
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: iAs6qyJVAMv73Thvw+nYYi86CtWO1S2jBcy3NhsHjuE=
Subject key identifier: 2B:79:0C:FB:26:C1:62:F1:C0:75:9B:A8:EB:D0:FC:81:22:13:30:8C
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 4382A51E09C96815768179E488F5E9DCDF2B8FEA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 03CF
Signing time: Sat 13 Jun 2026 04:46:23 +0000
Manifest this update: Sat 13 Jun 2026 04:41:23 +0000
Manifest next update: Sun 14 Jun 2026 05:01:23 +0000
Files and hashes: 1: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: q6pUV6zyLgy5iz4rBp0u/JDvv3Mq/ssZO9Kfj4UGPPc=)
2: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
3: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=)
4: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
5: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
6: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
7: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=)
9: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
11: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
12: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: XxZQPg3bymA39RzaDkTbJBcK/NEqin5of0P6cgBF9Yw=)
13: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
14: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: y8zQ9R0hI+1vikxAjTihkMyBJfao11uV4mw2fBlCTK8=)
15: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
17: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:82:a5:1e:09:c9:68:15:76:81:79:e4:88:f5:e9:dc:df:2b:8f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Jun 13 04:41:23 2026 GMT
Not After : Jun 14 05:01:23 2026 GMT
Subject: CN=2B790CFB26C162F1C0759BA8EBD0FC812213308C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:6d:46:b9:18:d4:a0:4d:74:f0:d2:a3:31:
88:03:b9:5f:50:e6:e6:3a:b9:c7:68:8a:b4:4b:78:
45:44:38:54:60:50:52:cc:9d:6b:41:88:62:a0:3e:
80:ab:41:56:54:8f:55:e5:4f:51:43:b9:bf:f9:69:
d1:6f:c1:84:38:77:fb:c2:3e:89:ff:e4:d2:1d:c4:
f3:bf:2e:be:53:41:27:76:26:41:47:64:ac:2d:2e:
a0:06:bc:19:8d:c6:c5:c2:37:57:32:e7:53:5b:4a:
51:e7:80:4f:10:f6:1b:45:05:42:dd:49:bd:2a:8c:
55:74:f7:b4:b8:a7:88:de:7a:d3:4b:56:58:30:c3:
1b:45:2e:dd:b4:65:fc:1a:29:ae:c2:70:41:46:6b:
e6:0e:27:fd:69:d0:ec:be:f4:66:4e:73:f5:5f:14:
1a:9e:8d:ce:a1:86:b8:fa:e4:4d:82:dc:3c:62:63:
5f:2b:33:79:65:43:7b:e1:8b:26:c6:64:e9:17:b4:
f8:df:10:92:11:c2:13:21:d4:39:f2:0b:4b:9b:52:
77:13:64:a6:48:32:64:7d:4a:bd:c4:12:a0:24:d0:
a3:5b:1f:8a:59:70:36:67:18:28:cd:03:5c:0d:32:
2b:39:60:09:c8:3a:52:4b:84:93:b5:93:c8:b5:42:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:0C:FB:26:C1:62:F1:C0:75:9B:A8:EB:D0:FC:81:22:13:30:8C
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:27:3d:fa:e3:13:fa:31:95:5c:f6:d2:cf:af:64:26:08:a6:
30:2e:c1:38:38:69:f7:cc:b8:7f:d9:b7:cb:ab:14:c4:bd:16:
61:f4:db:62:49:6c:53:58:41:24:c7:41:68:8b:14:fc:7f:ca:
7f:c1:c1:8b:1b:db:f1:9c:2e:8b:e5:60:ee:3a:f7:c8:a7:7d:
fb:16:cb:26:9a:fa:3f:7d:71:eb:6c:3c:59:61:02:3f:f9:de:
f6:b4:7f:3c:c6:80:85:a7:76:ac:65:8b:f8:c4:bf:79:d1:09:
d3:37:f1:fd:c4:70:64:0e:ef:36:ec:0e:0b:58:f9:22:ec:d8:
ef:a6:8d:16:7e:37:05:e7:76:11:12:d3:f9:ec:82:14:02:3f:
89:c4:72:9b:6f:21:88:ba:4f:00:cc:ac:21:f0:dc:0d:36:67:
70:6a:a8:2b:8c:0d:b5:bf:2f:10:88:ee:c9:43:88:4f:90:95:
5b:58:b1:70:76:34:48:c7:ca:f0:e5:0d:aa:45:11:a3:2d:14:
9c:46:5f:b1:19:86:31:69:85:c3:d7:3b:f5:47:0f:19:7f:38:
d8:74:11:1b:13:44:7f:89:e2:81:97:94:d0:71:91:20:a3:52:
60:cf:cb:91:4d:ce:80:98:8b:b5:7e:59:69:ae:02:97:c8:6c:
7e:75:1e:d6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUQ4KlHgnJaBV2gXnkiPXp3N8rj+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjA2MTMwNDQxMjNaFw0yNjA2MTQwNTAxMjNaMDMxMTAvBgNV
BAMTKDJCNzkwQ0ZCMjZDMTYyRjFDMDc1OUJBOEVCRDBGQzgxMjIxMzMwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKW1GuRjUoE108NKjMYgDuV9Q
5uY6ucdoirRLeEVEOFRgUFLMnWtBiGKgPoCrQVZUj1XlT1FDub/5adFvwYQ4d/vC
Pon/5NIdxPO/Lr5TQSd2JkFHZKwtLqAGvBmNxsXCN1cy51NbSlHngE8Q9htFBULd
Sb0qjFV097S4p4jeetNLVlgwwxtFLt20ZfwaKa7CcEFGa+YOJ/1p0Oy+9GZOc/Vf
FBqejc6hhrj65E2C3DxiY18rM3llQ3vhiybGZOkXtPjfEJIRwhMh1DnyC0ubUncT
ZKZIMmR9Sr3EEqAk0KNbH4pZcDZnGCjNA1wNMis5YAnIOlJLhJO1k8i1QmIPAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUK3kM+ybBYvHAdZuo69D8gSITMIwwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrJz36
4xP6MZVc9tLPr2QmCKYwLsE4OGn3zLh/2bfLqxTEvRZh9NtiSWxTWEEkx0FoixT8
f8p/wcGLG9vxnC6L5WDuOvfIp337Fssmmvo/fXHrbDxZYQI/+d72tH88xoCFp3as
ZYv4xL950QnTN/H9xHBkDu827A4LWPki7Njvpo0WfjcF53YREtP57IIUAj+JxHKb
byGIuk8AzKwh8NwNNmdwaqgrjA21vy8QiO7JQ4hPkJVbWLFwdjRIx8rw5Q2qRRGj
LRScRl+xGYYxaYXD1zv1Rw8ZfzjYdBEbE0R/ieKBl5TQcZEgo1Jgz8uRTc6AmIu1
fllprgKXyGx+dR7W
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:35 2026 by rpki-client