
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: WmEBZ9GP6Oiq4y7dOuV/wInbnNXzc+rB4MSASk/mmuA=
Subject key identifier: 0D:DB:CD:65:0E:BE:24:7A:D9:68:D6:16:FB:D6:40:F4:3A:FF:07:33
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 0FE5EB3B6423E1E20C93BEB03E5CE99AB785256A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 03C8
Signing time: Sat 13 Jun 2026 19:32:10 +0000
Manifest this update: Sat 13 Jun 2026 19:27:10 +0000
Manifest next update: Sun 14 Jun 2026 23:25:10 +0000
Files and hashes: 1: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: hztXLWa69ZCSvaHsgxfmIu1iGEyi0dmDHTKRn8lva0U=)
2: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: 1g59AndTpeuojlSNC7MQicy9YrEwBPc41WOJd+gnKfI=)
3: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: qUqWDMdwqYxrru/lfuFp7Xl3KkE/ZgAh5m/QhmJY+cc=)
4: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: bhxVymRF822sGUYT46rm76gxr9MTDGnqCYuxjLcYLpE=)
5: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: for3TZ55MsAMVGTBxoaBqPnYYuJ9C2scw6xD7EipCVE=)
6: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
7: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: BYtMeV7LUYCkn/ZlkNGbMC11vRUN13yQPjH3QL+ojYM=)
8: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: kJs4pIFr56jieUGNJ8cBdGuDgpKUTJvT+kMc/MGiNTY=)
9: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: XCup3CDpTI8h0icf6dg5YC13MftgQWrPGVHtOIE5Emk=)
10: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: zpx42ErZf38nArat2lWc2CjcEQLArb7UaUXhAgB+AXc=)
11: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
12: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
13: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: CugFEvD4Ktg/5XSZzy7iQtNWk6C3XP2CbAfxfcxZ7Ek=)
14: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 8uD4bBwjny3oHimP3K0P6bnhdh9l/903krEKBsdb/Mg=)
15: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
16: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: WYhSrcn5TXhJNdUP3qkf2gSgA8q33bj3XMR4NNPqdCA=)
17: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
18: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0pqNFsy2Jv3exhCr65w5BUOK2wMYsDflsm3c/HDS3Jw=)
19: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
20: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e5:eb:3b:64:23:e1:e2:0c:93:be:b0:3e:5c:e9:9a:b7:85:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Jun 13 19:27:10 2026 GMT
Not After : Jun 14 23:25:10 2026 GMT
Subject: CN=0DDBCD650EBE247AD968D616FBD640F43AFF0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:49:cf:ac:e0:e0:c4:63:ae:e5:70:c2:55:
9e:03:77:04:6b:e0:bb:9f:64:29:a0:81:f2:ee:e9:
a9:0d:ff:43:09:e2:07:52:20:29:f3:7c:3b:91:42:
45:54:53:da:58:d6:1c:cb:bd:8e:78:7f:71:92:52:
61:85:b8:82:83:1e:19:58:70:4b:94:28:53:42:b3:
1b:40:0a:ee:8a:28:f2:01:af:de:aa:e3:2e:63:99:
f1:14:35:a5:a5:41:65:f3:7b:12:4c:88:3b:30:a4:
4a:5d:a1:3f:5b:67:c0:92:d9:4c:ad:47:46:72:91:
4c:68:10:9c:b3:1e:f7:3a:0f:8e:92:82:17:1a:cd:
b0:b3:b2:4a:ae:91:d8:aa:b2:ba:88:ba:23:13:6a:
1a:53:b5:dc:93:59:48:c5:72:b7:9e:bb:bc:cd:ff:
14:e0:f5:d8:60:3c:63:c6:8c:80:88:1d:30:98:18:
d5:a7:1a:31:b0:f6:7d:db:47:16:4e:9d:f6:95:9b:
5a:5f:b1:07:ac:47:cb:b3:46:0e:b9:19:1a:90:88:
ec:bd:6d:e2:c8:e0:f8:be:3b:39:7c:45:66:28:d3:
58:ce:b4:f6:24:8d:7a:c5:b2:3e:3d:28:ac:5f:0d:
01:e2:6e:e7:44:30:2b:34:5a:19:fe:c8:29:2c:7e:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:CD:65:0E:BE:24:7A:D9:68:D6:16:FB:D6:40:F4:3A:FF:07:33
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d6:04:0a:6b:db:77:ec:18:f4:4a:d1:df:87:09:1b:16:a0:
a2:20:9b:84:d3:d9:a4:65:f9:34:e0:1d:19:72:a6:df:a3:e2:
2b:d9:a5:2b:68:a3:59:ac:10:7b:1d:63:a5:e9:56:32:d0:a8:
3c:d6:c5:4a:76:1a:a9:25:9a:48:a4:52:9e:12:0c:71:2d:4c:
0e:9f:77:f4:99:61:6b:29:72:d2:31:dc:9f:59:05:9e:8a:9a:
b2:cf:51:1a:8d:e7:22:76:b2:82:42:00:2e:60:1f:f5:f1:fe:
8d:92:7e:44:e0:7a:55:93:14:66:59:4e:31:59:0f:b2:fb:a9:
4b:76:79:5c:c1:4c:ed:c8:f8:58:dc:b1:21:1d:bd:47:cd:a1:
0f:1d:29:17:69:68:5c:40:95:72:75:01:5e:01:d5:33:72:5f:
10:0d:00:67:df:3b:cb:c2:43:8c:0c:38:00:f1:cb:ab:e9:a6:
18:a4:08:18:59:38:58:a2:6d:7c:18:3c:25:b6:23:03:1e:5b:
0e:5d:06:01:9a:1e:cd:18:15:2c:ee:a0:10:49:63:e8:c3:c3:
0c:23:fe:fe:d8:ad:6f:7e:3f:b5:7d:e9:f9:09:4b:50:27:95:
83:d9:8c:31:2c:39:31:6c:e9:e4:20:6a:12:6a:c1:90:d0:a1:
5d:21:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:20:52 2026 by rpki-client