
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json)
Hash identifier: srSrkmY8icR046phWttIBOX0vjRP7OF6J448qK+wVdE=
Subject key identifier: 2A:4D:A7:E2:27:05:46:C3:7B:DB:33:77:75:BA:1D:E2:66:30:9F:AB
Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Certificate serial: 01ECBFD57B3C50C0C6E7398030E938B71A428F4B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
Manifest number: 01AA
Signing time: Sat 13 Jun 2026 12:17:13 +0000
Manifest this update: Sat 13 Jun 2026 12:12:13 +0000
Manifest next update: Sun 14 Jun 2026 15:14:13 +0000
Files and hashes: 1: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=)
2: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=)
3: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=)
4: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=)
5: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=)
6: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: ZmMKQu7Yi2J5SsJwCV0f3Juy398fDh/oa0ngavHzV+4=)
7: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=)
8: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=)
9: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=)
10: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=)
11: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=)
12: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=)
13: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=)
14: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=)
15: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=)
16: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=)
17: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ec:bf:d5:7b:3c:50:c0:c6:e7:39:80:30:e9:38:b7:1a:42:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Validity
Not Before: Jun 13 12:12:13 2026 GMT
Not After : Jun 14 15:14:13 2026 GMT
Subject: CN=2A4DA7E2270546C37BDB337775BA1DE266309FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:ae:c4:5d:e4:f2:98:59:ba:26:9f:d8:05:
b6:de:98:a7:38:a8:81:5e:16:5e:69:df:8b:dd:e1:
0f:25:5f:36:61:2a:bf:f5:5a:96:55:53:53:fc:28:
f8:97:59:e1:2e:ca:fc:f4:e9:be:18:a7:da:25:a8:
d8:71:a3:79:d9:3b:4c:f8:f8:89:22:d5:58:6d:47:
c0:7e:8e:55:90:b0:a0:67:08:d3:77:ff:77:89:97:
64:e5:a0:68:0f:bf:71:bf:e6:95:13:26:f6:40:7e:
19:2a:e8:a9:22:1e:5b:83:ad:30:79:76:7d:aa:7d:
37:e1:08:bf:3f:75:75:1d:65:67:68:2f:ed:b3:6a:
90:86:d1:ba:4c:79:af:37:20:ea:59:e6:6b:ae:3b:
f3:4c:98:87:e3:c9:1d:15:53:6c:f0:de:73:cc:b5:
b9:30:b9:88:21:5b:db:bc:d7:c7:f8:48:eb:6e:43:
7f:0c:2b:cc:70:21:e7:58:3e:f8:cb:d7:60:e1:6f:
a7:11:13:09:fc:3b:20:1a:93:3b:f6:ef:b4:fa:a6:
83:00:64:95:c0:91:99:ec:ff:0c:3a:c5:25:8e:22:
73:1b:b0:be:bd:96:cb:ef:91:e3:c9:9a:df:94:63:
39:02:3e:ee:ad:e2:06:25:cc:91:65:51:fc:1a:dd:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:A7:E2:27:05:46:C3:7B:DB:33:77:75:BA:1D:E2:66:30:9F:AB
X509v3 Authority Key Identifier:
keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9c:e3:6f:48:2f:db:70:a4:c8:45:48:89:57:7e:a0:ab:97:
c5:90:ab:e9:88:48:b9:5a:51:48:f8:a4:9b:ff:cd:48:02:d0:
8e:19:b7:da:f6:c7:e3:ef:fe:75:14:29:d5:7f:03:0b:c7:ab:
3f:a7:b6:2f:86:38:fd:a4:93:aa:e6:ac:f8:21:3e:a3:3f:9a:
de:f0:bf:bd:c0:be:4b:5e:31:17:a6:23:85:60:a4:fe:d5:64:
90:63:cb:eb:99:5e:ea:0f:3d:8a:be:84:f5:a2:e0:18:d3:36:
08:10:7e:5b:69:bd:7b:59:96:bd:87:01:08:10:9e:60:c6:a9:
a3:e7:9a:df:c0:0d:c5:5e:67:a4:c5:9d:8a:70:e8:d5:57:70:
ac:f5:18:fe:59:bb:c8:79:2b:33:55:24:db:d7:22:6e:10:22:
a2:25:e3:b6:c5:f8:8d:5e:3f:58:cd:46:ca:ad:06:e4:c6:c0:
4a:78:aa:5f:49:96:dc:c2:ae:1c:3a:ed:bb:46:eb:de:83:1f:
ed:17:05:bd:37:d8:04:fa:57:0e:e8:bd:3f:ee:38:48:ed:80:
db:79:4e:50:ea:03:b7:bf:89:3a:45:8e:f3:9f:c9:0a:52:a5:
68:10:19:28:c8:97:44:20:cb:1b:78:71:33:bf:f9:c0:a3:dd:
61:dd:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:21:35 2026 by rpki-client