
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: 3LZ4NT8gA5ULtQBMuVz3mIQizpcZnaUmPdo6/w8+ryo=
Subject key identifier: ED:E1:29:3A:FF:B1:A2:8D:CC:A1:D7:CB:40:02:6C:59:2B:5F:18:F3
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 2BB14E9CE554A66C6DBD09DB2A224E2EFAA8C03B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 0406
Signing time: Thu 23 Jul 2026 20:47:25 +0000
Manifest this update: Thu 23 Jul 2026 20:42:25 +0000
Manifest next update: Fri 24 Jul 2026 21:42:25 +0000
Files and hashes: 1: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: XRiKxatyVLysBjqVSJJoRWMIYhIOm7ZhYhL0/zUT8W0=)
3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=)
5: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
6: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
7: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: n+Ls1jXfWmBHifONKmtp9H1RDvGnEsrCqesBPgQc1ow=)
8: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
9: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
10: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: SggrSd58rYWUnF7aoXbJS01Xsn0gasOjLa9BRU+eZog=)
12: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=)
16: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: h3VcKI8rQsN3JtAe6OwHMHeBRW3aUtosh0JU525Pq4c=)
17: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b1:4e:9c:e5:54:a6:6c:6d:bd:09:db:2a:22:4e:2e:fa:a8:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Jul 23 20:42:25 2026 GMT
Not After : Jul 24 21:42:25 2026 GMT
Subject: CN=EDE1293AFFB1A28DCCA1D7CB40026C592B5F18F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:6f:f8:a1:31:4f:7a:54:1a:08:ae:b5:6c:
34:a1:73:e8:e5:c4:39:74:5a:8f:d2:51:1a:63:d8:
4a:ac:80:94:9e:c4:ad:81:bb:0f:03:bd:a8:be:f9:
a7:02:5e:b3:1b:6a:a3:fd:78:b2:da:b3:5b:84:c1:
47:c1:f3:df:08:4d:de:0d:e6:9a:39:aa:7b:78:5a:
57:99:c4:29:71:fe:f4:3c:13:16:2e:c7:f4:7a:da:
ec:ae:4e:87:93:b3:6a:eb:70:4a:fd:ef:04:39:ae:
d1:75:3d:fc:a6:fc:90:e6:21:ca:f5:84:76:b2:b8:
50:9a:bd:7a:f5:7f:5e:b2:47:60:24:9f:c1:81:9c:
5d:4c:44:93:1e:53:5e:db:f2:bb:f8:bb:61:1d:f5:
40:49:69:0e:84:ad:c6:04:af:17:b2:fa:c6:96:de:
fd:63:87:a7:bf:d4:48:94:e2:a6:35:a5:bc:77:88:
46:50:a6:da:ed:ec:90:0a:07:02:27:49:76:e0:92:
9d:13:29:76:39:6a:6b:d8:8f:28:ab:59:ed:9f:a7:
53:42:47:ee:81:9e:7d:47:86:8d:3a:3a:85:ab:4b:
6a:d9:0c:4a:d0:99:82:2f:56:35:0d:8f:97:03:d0:
5c:e2:60:4f:64:9b:2c:e7:66:66:23:a4:49:4b:3a:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:29:3A:FF:B1:A2:8D:CC:A1:D7:CB:40:02:6C:59:2B:5F:18:F3
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:b4:dd:8a:72:66:33:2a:86:70:d3:e4:cf:19:04:c6:f2:
de:d9:fe:d4:51:db:f9:e7:cf:11:7e:fb:6b:68:e8:6f:1f:fa:
cc:8e:59:8a:91:db:e6:8c:c1:69:2d:47:2a:34:de:26:de:d8:
18:21:63:ec:24:8b:24:93:6b:50:df:29:32:20:f8:dc:32:74:
0b:d4:88:14:9c:f9:d3:5d:01:e6:97:89:1a:10:6c:03:f9:e6:
e9:2b:ae:29:5f:01:af:13:0f:b3:6c:1b:bf:af:89:4f:41:56:
0c:c1:84:ff:0b:fa:1c:ce:63:a8:6f:0f:ce:b7:92:b6:c1:4e:
7f:32:24:c6:c7:6d:e3:5d:46:f8:f2:62:a9:65:a7:84:9b:64:
6f:89:33:c1:f6:a0:af:7c:f5:9b:da:2d:a9:a4:e0:80:41:09:
17:b8:b2:5e:a1:a1:bb:92:cf:a7:d8:d7:0b:67:65:02:67:be:
3a:36:20:82:48:61:80:33:27:10:ad:cb:05:bd:cc:c5:f4:a0:
91:9e:5b:cb:fb:50:a2:c1:a7:c1:80:21:91:3c:a9:c8:0b:46:
c8:31:3b:32:56:30:d6:81:a8:80:7e:3f:26:a2:b0:7b:e3:d2:
54:ff:9d:85:89:58:75:f5:f6:a6:2f:e3:42:5a:32:37:6e:39:
17:49:02:0e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUK7FOnOVUpmxtvQnbKiJOLvqowDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjA3MjMyMDQyMjVaFw0yNjA3MjQyMTQyMjVaMDMxMTAvBgNV
BAMTKEVERTEyOTNBRkZCMUEyOERDQ0ExRDdDQjQwMDI2QzU5MkI1RjE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGem/4oTFPelQaCK61bDShc+jl
xDl0Wo/SURpj2EqsgJSexK2Buw8Dvai++acCXrMbaqP9eLLas1uEwUfB898ITd4N
5po5qnt4WleZxClx/vQ8ExYux/R62uyuToeTs2rrcEr97wQ5rtF1Pfym/JDmIcr1
hHayuFCavXr1f16yR2Akn8GBnF1MRJMeU17b8rv4u2Ed9UBJaQ6ErcYErxey+saW
3v1jh6e/1EiU4qY1pbx3iEZQptrt7JAKBwInSXbgkp0TKXY5amvYjyirWe2fp1NC
R+6Bnn1Hho06OoWrS2rZDErQmYIvVjUNj5cD0FziYE9kmyznZmYjpElLOuNzAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU7eEpOv+xoo3ModfLQAJsWStfGPMwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZGbTd
inJmMyqGcNPkzxkExvLe2f7UUdv5588RfvtraOhvH/rMjlmKkdvmjMFpLUcqNN4m
3tgYIWPsJIskk2tQ3ykyIPjcMnQL1IgUnPnTXQHml4kaEGwD+ebpK64pXwGvEw+z
bBu/r4lPQVYMwYT/C/oczmOobw/Ot5K2wU5/MiTGx23jXUb48mKpZaeEm2RviTPB
9qCvfPWb2i2ppOCAQQkXuLJeoaG7ks+n2NcLZ2UCZ746NiCCSGGAMycQrcsFvczF
9KCRnlvL+1CiwafBgCGRPKnIC0bIMTsyVjDWgaiAfj8morB749JU/52FiVh19fam
L+NCWjI3bjkXSQIO
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:29 2026 by rpki-client