
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: 8kVps/zdK6Pz2ePB4kIxJPQUYO31Sisqd1nTSeEHWYg=
Subject key identifier: 4A:6A:4A:4D:CF:8B:E6:95:5A:73:DB:63:C2:F0:40:58:A3:60:97:C4
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 1CE57F7B400B1B9ECE91F8C53090697DE16F694E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: 5C
Signing time: Sun 01 Mar 2026 16:05:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:48:34 +0000
Files and hashes: 1: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
2: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: i/cXIc6/AU6/G/F/EBxCXsW5ji5jFus1CeR/G7MK7LA=)
3: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
4: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
5: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
6: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
7: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
8: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
9: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
10: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
11: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
12: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
13: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e5:7f:7b:40:0b:1b:9e:ce:91:f8:c5:30:90:69:7d:e1:6f:69:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 17:48:34 2026 GMT
Subject: CN=4A6A4A4DCF8BE6955A73DB63C2F04058A36097C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:d6:bd:12:73:6b:43:30:70:8e:82:84:6a:
8b:eb:78:87:f1:11:6c:c7:49:c9:a5:b4:5c:e7:00:
2d:c0:f3:5c:3b:6c:d0:6f:62:1a:f1:f0:2b:7d:11:
35:4d:91:aa:7a:6d:a5:bc:10:d2:b0:0f:02:41:9e:
ee:41:2c:d7:56:db:f7:cf:15:93:8c:4a:b1:ef:32:
f0:c7:b2:62:c1:91:9d:e7:c7:48:89:fb:fb:da:64:
27:57:cb:92:72:45:ab:bb:db:17:ae:fa:57:b4:cc:
c5:1a:f5:8f:4d:4a:fd:fa:39:ca:ee:ec:8d:6c:10:
51:06:2a:f8:b7:60:26:97:24:f4:e3:2b:49:70:89:
8e:fa:ec:ba:69:93:12:e3:43:45:f1:19:25:b8:98:
29:58:70:30:ee:73:73:66:74:16:98:1f:d6:14:b4:
87:7f:25:d4:40:a1:58:f3:0e:8c:a8:9a:1f:b4:9b:
49:4b:30:09:50:bd:e2:dc:6d:f8:9d:ea:76:8c:4f:
1c:b5:2c:e9:f2:9e:17:b7:65:c8:ea:65:ca:a5:6d:
b2:46:2a:2b:7c:2b:e2:ff:b8:98:c1:1c:51:cb:93:
5b:51:34:75:d5:44:1d:f7:e5:60:71:63:aa:ff:cd:
1c:ac:b7:68:c7:8f:b7:1c:36:e3:bc:73:2b:ac:4d:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:4A:4D:CF:8B:E6:95:5A:73:DB:63:C2:F0:40:58:A3:60:97:C4
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:67:39:52:e4:92:5f:f5:ae:46:67:4c:7a:07:38:19:47:
38:5f:3f:be:c4:fa:69:ae:72:6d:c7:b4:b1:90:d0:e9:a5:61:
73:8f:7f:df:ce:4e:5e:d2:19:9b:61:25:82:28:8f:06:7e:5c:
5c:6b:c1:2f:c5:0a:ff:9f:6e:5b:15:c2:8a:71:d0:f3:4a:3a:
dd:54:55:67:3e:d9:18:2d:7f:4e:a0:68:8b:64:e2:24:ad:8e:
f3:8e:be:32:f3:81:0d:e3:09:a1:61:a1:74:0c:f9:14:27:25:
af:ed:8a:8a:8a:b4:fd:b9:fb:5d:e7:18:3a:9a:be:93:b4:55:
ad:b4:72:3c:8d:47:ac:04:27:9b:bc:7c:56:13:63:9a:33:c5:
58:cf:df:6d:94:b9:81:aa:a6:dc:e1:77:13:2a:3f:46:a6:60:
da:38:20:fd:f1:e8:b4:eb:0a:1c:23:bc:a3:4b:21:c7:7f:30:
82:60:f1:19:f3:8a:69:f2:c5:6d:a6:8a:7c:a1:6e:90:c7:fc:
d8:20:f9:21:5b:de:01:48:be:50:46:6e:d9:ff:d0:f5:92:eb:
8a:dc:83:97:e3:6d:a8:f8:63:24:59:96:68:91:3c:d0:01:53:
a5:b4:14:1a:c9:0a:d7:cd:17:ba:d2:fd:d9:f7:37:31:75:07:
6f:6e:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:26 2026 by rpki-client