
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: I/ymQWR8DHO1B93hGetlswKU4iyFvZImHY0yW2Dxrw0=
Subject key identifier: 96:7A:40:26:09:9A:5D:79:F9:55:3A:98:28:3C:E3:60:2E:9B:85:8F
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: D543514F4B7BF635CDCC346A9B75BD667C19F9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 03AC
Signing time: Thu 26 Mar 2026 13:33:21 +0000
Manifest this update: Thu 26 Mar 2026 13:28:21 +0000
Manifest next update: Fri 27 Mar 2026 15:18:21 +0000
Files and hashes: 1: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=)
5: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: mYNfTuj9jFpay8yWulA5RYL5CaHVvZSr/ehyF3VjchI=)
6: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
8: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
11: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
15: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
16: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
17: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d5:43:51:4f:4b:7b:f6:35:cd:cc:34:6a:9b:75:bd:66:7c:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Mar 26 13:28:21 2026 GMT
Not After : Mar 27 15:18:21 2026 GMT
Subject: CN=967A4026099A5D79F9553A98283CE3602E9B858F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:ba:c4:0d:d0:42:09:94:5c:7f:3e:ae:e4:
ca:b5:21:e0:22:ba:2f:40:2f:ff:68:02:da:42:72:
23:ef:0f:e9:8d:db:bd:35:b4:07:69:91:9b:7a:4e:
09:92:01:c8:2e:ba:9f:1c:c8:9f:97:e7:b7:43:53:
e6:d2:08:40:54:89:2b:67:39:b5:3b:fe:5e:c2:ee:
b2:97:24:43:34:3b:9d:32:a8:2b:b1:97:17:27:45:
9b:b7:a1:09:0a:a1:f2:73:f8:9b:e7:1d:6a:4e:f1:
cd:d7:57:a6:eb:5a:58:25:98:6a:07:ff:b0:d1:e4:
62:b4:23:e0:60:ed:a2:6b:62:c4:83:89:cf:98:a4:
e6:28:26:96:ca:40:d4:05:7c:c3:fd:ad:c6:3f:97:
de:1e:df:30:39:79:1d:2c:c0:17:ff:d5:57:5e:50:
61:48:84:dc:39:4a:b6:92:0d:73:3f:c8:e7:1e:55:
b5:d0:fd:e8:cf:57:1a:af:4c:4f:dc:22:03:92:c9:
4e:60:fa:ff:12:91:4f:a9:fd:70:17:48:b3:83:66:
93:87:88:54:c3:04:38:63:a4:59:18:30:fa:25:91:
a7:26:a2:b4:5c:9b:62:3e:5a:f7:fe:8b:3d:fb:96:
98:ea:8a:d0:fd:05:00:32:3d:27:c4:f5:3f:e0:18:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:40:26:09:9A:5D:79:F9:55:3A:98:28:3C:E3:60:2E:9B:85:8F
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:08:39:1f:63:70:13:f8:e9:8e:17:11:4c:ce:15:b0:b2:a3:
7b:82:86:2b:74:75:ef:2b:97:a5:9f:13:62:50:24:d4:26:41:
20:8a:fa:77:d4:ef:7c:4c:61:ce:02:57:a8:66:96:b0:28:e4:
0e:45:86:2d:89:43:0b:73:99:11:b3:10:97:81:3c:a9:bb:5e:
93:16:40:a5:69:62:f9:9d:9f:43:17:b9:be:6a:b0:de:8f:1c:
18:68:c7:a7:2e:69:05:4d:d2:2f:f0:fd:3e:be:f6:f5:2a:80:
d2:30:b9:c9:b3:13:bd:5b:b7:bf:e2:14:a3:3e:a6:3b:dc:7a:
b1:91:ff:57:7a:99:a9:72:9b:e0:2f:11:54:56:46:33:18:c9:
86:36:af:e8:86:d1:2f:32:d7:02:3e:77:31:6f:2a:de:4e:83:
09:28:19:5e:6c:d3:50:24:68:c9:e8:55:67:50:21:53:22:a7:
38:f6:0a:d7:fa:ff:6d:2a:97:e2:6d:4f:e1:68:50:c3:9b:61:
1a:45:da:64:57:d4:55:12:1b:47:9b:c7:64:23:c7:00:83:b0:
e8:d4:77:e2:bb:81:e9:1f:ad:f5:ff:f8:71:2b:fe:94:e7:a1:
cf:ca:5b:b1:96:74:ba:4f:6f:79:45:81:68:5b:18:bc:0a:8e:
7b:d4:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:20 2026 by rpki-client