
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier: 9U0LBooiO8CBU93NUyRmWuDVhDGA4zaf9egADQS5yQs=
Subject key identifier: 94:9C:0A:E6:3B:8C:5F:41:2F:30:56:F2:78:74:61:B9:DD:9A:5E:30
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 5BF552B8302A5343C892DDA280CAF6D13387D7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number: 02A1
Signing time: Sun 01 Mar 2026 14:31:58 +0000
Manifest this update: Sun 01 Mar 2026 14:26:58 +0000
Manifest next update: Mon 02 Mar 2026 16:02:58 +0000
Files and hashes: 1: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
2: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (hash: N+DNH3cZSUB3/2IAiDvrSRIBUTXQrXsxpW7BekUy55w=)
3: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
4: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
5: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
6: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: hJkPV2dsSlGqgvVNYcdx7uOvdeL/QtqOzBZddVlNTvg=)
7: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
8: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
9: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
10: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
11: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
12: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
13: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=)
14: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
15: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=)
16: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=)
17: 3130332e34392e3133302e302f32342d3234203d3e20323135323238.roa (hash: 147h2J6b+NOJXC28D6UU/j3YTYLc8UIqVeSHprm2aSY=)
18: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
19: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
20: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f5:52:b8:30:2a:53:43:c8:92:dd:a2:80:ca:f6:d1:33:87:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Mar 1 14:26:58 2026 GMT
Not After : Mar 2 16:02:58 2026 GMT
Subject: CN=949C0AE63B8C5F412F3056F2787461B9DD9A5E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:70:39:f2:88:ed:a4:f9:d2:a8:b0:6b:fa:
15:0e:d8:94:8b:fc:96:8e:3f:ed:93:7e:61:46:b5:
2c:aa:02:7a:8c:89:ff:fa:2b:a7:8d:f3:08:03:8c:
d0:86:f4:da:b3:78:95:cb:ae:a1:b0:87:f7:92:db:
b4:1b:dd:3c:c8:5a:be:0b:06:cc:5e:02:e5:f9:79:
76:7d:d7:e6:d5:1d:ca:ee:73:76:d1:b4:5b:c6:14:
32:fa:da:19:67:6a:e7:67:2a:45:85:7d:73:fd:1d:
1f:35:8e:fc:7f:af:f3:60:d4:b1:4b:ca:d6:09:56:
bd:9d:8a:bd:76:eb:90:9a:12:6d:67:9d:19:f5:c7:
54:73:4b:9d:ae:f3:83:51:d1:f7:4d:1f:91:51:9e:
7d:db:03:8e:02:2e:ee:b4:a7:79:13:73:02:41:f8:
2f:2e:4a:bc:6e:5b:86:25:bd:2f:fa:bc:08:1e:3e:
42:cf:5e:92:1e:e1:48:2c:38:b7:51:f9:2f:6c:8d:
c5:61:1c:a7:0c:8a:2c:64:1b:65:c2:0b:2e:66:88:
40:6b:bf:a3:4b:9a:10:42:04:8e:f4:3b:14:5a:39:
12:7f:7b:d8:29:06:23:77:e8:18:ef:60:44:13:c7:
9a:dc:76:ad:ba:7a:9f:a5:8d:13:10:a2:02:bc:82:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:0A:E6:3B:8C:5F:41:2F:30:56:F2:78:74:61:B9:DD:9A:5E:30
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:ca:05:09:d2:d7:db:f3:5d:77:18:72:da:46:b1:12:08:
b2:64:2d:cf:c6:eb:2a:c4:fd:3d:4d:b9:d5:91:29:5c:97:75:
3c:e9:70:86:5a:14:26:61:b4:41:51:74:78:eb:b2:33:03:0b:
80:d8:0a:06:d3:b5:f8:05:47:7a:1e:91:33:44:39:4e:43:07:
6c:7b:42:cc:c4:e5:41:59:4b:9a:a4:ab:78:de:ce:2d:9a:38:
11:79:1e:15:d3:c3:92:c8:a5:01:2d:67:4d:a9:c0:0e:83:f7:
eb:45:db:76:44:c9:9a:b0:0a:12:87:94:c1:40:86:e7:c3:ee:
5e:9b:57:92:7f:80:44:3f:b5:43:c2:28:13:d7:9d:6c:cb:a1:
6a:bd:67:3f:de:2d:1d:40:30:8d:3f:12:02:ca:ea:3b:00:b1:
a9:17:f6:b0:ed:ce:d0:73:18:ab:8a:e0:4a:a4:d1:0e:a7:c3:
96:de:d6:47:72:5f:ec:86:5a:82:34:30:e4:e3:5f:85:3b:38:
cb:bd:a8:d9:53:b3:cd:c8:51:04:17:33:6d:38:33:39:1a:69:
a7:aa:fa:a5:4c:c0:2f:2c:12:87:6e:f7:bf:0f:9c:35:2b:4b:
4c:c5:01:d4:ae:22:c6:98:d0:6c:32:27:8f:f8:6b:15:95:eb:
4d:4d:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:24 2026 by rpki-client