
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
File: 70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft (raw, json)
Hash identifier: GUFDQBWb8T6Plcat09B5qhS8em331jjfxnJ48L8wXNs=
Subject key identifier: 52:7C:BD:F4:08:E6:50:21:A6:39:07:D8:93:CE:F6:04:AC:38:67:0F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0767D33E573AEC25A6780C316988EB6AB86FCE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
Manifest number: 0831
Signing time: Thu 23 Jul 2026 10:53:02 +0000
Manifest this update: Thu 23 Jul 2026 10:48:02 +0000
Manifest next update: Fri 24 Jul 2026 12:37:02 +0000
Files and hashes: 1: 34352e3135382e35362e302f32342d3234203d3e20313533333933.roa (hash: 8UvMlmCKio6NWzTevJOyUwmw1cZlYAolu9sJwLHy6BI=)
2: 322e35362e3234382e302f32342d3234203d3e20323133343037.roa (hash: TKPrldIWVJywUjGc81qMTcQNolz6Ug2kaEvJRYXCC9Y=)
3: 3139332e33392e31302e302f32342d3234203d3e20313437323038.roa (hash: PMBudh6Lm3q548B4f5mvH9Iqtzb/o0R3+quKIkohZ3w=)
4: 3139332e33382e35332e302f32342d3234203d3e20323131343430.roa (hash: ajd3hQ9AbLkLE84XjOP4BHT89OAV75hAcAz7aM6oENY=)
5: 34352e38372e3137322e302f32342d3234203d3e20383334.roa (hash: RYOmoS8p4aKgRK/Pkw04E7xsHl2zPLVSEEKlA0QC5Q4=)
6: 39322e3131392e31322e302f32342d3234203d3e20323131303537.roa (hash: LCzRZ19Bw/c5uwr8re6X3yHmSBzCMKX1+G0o3/8NHTE=)
7: 3138352e3137322e3137352e302f32342d3234203d3e20323033373538.roa (hash: fCpOXt27A6axDt/4zYpYox2WQxRrqAgVC84e2q5JTIU=)
8: 3137312e32322e37362e302f32342d3234203d3e203239383032.roa (hash: YG6VYgV25r5ivU8xV8+xvxZOWPGG21+FBjMOrEoKIAw=)
9: 3139332e35372e3136362e302f32342d3234203d3e20323132323338.roa (hash: 8FQzPoDa6hJCMXvrTTSx05nT9drGCNOIYkAja2CsAfQ=)
10: 38352e3230392e3232302e302f32342d3234203d3e203634323637.roa (hash: /xhyz61UyB15PvY1VWpgba2IUHrgOZaPcuExUjQcLQU=)
11: 3138352e3137322e3137342e302f32342d3234203d3e20383334.roa (hash: EIE7Ji0O9A3J7CA5I37DF+WQeYRP5M/RKPJ0r7iI0wI=)
12: 34352e38372e3137342e302f32342d3234203d3e20323133363534.roa (hash: eyDeMHXNZiIIcPxwNJdCPIezwM3d07d1cU/qMCFenv8=)
13: 34352e31322e38302e302f32342d3234203d3e20323036373636.roa (hash: KQIeIzYqB4AdS5u+C8McYg66k21scObYMvVGfy4Yr3o=)
14: 3138352e3137322e3137332e302f32342d3234203d3e20323135303532.roa (hash: Vqha5lWTo+LN8EsgB1R7AnOrRD0jz/DiE1NZCndA7aU=)
15: 3134362e31392e38362e302f32342d3234203d3e20333937343233.roa (hash: 6/mnOFZ8pUecocVBYn/hQlbQdSkB9xWCXPZZwvs4144=)
16: 34352e31322e38312e302f32342d3234203d3e20323133333138.roa (hash: LRmgMpqeNpdNFpRZE8sU/p32Y81wYvFtwTCtXhAImQ0=)
