$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: V/DHjLPglRzG31ILgl6eJa2qXvk4eHUv306ZsJb+7QA= Subject key identifier: 30:B7:D0:52:14:7A:BA:FB:9F:0F:96:AA:3C:1F:08:8C:D5:1A:D4:C6 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 5CB599AC22F98E50E04734E630214B4398F39165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 02A3 Signing time: Mon 27 Apr 2026 20:21:09 +0000 Manifest this update: Mon 27 Apr 2026 20:16:09 +0000 Manifest next update: Tue 28 Apr 2026 21:09:09 +0000 Files and hashes: 1: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 2: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 2OIZ04mVJyEZjpuxO1CLOqCTHErJHFwNPe5AzpBZFGg=) 3: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=) 4: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=) 5: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 6: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: foBoaKUPeMOXyMdgjQODzIp3g1QrOeZIcU4rmaW6W0Y=) 7: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=) 8: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=) 9: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 10: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=) 11: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=) 12: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 13: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: EDWUUKhrOtu3UMAllaeIt1ZR8GH4cYzCKJWn6QZal8k=) 14: 3137382e3133322e3139352e302f32342d3234203d3e203232343237.roa (hash: QgvmMFuUdAiqbiI7YJRIvnHFDWl3E8S1w1OF0shY8uU=) 15: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=) 16: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: V7It1R194wG2fKfWWlVdnzwed7rR2mdr0bGRnI9AxV4=) 17: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=) 18: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=) 19: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=) 20: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=) 21: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 22: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: xfnBgMCFpR8WsSmanu6oXx69cY6n9Ufmkf4lgYTGZHc=) 23: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: uJEDxZm1l0+YcyFuGRmcGjOe89y2pFVQh//OE0DuSL8=) 24: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=) 25: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: JpGLComndw26SOL3sJbPNJ7i8ZI6iCFmvappx1PnQqM=) 26: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=) 27: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=) 28: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b5:99:ac:22:f9:8e:50:e0:47:34:e6:30:21:4b:43:98:f3:91:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Apr 27 20:16:09 2026 GMT Not After : Apr 28 21:09:09 2026 GMT Subject: CN=30B7D052147ABAFB9F0F96AA3C1F088CD51AD4C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:26:b0:4e:d1:78:69:80:20:46:d4:8e:0e: 25:e7:f4:85:ca:c0:2b:5b:d9:bb:d1:af:72:e9:2e: 