
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier: V8pcm3I+KJRzSty/kXU2290yuU6P7Sk7AI6Dj2Y2czc=
Subject key identifier: 95:18:67:DF:4A:DC:5C:6C:A8:D8:29:9C:0B:66:D2:71:82:BF:9A:02
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3133E7B975FC9703447D31C0FCBA8157AB1038F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number: 0801
Signing time: Sun 20 Sep 2026 03:05:42 +0000
Manifest this update: Sun 20 Sep 2026 03:00:42 +0000
Manifest next update: Mon 21 Sep 2026 05:08:42 +0000
Files and hashes: 1: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=)
2: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
3: 3231332e3133392e37392e302f32342d3234203d3e20323139333933.roa (hash: WQjC8RWC2PKreXWfRiyeO0KVcM/bEXAR59hsyPiTN1k=)
4: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=)
5: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=)
6: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=)
7: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=)
8: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=)
9: 3231332e3133392e36362e302f32342d3234203d3e20383334.roa (hash: NNeSm0YmYiv7RDDSl/AI52boRHe4mM/vb2OQANfwSD4=)
10: 3231332e3133392e36372e302f32342d3234203d3e20313437323831.roa (hash: vwViVlFTDiI0dOCPl+PDo5ipN2yW3G8ItQyNk/w7+dI=)
11: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=)
12: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=)
13: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: +NBu0g2aXIacox1EFm81T8EjIFSCzn5vE+OK4QYJCeE=)
14: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=)
15: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
16: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=)
17: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=)
18: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=)
19: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=)
20: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=)
21: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=)
22: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=)
23: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=)
24: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=)
25: 3231332e3133392e37392e302f32342d3234203d3e20323139333934.roa (hash: cZZDfh4b1GtBTnTClSPcJjjghjB2nMfOyud4qBtt4PQ=)
26: 3231332e3133392e37392e302f32342d3234203d3e20323138373937.roa (hash: Jp0KSZI5Smc4gbeGOJA11S7HxV/T+hWWVtWLrOuqZ8I=)
27: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=)
28: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: 2qZQfOcJdShx8dQdW3jSDzAf+zGAwRn+nvT7o3J4pwE=)
29: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=)
30: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=)
31: 3231332e3133392e37392e302f32342d3234203d3e20323139313030.roa (hash: r6hGPW9EliDZLrxKGbasu0b9A1Y7nnFgX6bLK+/jROY=)
32: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=)
33: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=)
34: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: qufxABzYtPVqJhKbvB3PBmop5jMgkyRVa/W0Bx1F4s4=)
35: 3231332e3133392e36352e302f32342d3234203d3e20383334.roa (hash: aBJ7OoaXb6rDbnpVY6odGndz/aaVwq/3W9uHVst1MOE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:33:e7:b9:75:fc:97:03:44:7d:31:c0:fc:ba:81:57:ab:10:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 20 03:00:42 2026 GMT
Not After : Sep 21 05:08:42 2026 GMT
Subject: CN=951867DF4ADC5C6CA8D8299C0B66D27182BF9A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:d5:c9:65:16:7e:a5:0e:41:76:98:2e:0c:
76:29:4b:c6:70:36:a0:c5:9f:b9:17:10:14:17:b9:
6b:bd:92:e9:57:6b:7f:d4:59:03:a5:83:6e:07:c1:
8c:30:9a:39:e5:1d:a6:f7:f8:31:4d:a7:dc:dc:26:
85:92:a1:59:ba:17:1f:f9:0b:7c:25:be:de:3b:0b:
7b:1f:7e:ed:71:3f:85:78:11:88:d1:c7:f6:97:98:
b5:69:e2:47:b8:77:eb:89:a9:e4:66:cd:64:35:d6:
a4:57:99:85:78:39:3c:74:ee:01:56:a9:ce:1a:e3:
18:75:75:4a:2f:b7:6c:26:d8:3b:de:f2:21:5d:4b:
d2:c1:50:d5:a7:bc:cc:77:87:30:22:7c:3c:3c:0e:
73:9e:b2:26:a2:b5:ea:3f:b4:cc:9e:d2:66:49:aa:
7e:12:7d:99:a7:e7:3f:9f:8e:6b:57:19:0a:9c:ee:
9a:06:b7:79:9a:b2:06:b7:b7:0d:72:bc:63:16:1d:
72:9f:44:93:d4:80:00:95:4c:b3:51:fc:69:46:29:
b4:3d:83:db:0f:cf:c7:f1:e9:71:0d:2f:30:78:db:
bf:e1:b1:85:ba:a1:0c:f7:6a:c8:be:2e:3d:18:13:
b9:88:10:44:69:45:7d:4d:c7:9f:68:28:f4:51:ea:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:67:DF:4A:DC:5C:6C:A8:D8:29:9C:0B:66:D2:71:82:BF:9A:02
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7f:1c:52:e1:48:66:22:fe:13:21:29:ae:19:1c:f4:a3:d8:
96:7e:47:66:52:af:65:78:b1:5a:fd:e3:c1:ba:c6:34:db:8e:
7c:57:40:78:0c:32:b5:49:f4:25:98:b6:85:27:8b:7a:ba:df:
e1:fc:34:c6:54:79:cc:17:6d:b0:6c:6c:25:f1:37:b2:bd:5e:
1b:17:52:ef:26:c0:ba:ea:09:87:41:37:bf:ff:08:68:36:9b:
4f:08:94:35:3a:62:af:c3:d4:c8:da:0c:a6:59:b2:5a:d8:66:
78:a7:88:47:fb:29:0f:6b:51:e9:cd:31:c6:dc:6b:fa:1d:91:
70:4d:c6:95:98:4c:30:c2:de:e9:ee:b6:f9:7a:1f:6d:86:f9:
84:91:5f:b0:99:e7:cd:5e:b6:ca:28:91:13:c9:f3:5a:b7:7f:
82:00:7e:0a:81:b6:58:00:76:c8:9d:fd:1d:b0:aa:2e:ea:72:
dc:7c:b4:42:3d:e1:db:f0:85:92:a8:29:84:47:c6:0c:79:e8:
ca:7b:73:ea:e3:c1:03:76:14:ed:44:31:42:f8:a1:11:6b:54:
09:7f:a7:4c:f5:24:51:cd:b5:13:be:e5:d9:1c:be:66:1e:c5:
e9:78:ed:82:d4:64:0d:e5:ac:17:dd:17:77:50:4b:22:6b:45:
b2:9c:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:12:10 2026 by rpki-client