17: 322e35362e3235302e302f32342d3234203d3e20333936393832.roa (hash: BxPezobO/T4btS4G3go9MqQgNF85JYbUN5qjqWyvM4I=)
18: 34352e39312e3133392e302f32342d3234203d3e2038373936.roa (hash: AQp4IY3+JWwU0AIke4E/KY8kW9R1Ux2CaA5ctf+QLVg=)
19: 3137312e32322e37392e302f32342d3234203d3e203633343733.roa (hash: pf/39XNRWdhYCK8H09xRkzlFxRx7/aFFexgKDJdWy3w=)
20: 3138352e3137322e3137322e302f32342d3234203d3e20323132323338.roa (hash: 5QvqCdQtQuFR7k3609q7VNBUNd4J1GMkNLpbKSbZIgU=)
21: 70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl (hash: 3UgHjnlbUC7bxiOiU4+gwrGX12EKQJgz5/XHgX3Pf5w=)
22: 352e3138312e3137372e302f32342d3234203d3e20323134363737.roa (hash: vzxuG1+0kmB63/R/Nt/ZMIV9K/FLNdsayN5ApsSCS70=)
23: 34352e39312e3133372e302f32342d3234203d3e20313337323335.roa (hash: FJffnOL9KXxzhZJs+R16DnPP8iLRBq+0jo83DxUX8xo=)
24: 322e35392e35362e302f32342d3234203d3e20343030303339.roa (hash: SvueGYLTcdwsq/bObh4mLVHSaFlGIWe/rQTysAiyAT8=)
25: 34352e3135382e35392e302f32342d3234203d3e20383334.roa (hash: DeZPhZSdL14M33XwqO+y+oH2uU3mqD+IM2R3WKAMwA0=)
26: 3137312e32322e37362e302f32342d3234203d3e203631333137.roa (hash: s4P1O86YAefU8f8a9qPcfQZJrw6Vq1HRQx0FtzoVBuQ=)
27: 34352e3133372e39392e302f32342d3234203d3e20323135363539.roa (hash: W3QG5PUgS2Tv8C2R+rToZhPPRIqfx9x33sRdZSW2w+Y=)
28: 352e3138312e3137362e302f32342d3234203d3e20323034313334.roa (hash: GZWF23emtLLWhRMFLrIz0U/JkVUZ2+Qs+Ixrc7cmugY=)
29: 34352e39312e3133382e302f32342d3234203d3e20323032303531.roa (hash: sT1dn9xSJZhhhZxEyP4cG4dkxadDGbXgvTQyikKSzbE=)
30: 3139332e33372e3233392e302f32342d3234203d3e203432383331.roa (hash: 5ApGEymqRrwyhmUY6eAqXio2ZY2xEe9/R80CO6fRY1s=)
31: 3134362e31392e32332e302f32342d3234203d3e203235333639.roa (hash: w6NEW/DWRrPWO/iWESeNv6j1OZ86wOXZFjZ3GD6N5a8=)
32: 34352e39312e3133392e302f32342d3234203d3e2037343838.roa (hash: gOpwje9Qy8SmaNP6cerzV6iD9+gJUA7LJN9/mi4qu3I=)
33: 352e3138312e3137382e302f32342d3234203d3e20323131343037.roa (hash: ZDllGUXVe/6CLnyZKlVzsZQO2/HcMQSuJbzKZRUKzJU=)
34: 34352e31322e38322e302f32342d3234203d3e20313532363732.roa (hash: 6HTAaVLoUrwP/bdAOh7Y8s32EHNezdrTJQAqpgHyNn8=)
35: 3139332e33392e392e302f32342d3234203d3e203339333638.roa (hash: b0/cqO0kDv34iuhyURYcIs2GEfxWQJjxlG/AXwqFSqw=)
36: 39322e3131392e31352e302f32342d3234203d3e20323131303537.roa (hash: njTQpS1ayaCngakFkafq8xJvTjCC2WmYss1Z//oyqD4=)
37: 38352e3230392e3232312e302f32342d3234203d3e20323132333834.roa (hash: sE8H1sL8so6876FcvK8T/98WJNiBRq6ZWtcL7Z5XkHc=)
