$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: M/cQNWVTMLnJuPFLqiDIkhbM2o0JFbgHAlpFY7mrrhQ= Subject key identifier: 73:8B:DD:28:8F:48:38:76:9B:95:45:10:F3:F3:E1:69:71:67:F9:D6 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 4AD367D757F261BAAE8584A0E9F197CABCE06CE7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0210 Signing time: Mon 27 Apr 2026 20:22:38 +0000 Manifest this update: Mon 27 Apr 2026 20:17:38 +0000 Manifest next update: Wed 29 Apr 2026 00:03:38 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: T9q0GLkThYnEW4697yoCMUTwmakViieUk8PzDLR5MkU=) 2: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: Ou/BuV6DNjxZqmppmI1GfTQOuzQIj3w4635LcGfFjnQ=) 3: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: DyehTUsfk21Hj5Xq64+F+F4A1oaphKt7e4+bcF+X09M=) 4: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: cxJ2EfGW3Gw41SsKZJkYgUq6pKjZBBiREvTQVJOiK1o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 21:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d3:67:d7:57:f2:61:ba:ae:85:84:a0:e9:f1:97:ca:bc:e0:6c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Apr 27 20:17:38 2026 GMT Not After : Apr 29 00:03:38 2026 GMT Subject: CN=738BDD288F4838769B954510F3F3E1697167F9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:00:2a:ec:89:3f:b2:c5:e1:9c:32:5e:1f:2e: ca:d5:39:af:4f:e7:9a:0c:80:ab:73:aa:9c:52:7f: a6:1b:5f:26:7c:cc:e1:60:3a:be:c2:ed:d6:89:dd: 65:56:a7:31:dd:0e:5e:7e:bc:bb:cf:43:c2:aa:a5: 4a:28:73:98:1e:92:5e:c3:e3:bd:0c:65:1d:53:c2: d8:ab:be:30:c6:ec:7a:4b:03:5e:7f:4e:ab:91:e3: 2e:87:a8:9c:aa:bc:f7:68:4f:07:40:87:e3:d9:a8: ba:a6:1b:3b:f3:35:c4:3b:45:25:44:5a:63:05:7c: 24:dc:be:59:9f:e0:eb:6d:7a:48:f3:4a:09:f1:20: 08:9b:ec:33:f2:0b:b8:28:7e:85:7b:61:66:2c:40: b0:c9:c8:cf:f8:60:83:44:ad:ba:c8:a8:70:42:1d: 30:e8:83:8c:14:1d:0d:81:e8:11:34:22:5c:1a:fa: a2:5d:05:35:8d:1d:90:e2:e4:b6:d0:c7:da:d5:2f: 62:65:05:4c:47:33:5b:ea:03:89:78:ff:bd:89:d1: 30:67:ae:cb:1b:9d:bd:0d:f9:bd:34:ae:ab:c2:ab: 01:84:b5:12:c7:6f:a2:39:c9:aa:35:59:96:7b:b0: b2:21:3d:28:4b:ad:97:8b:9a:13:8a:f5:f9:8a:33: 23:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:DD:28:8F:48:38:76:9B:95:45:10:F3:F3:E1:69:71:67:F9:D6 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:b4:b2:65:bc:e6:98:4d:e2:4e:fe:78:75:0e:5c:83:20: f0:90:27:ac:e5:5d:b9:e7:05:61:f9:27:3d:ee:f3:66:1a:2d: e4:08:73:3a:59:5e:ba:d1:a2:12:2b:60:5f:b3:cd:72:42:af: 4d:24:76:1e:9f:07:98:3f:a0:78:63:4d:d5:48:26:9c:ef:90: a0:3d:71:eb:76:65:ec:da:a5:d5:05:96:9a:2f:a2:d2:c8:0e: 7a:1d:99:22:7f:c6:80:a9:69:b8:9d:1d:c5:4a:09:d9:b1:02: 3a:c3:1d:b2:61:b2:9c:bd:6b:bc:4a:4c:45:47:94:6b:b2:b3: 03:cd:57:df:f5:ac:75:85:14:90:85:2b:7e:7b:f2:0c:5c:c2: 68:97:44:04:c2:ec:91:bc:57:6f:1e:ca:44:4a:58:55:b8:3c: bb:26:b0:83:54:de:02:90:49:ed:13:b5:9b:45:d4:fd:61:3e: f9:c9:c5:76:21:0c:17:42:a6:1a:47:3f:2f:80:1e:dd:5d:9e: 8a:93:4c:cf:73:c6:85:35:a2:3f:5d:6d:71:98:b5:df:b0:33: 58:ed:ef:d3:ce:ad:2a:ac:e5:c1:ef:b1:49:a4:7e:1c:8e:be: 68:b1:b7:36:84:b1:20:b4:8e:5c:a6:6f:7e:7d:9b:9b:5b:03: 19:a3:60:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUStNn11fyYbquhYSg6fGXyrzgbOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNjA0MjcyMDE3MzhaFw0yNjA0MjkwMDAzMzhaMDMxMTAvBgNV BAMTKDczOEJERDI4OEY0ODM4NzY5Qjk1NDUxMEYzRjNFMTY5NzE2N0Y5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiACrsiT+yxeGcMl4fLsrVOa9P 55oMgKtzqpxSf6YbXyZ8zOFgOr7C7daJ3WVWpzHdDl5+vLvPQ8KqpUooc5gekl7D 470MZR1TwtirvjDG7HpLA15/TquR4y6HqJyqvPdoTwdAh+PZqLqmGzvzNcQ7RSVE WmMFfCTcvlmf4OttekjzSgnxIAib7DPyC7gofoV7YWYsQLDJyM/4YINErbrIqHBC HTDog4wUHQ2B6BE0Ilwa+qJdBTWNHZDi5LbQx9rVL2JlBUxHM1vqA4l4/72J0TBn rssbnb0N+b00rqvCqwGEtRLHb6I5yao1WZZ7sLIhPShLrZeLmhOK9fmKMyPjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc4vdKI9IOHablUUQ8/PhaXFn+dYwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjrbSy ZbzmmE3iTv54dQ5cgyDwkCes5V255wVh+Sc97vNmGi3kCHM6WV660aISK2Bfs81y Qq9NJHYenweYP6B4Y03VSCac75CgPXHrdmXs2qXVBZaaL6LSyA56HZkif8aAqWm4 nR3FSgnZsQI6wx2yYbKcvWu8SkxFR5RrsrMDzVff9ax1hRSQhSt+e/IMXMJol0QE wuyRvFdvHspESlhVuDy7JrCDVN4CkEntE7WbRdT9YT75ycV2IQwXQqYaRz8vgB7d XZ6Kk0zPc8aFNaI/XW1xmLXfsDNY7e/Tzq0qrOXB77FJpH4cjr5osbc2hLEgtI5c pm9+fZubWwMZo2Cs -----END CERTIFICATE-----Generated at Tue Apr 28 04:47:45 2026 by rpki-client