
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier: lynY9K8/XVejNYupzW5Q4L1pesP1Hddo6LnElOM1aBs=
Subject key identifier: F7:59:1D:73:4E:52:1E:32:C3:0B:EE:83:A1:02:12:84:C9:D2:10:14
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 4F91AAE93B55DD13395FE7888E3E176179AD8FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number: 032A
Signing time: Tue 28 Jul 2026 13:38:42 +0000
Manifest this update: Tue 28 Jul 2026 13:33:42 +0000
Manifest next update: Wed 29 Jul 2026 16:58:42 +0000
Files and hashes: 1: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: ORBhPdQs7bhbgbHqRNbRX9b7nVMMEM9/idQA84qjjeU=)
2: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
3: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 4a0B2Yso8ABKKajfFflG9a3YE8wvTxnpfyqButDgOZQ=)
4: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
5: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
6: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
7: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: oMT5W+1A+v1pwvSVM/yS6Grj9zILUfxp/QJKJB7R/M8=)
8: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: +GFq+rHPW2NmU2P7WwLI7nlzu1G6+ACKfZdceph6rto=)
9: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
10: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=)
11: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=)
12: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
13: 352e3232362e3138392e302f32342d3234203d3e20323134343332.roa (hash: K8tasVMZPC8XCnfASfPGHgydq7gyNfePU1OJ6FJ9+yw=)
14: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=)
15: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
16: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
17: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=)
18: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=)
19: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
20: 3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa (hash: kYjiruSevjnCCTw8m8yV3pSGFVyrKV1r+hKtIWWhj6Q=)
21: 352e3232362e3138362e302f32342d3234203d3e20323031313336.roa (hash: 9fdIPJo0eMjnKb22xK7IcX10k9v1+loDfWBv90zohJM=)
22: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=)
23: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
24: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
25: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:91:aa:e9:3b:55:dd:13:39:5f:e7:88:8e:3e:17:61:79:ad:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jul 28 13:33:42 2026 GMT
Not After : Jul 29 16:58:42 2026 GMT
Subject: CN=F7591D734E521E32C30BEE83A1021284C9D21014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:06:1e:9d:11:5b:25:5f:1c:a8:fb:72:2a:
0b:c1:b2:d3:40:db:2a:0a:f3:97:57:ad:e7:c3:e7:
a8:7f:b4:50:62:46:12:49:35:52:6a:d6:b4:ad:76:
13:0b:e7:d2:02:4e:fb:78:ad:d1:b1:71:de:ae:d1:
b7:11:15:a0:4d:3a:e0:a0:dd:c6:7c:03:b2:59:7c:
e1:fa:fd:a0:f8:c5:3b:ed:4d:81:15:fd:ff:89:4a:
18:9e:c8:62:c6:50:a5:93:a6:0c:ad:05:b5:02:b0:
3e:fb:c2:62:1a:84:fd:c0:9a:20:4e:71:d9:c1:a4:
35:09:f8:2f:99:48:09:0f:a4:3e:f5:5b:2c:e4:dd:
04:d5:f7:a5:74:3e:d6:0b:0e:fa:9a:c2:22:28:55:
3e:17:ed:72:c8:02:2c:bd:64:a2:26:18:c7:b5:45:
3b:b7:f3:4d:98:e4:df:5f:ba:89:14:24:bd:24:c3:
9c:81:8a:33:e4:67:cb:14:12:c2:63:d3:b4:37:f9:
12:b7:1e:d1:2d:87:e3:a9:99:6b:68:cf:c7:41:3a:
3d:e8:4d:0b:06:3b:af:6a:a8:57:6d:93:0b:29:56:
41:4d:17:24:99:21:53:d8:a9:4a:3e:54:ea:a2:ec:
40:2e:8a:69:56:55:ff:9f:89:42:da:2d:dc:73:ef:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:59:1D:73:4E:52:1E:32:C3:0B:EE:83:A1:02:12:84:C9:D2:10:14
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fb:1e:16:79:e9:7e:5b:5b:74:4d:2a:47:35:b5:f4:4a:2a:
b4:43:7c:cb:19:0a:ad:cc:49:a0:ac:ab:bc:5d:1b:2a:42:65:
c6:95:4e:bd:3d:74:0c:d1:10:21:ed:87:9d:d2:c5:af:d6:07:
02:d5:bc:b8:bf:e0:00:88:0e:a3:04:ba:6d:b3:e5:d2:d9:7d:
82:11:be:ec:c7:47:b1:b5:57:40:7a:49:57:0e:e8:45:35:32:
2d:99:96:a6:c6:b3:0a:d5:d9:bd:37:7c:a2:28:1d:7b:3d:c1:
61:61:aa:82:48:5b:6b:ce:2a:d1:14:f0:6e:45:2a:34:c2:8d:
80:f6:f3:38:0c:38:15:44:6c:13:fc:12:0b:91:68:9b:81:97:
b7:41:4b:f5:b5:5c:cb:51:ce:6c:bc:e2:62:34:35:37:65:58:
d1:d5:98:a3:7c:96:ba:aa:0d:ba:db:6c:fc:91:4b:42:4f:44:
e0:e3:17:5a:09:b0:01:46:85:34:02:bf:b8:d2:35:5c:d1:de:
83:17:46:3b:e7:e1:bc:33:cd:e5:ca:9b:41:48:87:e9:cf:24:
15:09:e5:a9:9f:d5:21:1e:7e:d8:2b:ae:93:94:7b:8c:2e:41:
35:61:4b:bb:ed:5f:da:a5:59:b6:31:3a:65:3e:b0:5a:a9:30:
58:40:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:04 2026 by rpki-client