$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft (raw, json) Hash identifier: IODX7mFNavPkruiiGyy/cuOZwweWCayWQo+vF5hmpfE= Subject key identifier: A8:71:FE:E3:B9:CE:83:FD:9C:8C:40:CE:D7:F1:0A:B4:32:51:17:5B Authority key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 Certificate issuer: /CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Certificate serial: 611D728A31AD54B8CDFF360E9959CC46A159E2A2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft Manifest number: 013F Signing time: Thu 10 Sep 2026 03:23:05 +0000 Manifest this update: Thu 10 Sep 2026 03:18:05 +0000 Manifest next update: Fri 11 Sep 2026 06:19:05 +0000 Files and hashes: 1: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 9OCqZ/d+1rU6CR9p3YDhWbf8ZADN9O93ycDA5zxlgcg=) 2: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: Qe+s8/fAnIQEeutwNPKlMCYxj4th5oSw8TX5K8siNS0=) 3: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl (hash: agkzTr0VlV6291LCKlf6oN+LEYJWI7k6mKALh5BY5so=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1d:72:8a:31:ad:54:b8:cd:ff:36:0e:99:59:cc:46:a1:59:e2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9 Validity Not Before: Sep 10 03:18:05 2026 GMT Not After : Sep 11 06:19:05 2026 GMT Subject: CN=A871FEE3B9CE83FD9C8C40CED7F10AB43251175B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:34:fd:71:4f:b8:fd:dc:4a:19:5a:54:05: dc:6d:59:63:01:6c:94:27:c6:f1:2a:1c:8c:c5:de: bd:5d:66:a2:91:e6:04:9f:6c:01:d1:11:70:4e:37: 0c:bd:20:9f:cb:9b:bf:a5:a0:1d:66:75:b5:cb:7f: 44:c1:c4:dc:fe:4c:72:c8:66:00:50:e4:ed:7e:dc: b6:77:1d:c3:d5:ac:37:f1:01:e5:cd:b8:26:03:53: c4:a8:99:95:30:57:9d:64:34:cc:fa:01:6e:96:5e: 8d:af:7d:02:4b:d5:c7:e4:36:7a:59:d2:84:f0:30: d6:c7:bb:31:39:55:80:8c:bb:2b:27:c8:4d:c6:b3: 6e:f3:6b:e6:01:fb:90:8f:61:21:b2:2c:fd:c1:55: 86:f0:9b:00:31:aa:03:5c:29:59:74:88:f5:fd:45: 33:69:67:eb:22:84:7a:80:9b:e7:1a:ab:cb:e6:7a: 68:7c:14:d5:63:96:0a:4d:90:66:70:19:e6:79:32: b3:69:a4:e2:e8:fb:bb:55:82:fb:cd:7c:d2:7f:af: c8:fc:16:48:f8:b2:96:31:26:15:f3:c5:38:2f:17: 19:72:6a:8c:88:1b:e9:15:9b:7b:a4:79:b7:1a:28: 40:f6:98:26:a5:5c:f9:96:f6:63:82:7e:9e:73:9e: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:71:FE:E3:B9:CE:83:FD:9C:8C:40:CE:D7:F1:0A:B4:32:51:17:5B X509v3 Authority Key Identifier: keyid:D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dc:70:74:88:a9:1d:fd:ff:81:31:fe:91:a1:ab:1d:ab:fb: 55:c7:2f:ac:79:43:a3:a5:4e:69:8f:5a:22:b0:9a:46:08:6d: 80:64:82:0e:b1:e0:53:13:9d:4e:2d:72:4c:b2:1d:7d:59:35: 29:b9:13:90:06:c8:72:82:05:0d:fb:87:1a:c2:bb:4a:02:0c: 89:bc:b8:f5:5b:f0:8d:aa:60:8f:c9:36:52:ff:73:c8:c6:f1: c4:f4:4e:9d:a2:f7:28:26:1c:6d:4d:4f:d2:c9:52:4e:60:4c: 49:dd:2b:9e:24:67:05:0b:3b:50:ea:32:c5:08:07:9a:7c:44: 7b:29:b1:c1:ba:5a:06:0a:bc:27:86:05:7c:83:ca:d0:be:62: 59:e0:1f:a5:65:a6:66:05:b3:ab:7b:fd:1e:d7:9a:a8:38:5d: fb:7e:e2:4b:49:f6:1f:d7:d2:98:01:31:8d:2c:96:9f:a3:5c: 9d:b4:92:2d:af:5f:4a:2e:a9:a4:84:da:cc:e4:8a:fd:2d:c8: c2:79:47:62:b1:70:20:a3:b9:ef:c2:f9:7d:b8:f5:5d:82:6d: df:a7:fb:32:f4:c7:a6:83:4e:8c:bb:3d:4a:eb:c4:1e:49:25: 89:8b:0c:09:91:d6:a6:89:e3:d1:06:5e:76:1c:c9:f1:02:92: a9:9b:6e:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYR1yijGtVLjN/zYOmVnMRqFZ4qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0 NENGMzdFOTAeFw0yNjA5MTAwMzE4MDVaFw0yNjA5MTEwNjE5MDVaMDMxMTAvBgNV BAMTKEE4NzFGRUUzQjlDRTgzRkQ5QzhDNDBDRUQ3RjEwQUI0MzI1MTE3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+gTT9cU+4/dxKGVpUBdxtWWMB bJQnxvEqHIzF3r1dZqKR5gSfbAHREXBONwy9IJ/Lm7+loB1mdbXLf0TBxNz+THLI ZgBQ5O1+3LZ3HcPVrDfxAeXNuCYDU8SomZUwV51kNMz6AW6WXo2vfQJL1cfkNnpZ 0oTwMNbHuzE5VYCMuysnyE3Gs27za+YB+5CPYSGyLP3BVYbwmwAxqgNcKVl0iPX9 RTNpZ+sihHqAm+caq8vmemh8FNVjlgpNkGZwGeZ5MrNppOLo+7tVgvvNfNJ/r8j8 Fkj4spYxJhXzxTgvFxlyaoyIG+kVm3ukebcaKED2mCalXPmW9mOCfp5znsSvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqHH+47nOg/2cjEDO1/EKtDJRF1swHwYDVR0j BBgwFoAU1e5j2bHS1cb63JoWnptK9kTPN+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzQvRDVFRTYzRDlCMUQyRDVDNkZBREM5QTE2OUU5QjRBRjY0NENGMzdFOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9ENUVFNjNEOUIxRDJENUM2RkFEQzlBMTY5 RTlCNEFGNjQ0Q0YzN0U5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi80L0Q1RUU2M0Q5 QjFEMkQ1QzZGQURDOUExNjlFOUI0QUY2NDRDRjM3RTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/3HB0 iKkd/f+BMf6Roasdq/tVxy+seUOjpU5pj1oisJpGCG2AZIIOseBTE51OLXJMsh19 WTUpuROQBshyggUN+4cawrtKAgyJvLj1W/CNqmCPyTZS/3PIxvHE9E6dovcoJhxt TU/SyVJOYExJ3SueJGcFCztQ6jLFCAeafER7KbHBuloGCrwnhgV8g8rQvmJZ4B+l ZaZmBbOre/0e15qoOF37fuJLSfYf19KYATGNLJafo1ydtJItr19KLqmkhNrM5Ir9 LcjCeUdisXAgo7nvwvl9uPVdgm3fp/sy9Memg06Muz1K68QeSSWJiwwJkdamiePR Bl52HMnxApKpm26D -----END CERTIFICATE-----Generated at Thu Sep 10 10:00:45 2026 by rpki-client