
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier: oW0s87wTYZeUdGbsHeyDpZyn1d8cvbZ3zbV3HPFHNB0=
Subject key identifier: 95:98:55:8C:10:6F:A7:98:21:B2:3F:B8:26:37:13:91:25:C4:44:D1
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0E4A38947CACB9D1EC51D9D98EF4DC38CBACB7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number: 05DF
Signing time: Fri 12 Jun 2026 14:30:42 +0000
Manifest this update: Fri 12 Jun 2026 14:25:42 +0000
Manifest next update: Sat 13 Jun 2026 17:28:42 +0000
Files and hashes: 1: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=)
2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=)
3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=)
4: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=)
5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: xxRinmOCEf3OS9kqYRIEWMmKy3cZ2f88d3NUZmC+CRE=)
6: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=)
7: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=)
8: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=)
9: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=)
10: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=)
11: 3138352e322e3136302e302f32332d3234203d3e203430363736.roa (hash: O3J2SAXtmg62ikqS6buGe0VGwNezma9salxJz05yb48=)
12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=)
13: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4a:38:94:7c:ac:b9:d1:ec:51:d9:d9:8e:f4:dc:38:cb:ac:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 12 14:25:42 2026 GMT
Not After : Jun 13 17:28:42 2026 GMT
Subject: CN=9598558C106FA79821B23FB82637139125C444D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:e0:cc:0f:4b:9a:0b:f9:43:4a:a9:e6:28:
38:71:37:4f:b0:af:24:ba:ae:ee:48:e1:7e:d7:33:
e2:61:d9:59:69:49:11:77:ef:54:41:b0:92:09:07:
a8:a8:a7:5c:b7:fb:86:c8:75:58:26:83:6a:f6:8d:
03:74:fa:aa:c3:64:da:cd:07:f3:b2:77:b5:7a:3c:
c2:01:7d:f2:a2:72:c1:02:1d:fe:9e:28:7e:7e:d3:
b9:33:8e:eb:c8:dd:86:ba:e0:26:03:f8:cb:b1:ee:
1a:88:98:ad:90:8a:c1:0f:7f:45:42:17:74:a0:38:
72:8e:6b:14:04:52:3d:4a:33:03:b8:cd:68:63:2a:
f0:8d:d4:28:0a:51:75:bd:05:4d:f5:40:83:6e:f2:
00:86:d2:6a:b9:51:94:a2:c6:e1:00:9c:84:01:00:
13:96:05:6d:8a:e6:0b:94:80:32:bc:5f:70:ad:11:
9c:1d:00:65:e3:4d:b5:9d:00:18:3f:d0:62:62:bf:
ba:44:2f:c2:3a:a2:dc:6a:60:2f:6c:c7:1d:e7:79:
c7:22:7b:2b:36:86:cb:1d:f5:9d:f4:11:5d:01:6a:
19:1f:5d:68:cd:a6:3d:b5:67:d8:2b:3c:eb:5b:b3:
7a:f8:7e:f5:a2:40:c6:c0:bc:46:19:88:88:04:bf:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:55:8C:10:6F:A7:98:21:B2:3F:B8:26:37:13:91:25:C4:44:D1
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:87:6b:81:90:42:bd:0f:31:b6:42:67:f6:6f:ab:83:f2:
91:df:b0:42:69:97:03:24:08:e0:2f:14:3d:85:d9:03:a3:83:
81:6c:89:33:75:22:52:f5:85:17:62:58:12:25:15:46:4a:d5:
ac:83:ce:f6:3e:65:9d:85:8d:da:3c:63:12:9c:ee:8e:e0:62:
9c:b2:88:39:1e:31:ea:46:a6:b8:a8:68:01:3a:e8:06:cb:db:
7a:73:74:db:43:db:c3:ef:98:fb:c6:ca:ce:5c:a4:ee:1e:2f:
8f:b9:45:79:5d:6b:2a:a5:d3:23:cd:d9:c1:97:fc:53:e5:5d:
d1:ca:4d:57:7e:2c:e3:87:fc:02:fb:a4:00:4f:44:fa:4b:64:
b2:54:bf:77:82:9a:f1:59:0e:be:a6:7a:e7:29:c6:34:76:65:
a7:cb:c7:a3:76:e5:ae:bd:92:93:e3:ce:87:79:18:87:cf:7b:
88:80:7d:c2:c9:e1:f1:95:aa:8b:9c:2c:89:2d:9c:d5:bf:52:
2f:1f:9b:43:fe:9f:d4:0b:be:db:3b:46:9e:fd:31:2e:80:f6:
65:0a:c6:f1:e0:81:04:5f:ab:19:9f:dc:68:70:d6:7f:76:1c:
2c:00:46:a9:cf:10:3a:f7:41:c6:98:b8:1e:d2:dd:25:b6:8b:
2b:c2:df:93
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDko4lHysudHsUdnZjvTcOMust7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNjA2MTIxNDI1NDJaFw0yNjA2MTMxNzI4NDJaMDMxMTAvBgNV
BAMTKDk1OTg1NThDMTA2RkE3OTgyMUIyM0ZCODI2MzcxMzkxMjVDNDQ0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxuDMD0uaC/lDSqnmKDhxN0+w
ryS6ru5I4X7XM+Jh2VlpSRF371RBsJIJB6iop1y3+4bIdVgmg2r2jQN0+qrDZNrN
B/Oyd7V6PMIBffKicsECHf6eKH5+07kzjuvI3Ya64CYD+Mux7hqImK2QisEPf0VC
F3SgOHKOaxQEUj1KMwO4zWhjKvCN1CgKUXW9BU31QINu8gCG0mq5UZSixuEAnIQB
ABOWBW2K5guUgDK8X3CtEZwdAGXjTbWdABg/0GJiv7pEL8I6otxqYC9sxx3necci
eys2hssd9Z30EV0BahkfXWjNpj21Z9grPOtbs3r4fvWiQMbAvEYZiIgEv/JdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUlZhVjBBvp5ghsj+4JjcTkSXERNEwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00
MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB
QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRCHa4GQQr0PMbZCZ/Zv
q4Pykd+wQmmXAyQI4C8UPYXZA6ODgWyJM3UiUvWFF2JYEiUVRkrVrIPO9j5lnYWN
2jxjEpzujuBinLKIOR4x6kamuKhoATroBsvbenN020Pbw++Y+8bKzlyk7h4vj7lF
eV1rKqXTI83ZwZf8U+Vd0cpNV34s44f8AvukAE9E+ktkslS/d4Ka8VkOvqZ65ynG
NHZlp8vHo3blrr2Sk+POh3kYh897iIB9wsnh8ZWqi5wsiS2c1b9SLx+bQ/6f1Au+
2ztGnv0xLoD2ZQrG8eCBBF+rGZ/caHDWf3YcLABGqc8QOvdBxpi4HtLdJbaLK8Lf
kw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:32 2026 by rpki-client