f6:1d:91:21:27:15:f9:ca:f9:41:9b:d1:a3:15:44:75:
3f:58:d2:57:e5:bb:0e:84:d7:5a:2b:cd:6d:d8:80:b9:c9:16:
43:ce:a5:ef:8e:df:dd:5f:bc:52:dc:5e:aa:a2:66:03:85:fc:
78:54:c4:da:2e:4a:58:02:72:5b:89:ff:a8:8f:87:f4:d0:3c:
cf:76:7e:92:21:35:6a:d8:4e:e3:f7:65:42:19:eb:fd:a2:af:
53:bf:99:97:74:23:61:dd:a9:55:d1:c6:d3:75:b9:8b:5a:57:
6a:68:05:fe:5f:71:24:dd:17:25:0b:3b:47:76:be:d7:5f:37:
63:6e:28:30:dc:3d:86:ef:4b:3a:8c:b8:0e:3b:13:76:1c:5e:
7c:be:11:f0:a2:61:04:34:65:51:0a:bd:0a:40:41:70:d3:fc:
d0:3d:07:a3:7a:a8:b1:90:73:a3:69:09:6e:dc:6d:62:48:17:
c6:10:02:34:00:1a:11:b2:d1:2e:f1:18:ca:54:6b:e5:11:b6:
59:f6:44:7c:db:31:02:6d:99:b6:fc:b9:3a:34:c7:46:64:cc:
7d:2a:20:dd:ff:9b:7d:d8:49:f9:e6:f9:93:28:05:7d:a7:7f:
2a:1f:12:f3:b8:6e:e7:4d:e7:c5:be:3a:29:2e:4c:70:4f:2b:
f4:02:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:28 2026 by rpki-client