
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: 2ZarahA/L9uK3MCIuDIRB1i+1RJ3cNvKDUXKOPnndhM=
Subject key identifier: CF:31:97:7E:C3:16:CE:DB:29:F4:F9:FD:7F:B0:37:36:71:37:F5:B6
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 1AD872D3B5CF8F44B77994039499B273D6661AC9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: EF
Signing time: Sat 13 Jun 2026 19:52:08 +0000
Manifest this update: Sat 13 Jun 2026 19:47:08 +0000
Manifest next update: Sun 14 Jun 2026 23:28:08 +0000
Files and hashes: 1: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
2: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
3: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
4: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
5: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
6: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
7: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
8: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
9: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
10: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: C7DgZnpZ5qAwKz7/6Ha6RU78aSGMuqKEPQAAXHHgC/k=)
11: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
12: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
13: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
14: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
15: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d8:72:d3:b5:cf:8f:44:b7:79:94:03:94:99:b2:73:d6:66:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Jun 13 19:47:08 2026 GMT
Not After : Jun 14 23:28:08 2026 GMT
Subject: CN=CF31977EC316CEDB29F4F9FD7FB037367137F5B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:44:f3:a9:12:01:c7:f6:5d:58:9d:d1:4a:
14:66:c0:b9:a0:2b:9d:f8:7c:1c:19:fb:e1:a6:bb:
44:a0:be:df:ce:10:02:7f:e9:fe:92:c0:68:a8:14:
d8:08:2c:72:33:10:27:31:14:fc:48:5a:4d:27:44:
ad:27:99:5b:f6:0e:f1:61:a9:cf:8b:43:29:45:9e:
b7:5a:f9:ce:bb:ef:b7:00:ee:1a:11:29:80:a9:98:
a9:29:a4:c1:1e:bb:65:ea:c5:f4:68:d6:d8:ea:de:
e1:b2:3c:16:35:73:7c:7b:a1:de:cd:5b:3d:d3:96:
c5:8f:71:2d:bc:66:41:0c:19:37:74:7d:3f:65:2a:
0b:ec:d5:99:93:c8:20:18:05:c0:1b:07:46:ff:5b:
e6:67:c1:a5:4a:2c:a3:cc:41:f4:8b:f0:22:82:83:
88:8c:ef:0e:90:74:bf:c7:0d:e5:9a:2c:96:19:b6:
71:a6:2a:84:1c:d6:7b:8a:dc:de:86:a4:95:63:84:
41:a1:84:e8:5f:20:a8:26:13:7f:f4:97:06:37:68:
f2:d0:73:fd:cc:6c:dc:71:f0:0b:83:0f:d2:39:bd:
3c:18:6b:5f:ec:c1:b2:99:6b:8d:39:db:f8:49:3d:
f4:5f:23:75:d6:0e:ff:a3:03:2f:d4:6f:0b:05:23:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:97:7E:C3:16:CE:DB:29:F4:F9:FD:7F:B0:37:36:71:37:F5:B6
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b0:0a:59:02:a5:61:c5:40:79:0a:3e:e9:f4:35:03:f7:c8:
f2:52:d6:54:a9:f6:54:d1:50:eb:bc:68:a7:ec:92:e6:07:bd:
0d:5d:9b:69:16:3a:41:5e:a9:08:35:77:9a:59:e1:d8:8c:31:
8c:2f:a3:e0:9c:be:c2:f4:ba:1c:8c:e5:bf:d0:38:d3:2c:aa:
2a:17:3b:fd:3f:16:e7:f0:bc:98:ef:01:72:8c:2b:1d:84:51:
21:e4:de:8e:7e:2b:27:6b:62:da:04:c3:a6:cc:fe:af:20:b0:
66:7f:67:b8:a6:fc:15:08:76:56:ab:cc:ee:c7:c2:07:43:df:
9b:b1:5a:f2:ee:c4:68:80:1d:ff:84:3f:64:12:9f:c8:60:d2:
90:d0:fc:2a:36:41:8a:85:73:ef:dc:b4:19:1e:e2:11:ca:9b:
d9:30:cf:6d:4d:78:c1:bc:56:7b:66:c7:a2:05:4d:72:b2:80:
9b:35:46:30:db:eb:0b:19:bd:b4:91:6a:22:96:b8:d3:60:42:
64:e3:33:10:c7:e2:b4:d9:3a:02:d0:09:57:bc:a2:21:2e:cb:
2d:9a:af:b0:7a:52:98:81:31:9a:ee:7e:b5:e2:88:83:2c:e2:
f0:5f:b2:9a:78:ab:3b:30:7a:f2:63:e3:17:0c:19:69:16:d4:
f9:98:7c:04
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUGthy07XPj0S3eZQDlJmyc9ZmGskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1
QUREOTREOTAeFw0yNjA2MTMxOTQ3MDhaFw0yNjA2MTQyMzI4MDhaMDMxMTAvBgNV
BAMTKENGMzE5NzdFQzMxNkNFREIyOUY0RjlGRDdGQjAzNzM2NzEzN0Y1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QETzqRIBx/ZdWJ3RShRmwLmg
K534fBwZ++Gmu0Sgvt/OEAJ/6f6SwGioFNgILHIzECcxFPxIWk0nRK0nmVv2DvFh
qc+LQylFnrda+c6777cA7hoRKYCpmKkppMEeu2XqxfRo1tjq3uGyPBY1c3x7od7N
Wz3TlsWPcS28ZkEMGTd0fT9lKgvs1ZmTyCAYBcAbB0b/W+ZnwaVKLKPMQfSL8CKC
g4iM7w6QdL/HDeWaLJYZtnGmKoQc1nuK3N6GpJVjhEGhhOhfIKgmE3/0lwY3aPLQ
c/3MbNxx8AuDD9I5vTwYa1/swbKZa4052/hJPfRfI3XWDv+jAy/UbwsFI7TnAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUzzGXfsMWztsp9Pn9f7A3NnE39bYwHwYDVR0j
BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5
NDEyNDFFRDVBREQ5NEQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8zLzlCODQ4MTYz
QzcwNDkxMjI3MDJFOEQzNzk0MTI0MUVENUFERDk0RDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+sApZ
AqVhxUB5Cj7p9DUD98jyUtZUqfZU0VDrvGin7JLmB70NXZtpFjpBXqkINXeaWeHY
jDGML6PgnL7C9LocjOW/0DjTLKoqFzv9Pxbn8LyY7wFyjCsdhFEh5N6Ofisna2La
BMOmzP6vILBmf2e4pvwVCHZWq8zux8IHQ9+bsVry7sRogB3/hD9kEp/IYNKQ0Pwq
NkGKhXPv3LQZHuIRypvZMM9tTXjBvFZ7ZseiBU1ysoCbNUYw2+sLGb20kWoilrjT
YEJk4zMQx+K02ToC0AlXvKIhLsstmq+welKYgTGa7n614oiDLOLwX7KaeKs7MHry
Y+MXDBlpFtT5mHwE
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:07 2026 by rpki-client