38: 322e35362e3234392e302f32342d3234203d3e20323632323837.roa (hash: nxbRHwFERXwAk5HoUVspd+6/goZnM1O1VdoJOA5E2Ws=)
39: 34352e39312e3133392e302f32342d3234203d3e20323133383430.roa (hash: Mc+tTYqNxMpCa6SV8+Xa67r0OvduIq/mlIUgQ/RB2ZE=)
40: 352e3138312e3137392e302f32342d3234203d3e20343030303339.roa (hash: l04YjqlLhiUhjH9CRLl0ESBOCV7wF7kMRATJa9/eZ84=)
41: 34352e38372e3137332e302f32342d3234203d3e20323130353338.roa (hash: yZm4Zvr51K7dP6yiV4JPvzr0kvkWiTR0g1eDgWiFnLs=)
42: 3231322e32332e3231392e302f32342d3234203d3e20333939343638.roa (hash: it4Vn9O7nN7R7qCYO8Na+QS+UpzeO0rOYCI81bM3D8U=)
43: 322e35392e35382e302f32342d3234203d3e20323036363936.roa (hash: W7mcvbby1T7XLZNMiEjmJHNvu2dEpkO/lLY28OdV+yM=)
44: 38352e3230392e3232332e302f32342d3234203d3e20323036323236.roa (hash: GzXCiN+ftxEDsC+cmsu9v/3O7RJ9va48n5lv98EXle4=)
45: 322e35392e35392e302f32342d3234203d3e20323132333834.roa (hash: kzNbBi9sncoAYpR91sNSwCX31aZfIMhFzis8caXfMhU=)
46: 34352e3133372e39382e302f32342d3234203d3e203439353831.roa (hash: 2gH/52ENRw9A8DEeWlc6NadKJyzr/3QGbwDMj4qZGb4=)
47: 322e35392e35372e302f32342d3234203d3e203136353039.roa (hash: xcNftsthAsOS/Vm1gBw6O8VJO0Cj26e9NkIhaWlZDew=)
48: 3137312e32322e37382e302f32342d3234203d3e20313532363732.roa (hash: 2OSpxWv5QBZrOVfJSvXTfcxVViX54zaPCRy37fp8J0w=)
49: 38352e3230392e3232322e302f32342d3234203d3e203433363431.roa (hash: 4J9n2vON96PvFs3UN55Awik433YZ1G1C4vgS71Fw9+s=)
50: 34352e3135382e35382e302f32342d3234203d3e20343030303339.roa (hash: 1wicTuO9zFRaBqU+L0XllF5WvX0m2JKZzkFHugdxyTQ=)
51: 39322e3131392e31342e302f32342d3234203d3e20323131303537.roa (hash: HOYEX9uEXmqFLI4eumlb2d/t0GQDWXhnMbqeN0YXHXI=)
52: 322e35362e3235312e302f32342d3234203d3e20323032373034.roa (hash: 7B9Wtyg1cROjEfNCqKX+MjqDnb+jkXAnmp7ARwhRaPg=)
53: 34352e3133372e39372e302f32342d3234203d3e20313532363732.roa (hash: MqfTcSXyVtUljC/tLabg0s+Ov2UQX930XhIUgODaAAc=)
54: 34352e3133372e39372e302f32342d3234203d3e20313432313131.roa (hash: Pqs3+jNngcGzpbSCZJqkRO27iGjLf9cSgl4HQdGpQd4=)
55: 34352e3135382e35372e302f32342d3234203d3e20323038343833.roa (hash: 9uSEX6siAhGdg1kP92Wfm3p/QatgRFx9nYNppc+dR8o=)
56: 39322e3131392e31332e302f32342d3234203d3e203631333137.roa (hash: XJucqt/WE94eBb+eCr8FWq6DlRpxvll1uCrSM37EI3c=)
57: 34352e38372e3137352e302f32342d3234203d3e20313437323736.roa (hash: on/2cXFQCtg4+9lDY4P78kAVprMfcyyYlWiOAB8AQFA=)
58: 34352e39312e3133362e302f32342d3234203d3e20323132333533.roa (hash: GrC4SC+F/nWiGjhJptqbSoOfCe1VsuzPR23MJUQhkAg=)
