
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier: 5JN5JKSQOZspOfUNskqb+KcKDFDPlzLdeEacD4Z/EvA=
Subject key identifier: E1:21:4D:49:FB:B0:29:4F:B5:FB:FC:FC:99:8D:9D:0A:A9:D2:A8:82
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 6830CEAC735CA9F2BDE6C6EB1EB4452513D50FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number: 047F
Signing time: Sun 20 Sep 2026 19:10:20 +0000
Manifest this update: Sun 20 Sep 2026 19:05:20 +0000
Manifest next update: Mon 21 Sep 2026 19:58:20 +0000
Files and hashes: 1: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
2: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: AzNZuQSDNxDK1/rRCvh3c7V/RaCmrUuPfTYithuZNhM=)
3: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: TauJNXg8swMVdjA3FDyZs+uYTDIMc06RXssCFHJM7KI=)
4: 27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer (hash: a/xwxXjujAW2rrjBdQ/90EOWHq/B1PIVLk4p0F6nqjQ=)
5: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 8lyV9GJsDctzPuhhY06EcR5JClJ90gXieRZjQ1Q40JM=)
6: 326131343a366634343a636133303a3a2f34342d3438203d3e20323030333738.roa (hash: FMuCbBdzp6p9ySj22p+fUaROVQxj2tYK0a25mbwUBXo=)
7: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: ybd1YgQzYroaBOhD2myLaoYTH6Gp15/4TAWL9d6W8Rc=)
8: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: b+5d2pchfoJ7schvi1XWXcMUTuIuiTMPA8UYS8lBcfk=)
9: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
10: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer (hash: A8f0A5CfumK5FPxXOBZT21mKB9D2NyVULT9Ou0ZUjQo=)
11: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: f2ywSV7OATNrqHNKHHsG3dRDUlFFAgXzMnatedeorYM=)
12: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
13: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: YoTkCqxmNOzzLi9iVgmlNr37mRC/kz01BF5FtK0w4Wo=)
14: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: mS5RESR9XXqVKPaYaMF0sfDr7VCVwv8ZCbbv5XYwaoY=)
15: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
16: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: Wfb1Be/94YdOwhsZcBM1MQm53XT2cW1zoUNNRItseq0=)
17: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
18: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: 8HPgnPldTlqd1Z363+ppRIxfOmsIQPfiCzU3fi1lkIs=)
19: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
20: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: vpJnV8PBMgXyqMmJHd9OUKi6H1sNy2Z7wOh0POj/1Wg=)
21: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
22: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
23: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer (hash: Jj0ctCA5mMDihzlTjcHdvnNKZJHoGd/WXnAD/GugUmo=)
24: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: xxlE9eW7wxkVqKgVEi145qoldmcWDNNO0Ef6X+G68Ag=)
25: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
26: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
27: 326131343a366634343a31303a3a2f34342d3438203d3e20323037313138.roa (hash: yZmoIGgCQZQtzFZ9xz0oUp9fyP+/y76ZpGN0VwuV0LA=)
28: AS200242.asa (hash: cQ2s76XQqUcptT3AoEv65GxZLWF3qf4r6ZE7PpdCeUk=)
29: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: zW78HgeXKJcpXDGvUiGJTuZstEm7PMNmFUrh0W8stwk=)
30: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: NewyffY6+faINHSvUWluvQYlr3nUq0nRySw/BEIvNkI=)
31: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: nxfnA079w/6dwqMZYs8K0RSnuzNvrK8dfzm7kFfz+1E=)
32: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
33: 326131343a366634343a313030303a3a2f33392d3438203d3e20323134373537.roa (hash: jMf04y0FdiA1Ozv3uu5fV+KGwKj/Ak5B/wy+0BF0LRg=)
