
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier: SCZ2lxXr7dRDBh30CbRch+Mek/cTR+w3hPkT9irzSXI=
Subject key identifier: E4:EA:11:72:A4:CF:3E:95:11:F2:30:4B:E4:D1:37:97:51:5C:F8:D9
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 7D2B8C71FAEC6B274933B4D9616A52581293249C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number: 039E
Signing time: Fri 17 Apr 2026 08:02:45 +0000
Manifest this update: Fri 17 Apr 2026 07:57:45 +0000
Manifest next update: Sat 18 Apr 2026 11:13:45 +0000
Files and hashes: 1: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
2: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
3: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
4: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
5: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
6: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
7: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
8: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
9: 326131343a366634343a636133303a3a2f34342d3438203d3e20323030333738.roa (hash: FMuCbBdzp6p9ySj22p+fUaROVQxj2tYK0a25mbwUBXo=)
10: D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer (hash: Q2vhZWloe/hFTaW+/yQJuXwBq/8isuRI5XNeSyWobfQ=)
11: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
12: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
13: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
14: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
15: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
16: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
17: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
18: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
19: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
20: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
21: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
22: AS200242.asa (hash: MTBOWqmzNf0Vnku8o0Fu5uKujpvtI67QUi2gh/CZB+M=)
23: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
24: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
25: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
26: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
27: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
28: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
29: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
30: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
31: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
32: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: VD00yVS8ZFwkVwGC5+1v6b1+JNzJej2tjG1TQbca45k=)
33: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2b:8c:71:fa:ec:6b:27:49:33:b4:d9:61:6a:52:58:12:93:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Apr 17 07:57:45 2026 GMT
Not After : Apr 18 11:13:45 2026 GMT
Subject: CN=E4EA1172A4CF3E9511F2304BE4D13797515CF8D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:25:b4:f3:71:38:4f:68:24:44:61:11:12:
70:f9:1b:9c:5f:0d:98:a1:ca:6d:94:07:94:80:10:
f4:75:bc:f5:fe:00:f2:f3:4f:eb:ce:97:fb:00:61:
74:a3:ae:f7:c8:b7:5d:3e:89:04:aa:08:6f:16:53:
bb:e3:08:67:3b:bc:e3:48:4c:44:ec:0a:2c:4d:3e:
87:2d:64:ab:52:46:12:36:6f:da:0e:71:e0:6c:e5:
2f:21:42:46:55:f6:0a:b9:58:9a:1b:46:9e:8f:5e:
a5:d4:cb:aa:4f:99:f1:e8:c4:21:06:69:b0:4b:89:
35:70:8e:64:3a:a9:d5:ec:4a:a3:4f:37:61:59:25:
88:65:bf:f9:3b:16:66:f5:0a:a3:17:c1:18:f1:9c:
42:74:81:93:e4:a7:43:49:0d:b7:83:f0:e6:72:8b:
6d:c9:ea:f3:d4:59:c3:52:58:ea:7c:88:cf:b8:20:
81:b0:2a:74:16:a4:99:b3:9f:09:41:ca:56:a7:f2:
a4:d5:c8:c6:4a:c7:62:ca:b3:26:74:7e:a4:ab:04:
8a:8c:0b:13:bf:73:63:aa:bd:9f:c6:14:8e:56:9f:
3a:73:ed:96:89:80:c9:9a:68:f4:b8:0e:34:13:a1:
68:cd:60:bd:b7:8e:bc:8b:cd:78:26:c6:7b:02:c3:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:11:72:A4:CF:3E:95:11:F2:30:4B:E4:D1:37:97:51:5C:F8:D9
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:4a:44:f9:44:a1:2c:07:78:b0:41:ee:c2:c2:27:e5:58:
45:6e:7c:41:19:5b:54:04:0b:20:a0:1e:7e:a8:6b:09:c1:f4:
e0:e6:98:86:ac:26:8e:0f:ca:c3:76:ca:7a:78:90:72:0b:c0:
26:cc:6c:44:6e:cb:be:48:8b:5e:bf:11:da:14:14:2e:f7:fb:
93:8f:dd:f2:31:60:c8:77:4d:8a:59:b4:5e:33:f3:71:30:34:
54:26:75:70:2a:6d:25:4e:67:05:18:6f:b0:7d:62:ad:48:c1:
a0:19:bb:d5:7c:79:97:be:46:42:98:56:c2:ae:47:8f:28:41:
e7:b8:45:7f:17:5b:a1:13:29:95:a7:94:5c:e8:55:40:c0:b3:
b0:02:5b:4f:63:89:f3:74:e8:62:f3:c8:80:d8:a9:bc:a1:67:
14:8c:0f:da:8b:97:6a:31:0d:c9:d6:f3:f7:c7:9e:4f:19:26:
9f:51:b8:00:07:6a:76:67:83:e2:f2:c7:c1:f0:61:7e:df:1e:
e7:69:bc:5f:90:a4:ee:fc:68:02:a9:ff:38:13:06:1a:51:1c:
32:36:9a:d1:d6:c3:ce:5d:39:52:6c:13:cc:a1:31:da:00:5b:
1d:be:7d:d7:81:f0:25:5a:4f:ef:12:b0:ed:c1:36:38:f0:7f:
fe:5f:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:42 2026 by rpki-client