6d:93:87:06:70:bc:12:ed:87:85:b8:7a:b9:56:0e: 0a:46:90:c7:a6:5c:0b:8a:f7:43:14:86:bd:ab:91: fd:25:87:c9:a9:ce:15:63:94:c7:bc:14:b1:db:4b: a5:09:02:69:07:20:41:1a:74:87:4c:74:12:14:19: 67:cd:cf:d0:b5:93:e7:74:61:48:62:c4:3e:bd:a8: 19:43:0b:75:9d:4e:2d:f2:b1:6c:27:e6:91:71:e5: b3:3f:52:b3:f1:a3:79:aa:c0:61:44:7b:a9:41:e8: a5:22:3a:c2:4a:9f:80:63:89:c0:5b:ec:ff:ef:06: 2d:5d:32:16:b3:4c:f0:14:eb:f3:5e:3d:8f:01:97: 0c:ef:b9:2d:72:5d:3c:29:d5:46:37:fc:42:1c:45: 94:d3:96:d6:20:2b:f8:b2:9f:9c:22:af:1e:ad:5f: 93:bb:df:e8:ae:4e:6f:52:33:66:6f:cd:4f:93:13: d0:a0:55:3a:71:d6:1b:ae:e1:c8:4a:7a:5b:99:35: b1:00:c5:8e:4f:92:a3:b4:c8:ec:0f:b1:ac:66:1e: 9c:dd:0c:ee:ed:de:2a:a7:90:ad:1e:9a:f4:32:eb: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B7:D0:52:14:7A:BA:FB:9F:0F:96:AA:3C:1F:08:8C:D5:1A:D4:C6 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:91:39:94:f7:c6:20:74:0b:63:a9:00:ad:0e:d2:84:4b: 52:5b:af:d7:8b:34:d8:a8:fd:dd:42:87:4c:40:7e:30:d6:85: 48:5f:c1:f7:76:3f:7e:5f:e9:6a:df:74:42:6f:30:8e:c5:67: f5:6d:a6:c7:e3:a4:05:3f:18:81:16:4b:9e:e9:81:17:1b:d9: e0:88:8f:1e:45:07:5a:e1:24:62:9f:48:07:0c:e7:cd:ed:9d: f9:db:b1:ed:7d:62:54:60:de:4a:d7:2e:62:74:6c:cf:87:6e: fa:58:47:77:6d:f1:66:88:df:89:ca:6c:22:db:df:76:aa:34: 95:08:b7:3b:37:49:e0:16:e3:ba:5d:d5:ad:46:30:9a:99:53: 5e:d8:33:11:5b:de:c5:b6:9a:73:e1:f3:d9:b1:02:08:6c:55: 9e:4d:77:c2:7b:1b:3b:95:5d:56:99:83:df:96:2e:9c:6b:62: f3:f3:ec:f0:dc:59:e2:e5:d4:fb:1b:c6:a0:03:ed:a1:f5:70: 6f:dc:92:3a:b4:54:0c:44:e8:31:9f:1d:20:64:4c:24:21:8f: e5:59:fa:30:56:fe:0e:1a:c5:17:02:1c:13:88:6b:4e:5a:9a: 1b:6b:94:15:4b:f6:ea:86:5a:5a:d9:57:7e:f6:37:36:3d:34: 3a:64:5e:4f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXLWZrCL5jlDgRzTmMCFLQ5jzkWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNjA0MjcyMDE2MDlaFw0yNjA0MjgyMTA5MDlaMDMxMTAvBgNV BAMTKDMwQjdEMDUyMTQ3QUJBRkI5RjBGOTZBQTNDMUYwODhDRDUxQUQ0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVyawTtF4aYAgRtSODiXn9IXK wCtb2bvRr3LpLm2ThwZwvBLth4W4erlWDgpGkMemXAuK90MUhr2rkf0lh8mpzhVj lMe8FLHbS6UJAmkHIEEadIdMdBIUGWfNz9C1k+d0YUhixD69qBlDC3WdTi3ysWwn 5pFx5bM/UrPxo3mqwGFEe6lB6KUiOsJKn4BjicBb7P/vBi1dMhazTPAU6/NePY8B lwzvuS1yXTwp1UY3/EIcRZTTltYgK/iyn5wirx6tX5O73+iuTm9SM2ZvzU+TE9Cg VTpx1huu4chKeluZNbEAxY5PkqO0yOwPsaxmHpzdDO7t3iqnkK0emvQy6/GlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMLfQUhR6uvufD5aqPB8IjNUa1MYwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSmROZT3xiB0C2OpAK0O 0oRLUluv14s02Kj93UKHTEB+MNaFSF/B93Y/fl/pat90Qm8wjsVn9W2mx+OkBT8Y gRZLnumBFxvZ4IiPHkUHWuEkYp9IBwznze2d+dux7X1iVGDeStcuYnRsz4du+lhH d23xZojficpsItvfdqo0lQi3OzdJ4Bbjul3VrUYwmplTXtgzEVvexbaac+Hz2bEC CGxVnk13wnsbO5VdVpmD35YunGti8/Ps8NxZ4uXU+xvGoAPtofVwb9ySOrRUDETo MZ8dIGRMJCGP5Vn6MFb+DhrFFwIcE4hrTlqaG2uUFUv26oZaWtlXfvY3Nj00OmRe Tw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:33:14 2026 by rpki-client