34: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: qqmIRQ1+zFE246omwd0NWtUUHG4XG/Hp+LsyXBBl0Ec=)
35: 326131343a366634353a3a2f33362d3336203d3e203539393230.roa (hash: uNdAxaUAv5goxCtsQFvEDYlacZW0wIoB+wiEglmDQwk=)
36: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:30:ce:ac:73:5c:a9:f2:bd:e6:c6:eb:1e:b4:45:25:13:d5:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Sep 20 19:05:20 2026 GMT
Not After : Sep 21 19:58:20 2026 GMT
Subject: CN=E1214D49FBB0294FB5FBFCFC998D9D0AA9D2A882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:fd:83:4f:77:94:b6:5d:5d:84:1d:85:09:
81:6c:aa:09:e5:95:ff:24:50:ba:e1:3d:21:18:a6:
19:c1:4c:82:70:5c:1e:cb:79:3b:9e:1d:e7:e5:ea:
2b:02:f8:5c:be:86:06:cf:0a:b5:ba:0a:8c:c9:19:
21:f4:11:fc:65:6d:65:3a:7a:4f:cf:fd:15:72:b0:
6e:ca:c2:06:b7:b8:05:f0:c6:b7:57:30:8f:ce:a9:
ec:2b:94:1a:82:9c:e3:72:a9:2d:76:2c:4d:45:77:
ff:44:b2:ea:83:3a:ea:ac:eb:14:a3:d1:64:05:4d:
5e:d4:0a:0f:6c:e7:74:81:af:33:ec:58:7e:55:f6:
ed:7e:b7:9a:92:78:45:c6:86:80:bc:c6:cb:09:34:
9b:22:da:7b:11:7d:c4:e7:dc:20:91:cb:1c:02:83:
ec:54:e9:ad:fd:b8:59:40:5d:24:c2:94:13:e5:72:
19:b1:ca:39:25:3c:bc:d5:41:bb:aa:bd:a2:6d:ae:
78:38:c7:80:ae:5f:4f:d8:47:79:f5:e5:11:6b:e2:
d4:c4:22:46:07:a6:4e:fb:d5:bb:ae:93:aa:d3:d5:
d0:73:1a:f5:3d:64:42:84:f5:a3:b4:d1:de:74:f1:
8d:41:2c:80:95:ab:16:e8:ee:c9:6f:bb:49:19:cd:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:4D:49:FB:B0:29:4F:B5:FB:FC:FC:99:8D:9D:0A:A9:D2:A8:82
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:84:de:d2:f6:ab:a9:77:f4:26:3d:e7:1d:d3:81:f4:5c:46:
45:ab:84:6a:01:1c:5b:01:0c:d6:00:4f:19:d8:d4:3d:00:4d:
68:7d:be:4e:2f:cd:2b:59:1a:65:9c:39:4f:42:f2:44:4d:f1:
d4:ce:cc:ec:47:87:d1:ea:57:d2:8f:28:fb:26:9c:37:13:f8:
a4:45:92:f6:1c:38:73:83:a7:63:bc:87:02:e2:39:9c:ca:4c:
b1:05:14:97:a9:e5:07:52:59:d4:c5:51:08:5d:85:76:62:e7:
88:ec:32:a0:db:38:a3:0b:db:ab:12:55:cf:8c:ac:34:15:c4:
47:0a:90:11:1b:94:01:23:3d:a5:4b:c9:ad:fd:73:3a:3f:5d:
e8:4e:11:58:f3:9c:37:f7:43:14:64:d8:f3:7c:fd:50:3b:4a:
2a:ad:10:db:55:d6:5c:96:88:6c:4a:9c:33:d8:a1:ec:4a:3f:
84:04:a0:c9:7d:db:8d:3d:2f:06:e1:90:e1:06:a7:07:cd:e7:
04:05:df:48:bc:71:97:79:c5:4c:25:1c:02:fe:a8:4f:e7:af:
76:02:67:1e:48:2f:82:84:c6:1c:86:11:b0:9e:f7:f4:d1:f3:
70:a4:67:ec:31:11:32:85:fd:9b:51:82:33:55:03:2b:74:01:
db:09:86:fd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaDDOrHNcqfK95sbrHrRFJRPVD8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNjA5MjAxOTA1MjBaFw0yNjA5MjExOTU4MjBaMDMxMTAvBgNV
BAMTKEUxMjE0RDQ5RkJCMDI5NEZCNUZCRkNGQzk5OEQ5RDBBQTlEMkE4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIP2DT3eUtl1dhB2FCYFsqgnl
lf8kULrhPSEYphnBTIJwXB7LeTueHefl6isC+Fy+hgbPCrW6CozJGSH0EfxlbWU6
ek/P/RVysG7Kwga3uAXwxrdXMI/OqewrlBqCnONyqS12LE1Fd/9EsuqDOuqs6xSj
0WQFTV7UCg9s53SBrzPsWH5V9u1+t5qSeEXGhoC8xssJNJsi2nsRfcTn3CCRyxwC
g+xU6a39uFlAXSTClBPlchmxyjklPLzVQbuqvaJtrng4x4CuX0/YR3n15RFr4tTE
IkYHpk771buuk6rT1dBzGvU9ZEKE9aO00d508Y1BLICVqxbo7slvu0kZzchDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4SFNSfuwKU+1+/z8mY2dCqnSqIIwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l
Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz
QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Te0varqXf0Jj3nHdOB
9FxGRauEagEcWwEM1gBPGdjUPQBNaH2+Ti/NK1kaZZw5T0LyRE3x1M7M7EeH0epX
0o8o+yacNxP4pEWS9hw4c4OnY7yHAuI5nMpMsQUUl6nlB1JZ1MVRCF2FdmLniOwy
oNs4owvbqxJVz4ysNBXERwqQERuUASM9pUvJrf1zOj9d6E4RWPOcN/dDFGTY83z9
UDtKKq0Q21XWXJaIbEqcM9ih7Eo/hASgyX3bjT0vBuGQ4QanB83nBAXfSLxxl3nF
TCUcAv6oT+evdgJnHkgvgoTGHIYRsJ739NHzcKRn7DERMoX9m1GCM1UDK3QB2wmG
/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:42:21 2026 by rpki-client