
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File: 9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier: tjP1+QQy5Bl3HL1xJ97mK4TZDLxTn1yJRzqL+SXf80I=
Subject key identifier: ED:F7:F4:47:D9:F1:ED:23:D5:A6:25:93:D7:2F:B6:81:8C:7A:9B:0E
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer: /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial: 1B70EDB6FA0AB9F43EB3622183480BC4250953BC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number: 9E
Signing time: Fri 17 Apr 2026 10:39:55 +0000
Manifest this update: Fri 17 Apr 2026 10:34:55 +0000
Manifest next update: Sat 18 Apr 2026 10:40:55 +0000
Files and hashes: 1: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
2: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
3: 326131343a373538303a633030303a3a2f34302d3430203d3e20323130343634.roa (hash: BZx4A+1lDPAS1ebt61e3ltRE332soDf255t2tHvVUu8=)
4: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
5: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
6: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
7: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
8: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
9: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
10: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: XWHOrS1p1HGBvklFldFacp7+zsfXZfN/RNzlOuevmYw=)
11: 326131343a373538303a633330303a3a2f34302d313238203d3e20323130343634.roa (hash: IxwgCbk25nW4zIf3Ev9+/v30oO87JlPDOY2TfrlWzrc=)
12: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
13: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
14: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
15: 326131343a373538303a636630303a3a2f34302d3438203d3e20323130343634.roa (hash: SE8E6a3ZD0LK5ZlZINe9eNIZjVQ9JR0AtsvzDG1ugzg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:70:ed:b6:fa:0a:b9:f4:3e:b3:62:21:83:48:0b:c4:25:09:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Validity
Not Before: Apr 17 10:34:55 2026 GMT
Not After : Apr 18 10:40:55 2026 GMT
Subject: CN=EDF7F447D9F1ED23D5A62593D72FB6818C7A9B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:3b:a9:de:2e:09:d4:52:61:de:0d:26:3b:
d3:32:d1:93:b7:41:e9:52:d4:c6:80:c0:cd:34:0c:
2f:5a:d0:80:6a:ce:8c:91:13:5e:c8:90:80:7c:50:
3f:5e:d4:e1:86:48:63:72:8e:0a:b8:ba:86:56:ea:
38:7e:a3:53:11:a4:24:dc:e4:86:00:93:b4:87:5b:
42:74:fb:e6:f7:d5:b8:2d:df:6b:58:46:93:8f:f6:
54:0b:65:fb:01:3f:39:2f:f3:06:41:16:6b:66:f8:
ca:c4:4b:78:55:41:8b:53:e1:6e:b1:67:e6:12:a7:
e9:3e:e0:a8:58:a6:ef:86:72:d3:dc:35:b6:9c:8d:
5f:51:f7:75:c1:91:a8:9a:87:3f:39:5b:83:5a:46:
84:b6:af:a9:55:95:22:f7:52:68:65:b5:c0:b0:19:
30:8f:2a:56:17:3a:f0:3f:66:07:a4:56:7e:aa:d5:
b2:8b:7e:99:20:46:87:ac:41:6f:c3:7e:76:2e:46:
c9:9e:29:eb:b5:e2:4b:9f:84:40:f4:2f:05:fa:65:
fc:11:eb:c5:4b:4d:42:56:0a:e9:b0:89:ef:34:9f:
e2:5b:4b:40:74:f9:68:da:e9:ef:35:63:72:94:eb:
60:6a:f1:97:7a:f9:8d:26:e0:d4:d6:9d:0b:76:a9:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:F4:47:D9:F1:ED:23:D5:A6:25:93:D7:2F:B6:81:8C:7A:9B:0E
X509v3 Authority Key Identifier:
keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:f5:ba:1a:34:f2:c9:d5:12:05:c4:81:12:c9:ff:1f:a3:
ef:ea:9a:9e:97:52:37:2c:ec:a7:4b:ed:d6:2b:09:8e:31:31:
42:51:48:00:0f:26:c6:4b:08:17:9a:ad:37:bb:ca:90:fa:36:
f0:da:52:89:e2:1e:a4:5a:2d:d8:45:ef:4e:ae:19:30:94:59:
cc:39:c7:52:3a:67:10:55:c7:be:e0:f6:7b:fe:03:9e:d1:56:
c8:7a:39:06:ea:90:63:55:19:1d:8a:0d:c1:28:44:c4:92:e2:
f4:1e:82:a7:aa:28:5c:a8:34:62:73:3e:22:75:9c:45:cd:03:
7d:3c:67:f6:d2:00:e0:99:a3:a8:91:5f:22:34:2c:2d:05:c8:
46:51:2b:ea:07:ae:50:0e:b4:89:40:d8:93:94:33:7e:d6:6d:
e2:1e:f0:60:91:c6:44:3e:13:e5:bd:f2:ab:91:8c:b1:9d:e4:
24:7a:8a:e9:be:23:3c:5e:65:80:20:c5:36:7e:cb:a9:63:9a:
33:17:15:33:d8:f4:f6:79:9a:fd:1a:ec:be:d8:29:47:fd:04:
a5:c2:6b:af:55:16:a0:9f:5c:02:1f:b5:16:12:78:06:83:3e:
73:2e:b6:07:81:76:78:48:71:7d:19:69:88:ce:52:3c:e5:2c:
5e:de:36:d7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUG3DttvoKufQ+s2Ihg0gLxCUJU7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1
QUREOTREOTAeFw0yNjA0MTcxMDM0NTVaFw0yNjA0MTgxMDQwNTVaMDMxMTAvBgNV
BAMTKEVERjdGNDQ3RDlGMUVEMjNENUE2MjU5M0Q3MkZCNjgxOEM3QTlCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWZDup3i4J1FJh3g0mO9My0ZO3
QelS1MaAwM00DC9a0IBqzoyRE17IkIB8UD9e1OGGSGNyjgq4uoZW6jh+o1MRpCTc
5IYAk7SHW0J0++b31bgt32tYRpOP9lQLZfsBPzkv8wZBFmtm+MrES3hVQYtT4W6x
Z+YSp+k+4KhYpu+GctPcNbacjV9R93XBkaiahz85W4NaRoS2r6lVlSL3UmhltcCw
GTCPKlYXOvA/ZgekVn6q1bKLfpkgRoesQW/DfnYuRsmeKeu14kufhED0LwX6ZfwR
68VLTUJWCumwie80n+JbS0B0+Wja6e81Y3KU62Bq8Zd6+Y0m4NTWnQt2qZFHAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU7ff0R9nx7SPVpiWT1y+2gYx6mw4wHwYDVR0j
BBgwFoAUm4SBY8cEkSJwLo03lBJB7VrdlNkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzMvOUI4NDgxNjNDNzA0OTEyMjcwMkU4RDM3OTQxMjQxRUQ1QUREOTREOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85Qjg0ODE2M0M3MDQ5MTIyNzAyRThEMzc5
NDEyNDFFRDVBREQ5NEQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzZjNDNkM2E2LTdkMTMtNDg5NS05NTlkLTQxOWI5YTZlYjM0Yi8zLzlCODQ4MTYz
QzcwNDkxMjI3MDJFOEQzNzk0MTI0MUVENUFERDk0RDkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBljPW6
GjTyydUSBcSBEsn/H6Pv6pqel1I3LOynS+3WKwmOMTFCUUgADybGSwgXmq03u8qQ
+jbw2lKJ4h6kWi3YRe9OrhkwlFnMOcdSOmcQVce+4PZ7/gOe0VbIejkG6pBjVRkd
ig3BKETEkuL0HoKnqihcqDRicz4idZxFzQN9PGf20gDgmaOokV8iNCwtBchGUSvq
B65QDrSJQNiTlDN+1m3iHvBgkcZEPhPlvfKrkYyxneQkeorpviM8XmWAIMU2fsup
Y5ozFxUz2PT2eZr9Guy+2ClH/QSlwmuvVRagn1wCH7UWEngGgz5zLrYHgXZ4SHF9
GWmIzlI85Sxe3jbX
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:11 2026 by rpki-client