59: 34352e31322e38332e302f32342d3234203d3e20383334.roa (hash: L1uXxY3BwWFLLALuAK+CIC/PHuq4ekhQhqD5j68JFsg=)
60: 3137312e32322e37372e302f32342d3234203d3e20323130393330.roa (hash: e3dXx/SbvbUFDPkUcNswkyncjXv/ZPftUL5tGndRvus=)
61: 34352e31322e38322e302f32342d3234203d3e20313432313131.roa (hash: fUwyLO8Amhfm+uCU8KFyKs0WvwacGFtaTTkWDL8E9Yw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:67:d3:3e:57:3a:ec:25:a6:78:0c:31:69:88:eb:6a:b8:6f:ce:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 23 10:48:02 2026 GMT
Not After : Jul 24 12:37:02 2026 GMT
Subject: CN=527CBDF408E65021A63907D893CEF604AC38670F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:ed:5a:6c:50:0c:b4:ec:8d:7d:e0:75:58:
f7:0f:a7:7e:2b:f7:ee:97:c3:4a:2f:00:75:b9:ac:
89:45:09:e3:04:5f:f8:3f:cf:cc:f6:57:7c:61:75:
1c:a0:12:f8:c5:2c:70:77:dc:24:75:d1:06:68:a5:
2f:cf:79:a9:04:61:83:a8:24:f4:2e:3a:0c:c1:95:
cb:eb:2c:1d:d1:3e:15:e9:4b:bc:2a:87:65:ff:50:
17:30:05:1e:a6:b0:e8:9d:88:67:59:5a:d7:f6:ec:
e8:71:c2:c9:b2:f6:e9:df:2a:87:3e:06:37:b7:18:
4f:32:4e:37:a5:0d:82:5e:b8:44:2a:c5:ad:66:bf:
51:3a:2b:ea:89:7d:bb:c2:ee:3d:65:e1:62:0f:b7:
42:d3:91:29:3a:ce:71:b8:2e:9f:02:d8:51:8c:d1:
b5:6a:66:39:9e:4f:0e:a5:c5:0d:b2:88:fd:30:61:
1c:3d:07:de:55:ae:5e:88:b6:94:e9:2a:a8:ce:69:
7b:de:1c:e7:83:d6:2d:0e:c1:e3:c8:ec:09:bf:01:
59:9c:d6:9d:b3:3a:e0:c4:ea:ce:c5:f7:53:6b:f2:
06:17:50:a4:d8:c6:ce:ff:84:03:47:04:4f:c8:41:
71:fd:88:e4:9f:59:c2:41:6e:7b:78:de:8d:d0:5d:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7C:BD:F4:08:E6:50:21:A6:39:07:D8:93:CE:F6:04:AC:38:67:0F
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:7d:dc:9f:1c:39:6e:e4:dd:e8:1d:fb:ea:1b:36:9c:5c:
30:6a:cb:76:92:62:98:24:dd:d2:8b:52:66:e1:46:f1:7e:d4:
a1:6c:e2:c6:37:06:dc:17:f1:d6:9e:fa:c6:8a:f6:b7:ef:28:
f0:ba:83:25:fa:51:19:d2:f4:ec:46:99:36:e4:27:53:36:3f:
99:36:e4:c0:42:d2:9a:b1:cd:9b:7c:47:ab:bd:a7:f6:36:6f:
88:e1:74:e8:c0:22:36:90:47:a9:b1:ec:38:88:18:26:ba:b8:
eb:7c:72:d6:db:11:9d:8c:8e:01:47:95:45:c8:f6:7f:d9:c7:
88:65:78:a0:ec:1a:d3:34:5a:2b:3e:a8:21:42:df:fd:98:32:
f5:80:30:0a:6b:26:fb:c3:ab:a1:8b:df:1c:79:da:69:a0:6d:
35:f5:89:18:ac:4b:11:24:10:d0:b3:f2:20:5e:a3:0d:7b:34:
47:04:36:7b:0d:f0:ec:c6:c0:a0:c8:c4:4a:e3:29:57:62:d2:
90:24:a0:33:21:ed:92:81:05:18:e0:e8:9f:ed:6e:0d:08:89:
f5:c0:e0:b4:04:e9:2c:c3:a0:3e:3c:80:b3:9d:03:92:5e:b3:
ab:b7:ac:ef:d2:0f:01:03:57:68:df:ac:c9:5a:90:6a:42:82:
0c:5e:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:06 2026 by rpki-client