
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier: ps5Csf6kd/b0c2Npuq70FNikGu2HLbDxemmcBrdQHNA=
Subject key identifier: 1F:60:97:33:99:F5:7F:48:B8:F4:6B:AC:69:1F:66:38:5A:61:D2:C8
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 5D21F620B230F05AA86FABB23669FCC75E7516A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number: 01B2
Signing time: Tue 22 Sep 2026 09:10:47 +0000
Manifest this update: Tue 22 Sep 2026 09:05:47 +0000
Manifest next update: Wed 23 Sep 2026 12:58:47 +0000
Files and hashes: 1: 34352e3134392e36312e302f32342d3234203d3e20313337353137.roa (hash: bPblgjM8vXENfZasylb5ZzMp1DkYcmu6TBL1HJESdOc=)
2: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: llP8g/0WrRmSn1X308T/5f3EuZAU9g/XCLuH1bMAcIY=)
3: 34352e3134392e36332e302f32342d3234203d3e20323134343833.roa (hash: mQg7Rad/kKZcSLKWUMcvftwu7Gok/Q3zJLvicbmuesI=)
4: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
5: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
6: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
7: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
8: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
9: 3139342e3234362e33372e302f32342d3234203d3e20313437323831.roa (hash: Je8vOuvO8vmi0C+HW9/2FSLCLUlPSQcN2eHpx1G3DXw=)
10: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
11: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
12: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
13: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
14: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
15: 34352e3134392e36302e302f32342d3234203d3e2039333034.roa (hash: z9ItEX8PaLlf+9uchVJAZNUpHljuvgQ+N1QS8/y6ykI=)
16: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
17: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
18: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
19: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
20: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
21: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: 5gBnhPAl2z/+CVwxWMQM9PeMcozQLyOufVXboaP0oBs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:21:f6:20:b2:30:f0:5a:a8:6f:ab:b2:36:69:fc:c7:5e:75:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Sep 22 09:05:47 2026 GMT
Not After : Sep 23 12:58:47 2026 GMT
Subject: CN=1F60973399F57F48B8F46BAC691F66385A61D2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:0a:a8:27:88:00:2a:7a:29:d8:8c:c1:36:
f7:bf:cb:b4:61:b3:71:e7:1a:11:ab:d2:38:7f:a5:
f1:89:1e:5e:e9:13:55:3d:6d:15:1b:27:2e:b6:bf:
9b:34:7a:cc:c6:70:da:af:d9:3f:fd:ff:d5:32:d4:
43:b2:c1:b5:c0:82:9d:f2:05:4d:f4:f1:89:7c:4f:
9d:73:0c:27:75:a9:dd:54:dd:d0:d6:a8:3d:38:bb:
bf:69:91:f0:4b:39:67:21:f4:e6:e9:11:75:c8:c5:
a7:99:1d:88:de:eb:f3:48:64:8d:fd:48:c9:f3:06:
fb:ba:2f:9b:8d:c2:00:f6:29:32:e0:26:11:e2:2f:
98:9f:5e:9e:03:12:a7:98:2a:98:04:bb:1e:9d:77:
6e:4c:ad:c5:4e:fe:34:29:eb:06:7e:74:79:45:8a:
63:8b:dd:24:6f:22:1d:9d:10:bb:12:9a:23:f2:9a:
cd:f9:14:8d:d1:e2:49:c4:2f:59:db:36:b1:81:4e:
9e:f6:53:8c:b8:c3:2c:c5:a3:c5:21:7d:24:22:e8:
da:d5:34:c7:f8:60:e2:75:a7:15:e5:87:b8:1e:3e:
04:f0:c3:c9:39:36:30:0e:76:94:51:12:cd:0f:48:
7c:fb:a4:b5:c7:9e:22:12:46:38:53:f1:70:8f:f6:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:97:33:99:F5:7F:48:B8:F4:6B:AC:69:1F:66:38:5A:61:D2:C8
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8f:e1:ff:33:14:b6:b8:68:3a:20:32:43:d0:af:aa:23:89:
24:b8:7f:8b:7f:e8:43:c0:2d:b1:5f:8b:32:f4:22:8c:a4:5b:
8a:e9:0b:10:74:fc:8f:cf:47:3b:25:62:b5:53:73:0d:7c:73:
4f:76:2f:a6:4c:e4:f2:86:b5:48:ef:17:bb:6b:64:07:b8:a5:
65:68:6e:b7:31:40:fc:d5:2f:0d:a2:9d:78:07:dd:f6:d9:12:
1d:33:35:bd:49:bc:f4:1e:18:f0:8f:f6:dd:d4:38:0f:2c:58:
45:93:e7:92:44:29:00:8e:a3:82:cb:ea:de:c6:eb:cd:58:a1:
00:23:e7:c9:b6:af:ee:3b:d2:8d:0d:19:fb:dc:07:1f:3d:2a:
cc:e2:b1:e3:70:81:44:69:cd:6b:b2:7e:25:ec:4b:a3:1f:16:
6d:7c:f6:5a:67:8a:8e:aa:23:6c:6d:1f:ba:37:23:9e:b8:00:
a7:2d:a1:32:d1:5c:ed:f6:f9:49:51:3b:79:78:dd:6b:dc:72:
f1:dc:7e:20:d8:5d:e1:f8:52:9f:2e:27:0c:31:82:74:5c:36:
d0:9c:c7:5f:7c:93:34:00:62:67:37:70:b6:c7:d4:cd:86:3d:
f8:87:c7:fc:94:b6:22:ca:3e:85:e0:85:e6:66:d1:18:f5:53:
63:29:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:33 2026 by rpki-client