
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: +8/h/cpdoggESlT/KhO29yDWhNxhnP+7VHW9438LVF0=
Subject key identifier: 41:2A:04:68:83:AF:FF:23:BB:E1:B3:D8:1F:15:F4:EA:7A:9B:85:75
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 06C53E33AF6142DD17AF5E1443DA973284BF7150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 0294
Signing time: Thu 16 Apr 2026 14:49:42 +0000
Manifest this update: Thu 16 Apr 2026 14:44:42 +0000
Manifest next update: Fri 17 Apr 2026 17:11:42 +0000
Files and hashes: 1: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
2: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
3: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
4: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
5: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
6: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
7: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
8: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
9: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
10: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
11: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
12: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
13: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
14: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
15: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
16: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
17: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
18: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
19: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
20: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
21: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
22: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
23: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
24: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
25: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
26: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
27: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
28: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
29: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: qmiO3qd9B9vYXlTuDEHBtGzeEynBhsoduBXSCsZyW2c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c5:3e:33:af:61:42:dd:17:af:5e:14:43:da:97:32:84:bf:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Apr 16 14:44:42 2026 GMT
Not After : Apr 17 17:11:42 2026 GMT
Subject: CN=412A046883AFFF23BBE1B3D81F15F4EA7A9B8575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:85:5c:6e:21:0e:49:e0:8e:7b:b4:72:cd:
18:a9:51:4c:08:86:81:8d:82:d7:6e:2e:3d:83:b5:
10:98:cf:b2:65:bd:d4:37:fa:bc:36:ea:23:98:c5:
82:4d:33:46:7b:1e:28:84:32:2a:ce:c2:77:9a:ca:
86:09:91:de:f2:ea:94:ff:9f:8c:8d:c1:3d:72:5d:
a2:a4:fd:58:e7:44:ce:18:dc:2a:85:85:77:d7:44:
e7:cf:20:1c:ea:64:a4:64:41:95:06:f3:2f:9f:6b:
8c:23:eb:c9:06:23:9d:01:ec:6a:77:fc:75:86:10:
bf:9b:03:18:61:61:5f:7e:9d:ab:ec:e6:66:08:03:
72:79:1b:1f:9d:e8:81:3a:7f:f5:32:71:b6:48:83:
c3:09:90:f3:05:9c:cb:ff:28:9c:1f:20:6d:69:1f:
88:cc:e3:ed:68:d2:58:a5:e1:96:53:2b:be:84:d0:
71:3c:c1:e4:69:ae:c5:4e:a5:54:76:62:81:3d:9c:
b7:60:0e:d6:35:e5:03:98:71:5f:fb:31:35:39:90:
b7:45:70:90:67:78:34:fe:4b:34:7d:e0:d5:6d:6e:
10:f1:2e:e0:d6:f9:95:27:45:86:65:9b:9c:6c:15:
ae:52:78:92:fc:f4:10:14:6a:ac:6e:75:ad:eb:25:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:04:68:83:AF:FF:23:BB:E1:B3:D8:1F:15:F4:EA:7A:9B:85:75
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:a7:30:75:44:6f:89:94:fa:3d:13:d2:ad:9f:5b:2a:32:
47:e1:8d:c3:1b:51:81:65:36:ca:21:63:ce:49:a2:a5:fe:2d:
7c:a2:7d:a4:53:6e:d9:29:33:1f:7d:e7:f8:63:dd:d6:27:61:
71:ef:5f:4a:e2:60:dc:10:4b:40:bd:0f:3c:ac:5c:8b:83:e9:
ac:5b:3a:80:83:d4:19:b2:60:74:8a:a4:50:4b:38:d6:de:92:
a0:c6:1c:9f:15:e8:56:c7:df:3f:3a:05:66:46:7c:de:7c:1e:
53:91:a3:62:66:7f:b1:e1:36:fc:a5:79:2d:d9:04:0a:fd:e1:
f2:e1:77:1a:da:96:3b:21:8d:71:9d:da:db:f1:54:13:84:7b:
40:d9:64:df:ec:23:90:c2:d5:41:60:8b:b5:ce:71:94:23:bd:
d7:9e:59:4d:bb:06:f8:64:0d:c9:3e:6d:39:65:55:f5:8e:69:
ff:78:7e:5f:23:fb:2e:ac:ef:ce:96:ee:46:b1:0b:3c:b2:fa:
35:cd:cc:85:65:ee:0d:0d:31:39:95:3f:b0:ad:b8:32:9a:bb:
3e:47:9f:d4:72:e2:5a:02:c5:33:2c:75:04:46:a4:ac:a0:00:
54:f4:af:18:18:86:07:1b:3d:ae:4a:0b:34:9d:80:f7:6c:4a:
56:5d:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:54 2026 by rpki-client