$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: pcUH5UFBLj8TYRpfyU6Hyf0Y1c0MEsZvC7MVpYtMBo8= Subject key identifier: E9:D2:DC:C4:49:D4:64:8F:7D:9E:A0:4C:88:42:41:D9:AC:82:3B:35 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 32EB6CDF092D24EF1B1FE1454CA27427D7A87755 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 81 Signing time: Sat 18 Apr 2026 07:33:54 +0000 Manifest this update: Sat 18 Apr 2026 07:28:54 +0000 Manifest next update: Sun 19 Apr 2026 11:09:54 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: OVLMZYg0WysJktKzx+0YDaCWY01eNcH7+pqbSLtBpIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 11:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:eb:6c:df:09:2d:24:ef:1b:1f:e1:45:4c:a2:74:27:d7:a8:77:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Apr 18 07:28:54 2026 GMT Not After : Apr 19 11:09:54 2026 GMT Subject: CN=E9D2DCC449D4648F7D9EA04C884241D9AC823B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:1c:8a:c0:08:62:45:5b:b2:54:e1:ca:7e: 95:f7:08:c9:1c:57:f1:80:46:fb:de:2b:73:a6:9c: 2a:31:03:0d:a1:67:5d:8c:cd:49:0c:d2:31:ff:e4: 32:6c:75:77:8e:37:50:00:90:3b:b3:d2:cd:cc:60: 2e:f2:4a:a8:c4:11:8a:55:5d:98:3b:36:ea:6c:84: 59:cd:51:76:e6:0d:8b:14:88:ac:e1:93:23:7f:7f: a5:6a:36:da:be:e3:65:a5:47:0e:5f:d6:74:6e:e0: 86:8a:6a:a8:ef:b4:4f:94:e1:e9:a4:b3:b0:cc:81: b4:7e:81:93:99:e6:a3:bf:35:66:37:72:a4:bb:b1: bb:9a:b4:6d:53:9f:2f:a2:68:99:2f:02:d0:fe:3b: c3:83:82:a1:d2:6e:44:bd:fd:ce:e1:df:16:c5:1b: 44:dd:2b:2c:92:42:93:e4:2d:e5:32:2d:a9:c8:d8: 24:3b:b2:b7:af:30:e2:63:e8:76:d7:17:21:26:87: e2:15:ed:5e:32:8f:b5:46:95:1b:85:b4:68:67:32: d7:66:32:61:06:e2:61:ee:af:61:6f:29:25:32:c5: cd:65:20:e3:02:eb:33:cc:b4:41:a3:f7:79:61:5a: e4:04:45:22:21:74:3d:b5:b6:ee:38:59:9f:27:20: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:DC:C4:49:D4:64:8F:7D:9E:A0:4C:88:42:41:D9:AC:82:3B:35 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e9:8d:89:4a:4f:02:2a:c5:a8:b8:46:d2:d5:4b:02:6c:58: 6a:f6:1a:92:f9:db:99:a6:09:bb:11:53:98:1e:33:48:64:00: 09:2a:f7:3c:2c:fe:fc:53:77:bf:e1:9f:af:5b:08:a1:0e:3e: 20:39:c0:b6:f4:fc:2d:0c:e6:79:9e:8f:03:46:ec:c4:8b:e5: 18:c4:4f:06:ac:27:14:80:36:9a:46:96:16:32:2c:fe:6c:68: 89:21:ce:d0:f8:73:19:0a:63:0c:dc:b0:72:39:43:d3:10:c3: d7:37:51:99:14:b7:72:09:e2:06:c5:02:ca:7e:c1:3d:c9:ce: 9d:8f:d9:ed:47:b5:68:ee:2c:a7:64:40:a1:9e:62:29:e7:32: 20:fe:a5:c3:ea:0d:49:5e:bf:87:37:f3:a9:19:ed:d7:8b:88: 43:60:56:65:d0:7f:d2:d2:3a:ff:f3:7b:22:1a:d0:79:2b:a4: b8:ab:7c:20:1e:0d:e6:f1:86:27:aa:72:70:f6:3e:80:73:db: f0:79:b2:c4:a6:11:38:66:e7:85:a1:3b:7c:c2:68:5a:68:9a: a6:96:da:31:31:f5:07:04:6e:9c:a4:05:59:e4:ef:ad:6f:90: 82:37:ea:1d:1e:0a:1b:0e:62:51:97:17:48:bc:41:c1:f2:4c: e0:d0:f4:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMuts3wktJO8bH+FFTKJ0J9eod1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA0MTgwNzI4NTRaFw0yNjA0MTkxMTA5NTRaMDMxMTAvBgNV BAMTKEU5RDJEQ0M0NDlENDY0OEY3RDlFQTA0Qzg4NDI0MUQ5QUM4MjNCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSByKwAhiRVuyVOHKfpX3CMkc V/GARvveK3OmnCoxAw2hZ12MzUkM0jH/5DJsdXeON1AAkDuz0s3MYC7ySqjEEYpV XZg7NupshFnNUXbmDYsUiKzhkyN/f6VqNtq+42WlRw5f1nRu4IaKaqjvtE+U4emk s7DMgbR+gZOZ5qO/NWY3cqS7sbuatG1Tny+iaJkvAtD+O8ODgqHSbkS9/c7h3xbF G0TdKyySQpPkLeUyLanI2CQ7srevMOJj6HbXFyEmh+IV7V4yj7VGlRuFtGhnMtdm MmEG4mHur2FvKSUyxc1lIOMC6zPMtEGj93lhWuQERSIhdD21tu44WZ8nIJsDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6dLcxEnUZI99nqBMiEJB2ayCOzUwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAc6Y2J Sk8CKsWouEbS1UsCbFhq9hqS+duZpgm7EVOYHjNIZAAJKvc8LP78U3e/4Z+vWwih Dj4gOcC29PwtDOZ5no8DRuzEi+UYxE8GrCcUgDaaRpYWMiz+bGiJIc7Q+HMZCmMM 3LByOUPTEMPXN1GZFLdyCeIGxQLKfsE9yc6dj9ntR7Vo7iynZEChnmIp5zIg/qXD 6g1JXr+HN/OpGe3Xi4hDYFZl0H/S0jr/83siGtB5K6S4q3wgHg3m8YYnqnJw9j6A c9vwebLEphE4ZueFoTt8wmhaaJqmltoxMfUHBG6cpAVZ5O+tb5CCN+odHgobDmJR lxdIvEHB8kzg0PSp -----END CERTIFICATE-----Generated at Sun Apr 19 02:44:50 2026 by rpki-client