
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: Rtp4KiShzgqHdwcztomUM/1LM3tIEOrCNOFhSPwuWAs=
Subject key identifier: 76:46:00:20:80:19:2E:D0:56:91:88:7E:28:82:FE:23:F7:59:FF:A7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2356441327A53C8D5AEE5820E1D865B49535626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 065F
Signing time: Sat 28 Mar 2026 03:45:38 +0000
Manifest this update: Sat 28 Mar 2026 03:40:38 +0000
Manifest next update: Sun 29 Mar 2026 05:53:38 +0000
Files and hashes: 1: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
2: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
3: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
4: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
5: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
6: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
7: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
8: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
9: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=)
10: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
11: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
12: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
13: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
14: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
15: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
16: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
17: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
18: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=)
19: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
20: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
21: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
22: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
23: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: eQACMHZVnr8Q4paKtFTKJEuiYbGlkpEyF/5xAE7vCG0=)
24: 36322e3132322e3138362e302f32342d3234203d3e203239383032.roa (hash: SD0OyEqKiwHB09Gm8Gi0D14YZmXhWcWzdEUhhoCRMcE=)
25: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
26: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
27: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
28: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
29: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
30: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=)
31: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
32: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=)
33: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
34: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
35: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
36: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: d7fBecaPyrVjM4P3S3kg+4o4EIrWILvQcE2M5oWoSkI=)
37: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
38: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
39: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
40: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
41: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=)
42: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
43: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
44: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
45: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:56:44:13:27:a5:3c:8d:5a:ee:58:20:e1:d8:65:b4:95:35:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Mar 28 03:40:38 2026 GMT
Not After : Mar 29 05:53:38 2026 GMT
Subject: CN=7646002080192ED05691887E2882FE23F759FFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:3e:70:e6:3a:c3:43:18:e9:2f:9c:ef:8b:
74:ee:41:70:fc:6b:65:12:14:63:0b:e3:76:4d:27:
3d:67:5d:8f:e8:a1:53:1a:37:79:14:51:b0:a0:ee:
3a:b6:ab:b2:82:0a:13:6e:69:00:a5:34:19:a1:07:
2b:77:4b:54:ac:c4:3a:52:96:4b:fe:68:37:96:6d:
e8:af:c6:40:86:57:ad:41:c9:2d:da:3b:7b:d8:a7:
ef:3c:fa:d9:51:1f:fd:66:48:0f:cb:75:41:d4:26:
af:a6:b2:85:54:9b:c9:ce:1e:20:9c:25:f7:83:51:
6f:76:54:f4:44:44:68:d4:66:3c:59:bb:71:95:1f:
d6:25:b6:f8:24:91:2b:b5:bd:c7:d1:9a:2f:5d:05:
d4:f2:3a:3f:87:e2:ff:4b:37:b9:fb:71:e0:10:60:
69:26:ad:a4:ae:b8:69:7c:ed:26:ba:d5:9e:7f:d1:
db:e7:74:e5:a0:d3:af:e7:a5:c7:ed:a8:f2:07:29:
2d:7e:3d:6e:ad:3a:3a:7e:82:2b:04:1c:cf:c2:41:
54:e0:3f:10:da:ff:65:e4:73:7e:84:97:87:f3:80:
ff:a3:89:1e:c6:97:8a:37:9b:c4:9d:02:2e:25:bd:
23:3d:ff:23:9e:ff:0e:c3:24:fa:35:bc:34:d1:11:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:00:20:80:19:2E:D0:56:91:88:7E:28:82:FE:23:F7:59:FF:A7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:19:4c:44:ce:cd:43:8c:d6:3b:22:73:51:ac:6f:5c:79:67:
35:a6:74:ad:0e:44:e4:a4:92:d0:13:ae:60:a1:0a:1e:6c:47:
06:e2:3c:24:a4:8d:b6:09:09:6f:a7:6a:44:81:21:75:64:94:
f4:43:e9:f2:73:64:3a:80:15:9c:ca:a3:9b:29:ba:ad:28:65:
43:13:77:27:52:25:f8:05:55:15:83:17:8d:b1:a1:54:15:9f:
20:c4:7e:1d:00:6e:bc:c9:bf:00:b8:df:fb:fd:05:ec:f6:23:
c5:34:89:59:ef:0d:e1:4f:64:6a:be:a5:b0:b3:4c:fa:5c:b6:
ac:04:47:08:86:5c:55:b5:27:a1:02:47:a9:89:b2:3a:0e:c8:
b4:a2:43:c0:9c:69:c8:8f:68:2b:65:de:d2:58:69:a1:de:6e:
ad:b8:17:53:bc:81:2b:66:dc:4a:5e:ae:ba:78:02:0b:29:e9:
2e:9e:93:d3:9a:2c:67:5a:77:8b:29:45:78:b3:c7:71:62:54:
eb:82:a1:06:33:f1:14:39:ae:4b:a1:9a:fb:34:ae:d4:6e:45:
76:5d:b2:d0:1a:12:61:75:22:55:3f:1f:d6:25:8f:32:3a:4f:
5b:3a:01:f8:2d:8a:c6:6c:9d:9f:ca:82:a3:35:56:fd:f0:3c:
b7:99:c5:3b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUI1ZEEyelPI1a7lgg4dhltJU1Ym0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjAzMjgwMzQwMzhaFw0yNjAzMjkwNTUzMzhaMDMxMTAvBgNV
BAMTKDc2NDYwMDIwODAxOTJFRDA1NjkxODg3RTI4ODJGRTIzRjc1OUZGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hz5w5jrDQxjpL5zvi3TuQXD8
a2USFGML43ZNJz1nXY/ooVMaN3kUUbCg7jq2q7KCChNuaQClNBmhByt3S1SsxDpS
lkv+aDeWbeivxkCGV61ByS3aO3vYp+88+tlRH/1mSA/LdUHUJq+msoVUm8nOHiCc
JfeDUW92VPRERGjUZjxZu3GVH9YltvgkkSu1vcfRmi9dBdTyOj+H4v9LN7n7ceAQ
YGkmraSuuGl87Sa61Z5/0dvndOWg06/npcftqPIHKS1+PW6tOjp+gisEHM/CQVTg
PxDa/2Xkc36El4fzgP+jiR7Gl4o3m8SdAi4lvSM9/yOe/w7DJPo1vDTREfvZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdkYAIIAZLtBWkYh+KIL+I/dZ/6cwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02
ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx
ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxlMRM7NQ4zWOyJzUaxv
XHlnNaZ0rQ5E5KSS0BOuYKEKHmxHBuI8JKSNtgkJb6dqRIEhdWSU9EPp8nNkOoAV
nMqjmym6rShlQxN3J1Il+AVVFYMXjbGhVBWfIMR+HQBuvMm/ALjf+/0F7PYjxTSJ
We8N4U9kar6lsLNM+ly2rARHCIZcVbUnoQJHqYmyOg7ItKJDwJxpyI9oK2Xe0lhp
od5urbgXU7yBK2bcSl6uungCCynpLp6T05osZ1p3iylFeLPHcWJU64KhBjPxFDmu
S6Ga+zSu1G5Fdl2y0BoSYXUiVT8f1iWPMjpPWzoB+C2Kxmydn8qCozVW/fA8t5nF
Ow==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:08 2026 by rpki-client