
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: XoIS4dIqw8cyTnSzIy+e19nYNPi0uFgRhA9U6A3pRVw=
Subject key identifier: C5:65:80:9A:51:72:6E:BB:17:8C:00:7C:60:6E:FE:F6:AD:D7:CD:97
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 42C642F7F9360F8CFC15EE4A26848E9737E500B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 02E9
Signing time: Fri 12 Jun 2026 22:47:33 +0000
Manifest this update: Fri 12 Jun 2026 22:42:33 +0000
Manifest next update: Sat 13 Jun 2026 23:45:33 +0000
Files and hashes: 1: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
2: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
3: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
4: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
5: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
6: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
7: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
8: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
9: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
10: 3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa (hash: L1/VFBsoy+R+FOcnUQO8BUFLYVQcBVy/Jhpm44L+CLA=)
11: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: l0L2li1PgZ52+z9mFPccrMmd/UzHI5DRaJ8bNgN3v2c=)
12: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=)
13: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
14: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
15: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
16: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
17: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
18: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
19: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
20: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
21: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
22: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
23: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: fPwJ5Sy/oz+WsKDVoSFpEWtFBdtjKpm8boIM97/qBQc=)
24: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
25: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
26: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:45:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c6:42:f7:f9:36:0f:8c:fc:15:ee:4a:26:84:8e:97:37:e5:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jun 12 22:42:33 2026 GMT
Not After : Jun 13 23:45:33 2026 GMT
Subject: CN=C565809A51726EBB178C007C606EFEF6ADD7CD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:f3:42:0e:5c:37:c4:3e:0c:aa:68:10:72:
e2:66:ea:ee:16:cc:fa:a0:96:80:b8:7c:2e:07:83:
99:e6:ca:9b:bf:5e:5a:da:00:0d:14:55:1b:8d:4d:
e4:0e:7e:fd:73:fd:ba:e0:1b:78:13:13:9b:8f:8e:
9c:19:46:bb:b8:e4:28:4c:5a:7c:81:1b:0b:e9:8c:
6a:f3:1b:e5:40:7a:a0:02:b6:52:b2:85:b1:ad:ec:
58:50:da:da:da:7c:8c:cf:8d:42:2e:37:3b:c6:b8:
1d:8f:16:21:c8:19:14:23:33:ba:2f:4d:53:83:46:
81:a7:5c:f8:1d:8a:0d:5c:4b:97:1b:f4:cc:8e:cd:
88:c7:e9:26:3a:fc:81:29:86:f1:af:ff:41:09:00:
49:34:4b:4d:56:61:a9:1e:30:1c:03:e3:aa:a9:a0:
53:36:fd:bb:cf:48:6a:55:48:22:6b:90:5e:ed:8a:
4a:e9:29:81:d5:d4:a1:9e:1f:bb:e9:41:d9:fe:51:
de:98:40:4a:4c:25:cd:6d:fa:fb:85:75:7a:88:d0:
bc:fd:42:5f:d2:ef:38:f5:62:e9:45:c6:77:62:7e:
65:a8:b3:08:fb:9f:71:e0:ce:c8:ca:4d:a2:d9:b3:
70:15:44:60:ff:0e:7e:ee:6c:78:63:99:89:2c:81:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:80:9A:51:72:6E:BB:17:8C:00:7C:60:6E:FE:F6:AD:D7:CD:97
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:f9:22:ce:aa:e3:5d:ab:1e:e3:75:e0:1a:86:ff:96:c5:
7c:c3:cd:3f:4e:30:d9:fe:9d:bf:81:da:1f:bd:69:06:46:c7:
23:9d:3f:23:2e:2d:88:18:1a:94:c5:1d:65:52:d7:c1:bf:6d:
be:62:5d:6c:5b:26:29:8b:e8:8f:a9:3b:b8:6d:42:48:72:ed:
52:6d:d7:09:4e:99:aa:f0:0d:86:b3:66:4b:a1:bd:ce:95:96:
e7:e6:cf:5f:0c:e2:fa:85:11:1b:1e:bc:5d:a5:54:4f:4b:1f:
48:8d:c7:1d:cd:91:a2:b7:bc:95:7f:c9:18:43:da:ba:63:ed:
b8:5c:11:b4:5a:d4:18:f5:e4:fd:cc:26:47:4c:8f:38:1a:13:
64:14:ab:a4:e2:e7:a0:18:e0:5d:56:0a:c8:ff:37:3f:c4:16:
6c:f4:a3:18:46:e1:c4:85:c5:2c:aa:4a:3a:fc:e1:f9:fa:3c:
da:1c:9b:2d:3f:b9:80:77:02:0b:98:75:92:ab:f3:9e:0a:7c:
64:39:cb:13:34:c0:b1:25:ed:ec:a4:9d:25:00:40:fd:1a:a8:
55:e3:3a:0a:64:9a:8b:e0:e5:eb:60:f3:f9:f7:56:3a:ae:02:
a8:a6:08:48:a7:b4:98:5a:45:be:07:05:52:96:c5:03:50:94:
3a:e6:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:49 2026 by rpki-client