$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: YUS3/DFTsrRGEKJW4C0BbdVkprC7Qld+zwzJ6eNra/4= Subject key identifier: 93:98:77:3F:82:9F:12:80:EC:BB:8F:67:F8:99:18:7A:62:D9:24:CE Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 3C3C7D7DB9698226EEF73C6A2A72E58C2499396C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: 40 Signing time: Wed 04 Mar 2026 16:10:23 +0000 Manifest this update: Wed 04 Mar 2026 16:05:23 +0000 Manifest next update: Thu 05 Mar 2026 18:20:23 +0000 Files and hashes: 1: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) 2: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 3: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 4: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) 5: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 6: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: R+Rvntpw82SU7PlZYxQEfJ3dX9pgo+NMlhz5EZkCMGc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3c:7d:7d:b9:69:82:26:ee:f7:3c:6a:2a:72:e5:8c:24:99:39:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Mar 4 16:05:23 2026 GMT Not After : Mar 5 18:20:23 2026 GMT Subject: CN=9398773F829F1280ECBB8F67F899187A62D924CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:7b:d8:56:fc:06:a1:d5:42:8e:7c:6f:47: 41:99:13:88:6d:5a:33:63:21:e7:76:20:80:b5:0b: 79:04:8d:9f:5f:12:8a:9e:92:ba:1a:91:8e:1d:2c: ca:18:b6:a2:b6:83:35:8b:bc:d4:3c:e1:71:b9:e9: 0c:75:fd:5d:20:4c:db:c5:95:8c:14:ca:ad:96:a8: ca:5d:60:25:16:b2:52:b6:16:9b:51:e9:06:f4:92: 5f:a1:86:29:72:65:df:50:fc:d6:e3:5f:42:4b:8b: 84:4d:1e:eb:ad:f4:e1:14:d6:f1:f6:b7:b2:84:79: 21:c3:1a:df:bf:0c:5a:61:ce:08:e0:b0:ce:ad:72: c6:6a:5f:a3:c0:6a:0f:13:72:54:0d:30:2b:21:38: 05:a1:a3:f3:2e:ea:72:e9:a1:90:e4:f2:ba:1b:f1: e3:52:db:c4:fa:ab:70:19:5b:31:3d:44:94:a5:c5: a4:0d:2a:cd:f1:c9:b2:e4:08:94:00:d4:7d:33:de: 93:81:80:f0:ec:3f:f3:f6:42:7d:51:53:a5:ea:cb: 0e:17:32:68:88:d3:97:4e:61:2a:8e:98:d9:74:b2: 85:f4:b7:eb:57:4d:e1:01:a9:f8:fb:b1:56:f5:e4: 2b:89:35:a5:2b:9c:ec:09:a8:98:1b:06:de:6d:76: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:98:77:3F:82:9F:12:80:EC:BB:8F:67:F8:99:18:7A:62:D9:24:CE X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:c0:33:c0:73:47:a6:92:a9:45:52:ec:b2:fb:7f:c6:39: 1f:92:38:6d:d3:19:d1:91:29:de:d9:2b:84:e5:c1:38:0b:1f: 99:84:5a:3c:9a:e8:dd:28:d2:93:4a:85:99:41:5a:bd:82:a4: 42:59:67:02:59:be:5c:2b:a2:19:1b:30:92:f6:95:1d:ca:c8: 80:c7:e9:c6:df:b0:46:26:87:21:2e:7e:68:4f:72:b9:e4:ad: b6:8f:a7:f5:35:2d:b0:d5:ed:02:d9:72:64:1a:de:78:bf:60: 80:f8:5f:29:3b:ac:f1:a3:a7:c7:3c:fe:b9:f4:9d:59:64:7b: bc:59:e3:4c:d3:b5:13:c9:e4:0c:15:df:13:88:a6:29:c5:c0: c0:71:b5:46:e8:25:c7:e2:51:d5:93:2a:d8:3c:b8:94:9f:f7: 67:23:88:89:1c:1e:ea:55:99:d1:ab:45:0c:59:03:e7:ed:90: 47:8d:7e:bb:fc:12:04:50:3c:cb:d4:e2:29:76:79:e2:e5:06: b3:9a:79:8d:45:81:72:c5:7a:99:91:2d:33:78:fd:d4:90:59: 3a:79:4c:44:ec:dc:70:27:4f:9e:c2:7d:2d:cf:ba:56:05:25: 09:21:85:12:fe:0c:a5:35:60:3b:73:4b:79:a6:96:d9:c7:97: 1d:40:af:9d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPDx9fblpgibu9zxqKnLljCSZOWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjAzMDQxNjA1MjNaFw0yNjAzMDUxODIwMjNaMDMxMTAvBgNV BAMTKDkzOTg3NzNGODI5RjEyODBFQ0JCOEY2N0Y4OTkxODdBNjJEOTI0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50HvYVvwGodVCjnxvR0GZE4ht WjNjIed2IIC1C3kEjZ9fEoqekroakY4dLMoYtqK2gzWLvNQ84XG56Qx1/V0gTNvF lYwUyq2WqMpdYCUWslK2FptR6Qb0kl+hhilyZd9Q/NbjX0JLi4RNHuut9OEU1vH2 t7KEeSHDGt+/DFphzgjgsM6tcsZqX6PAag8TclQNMCshOAWho/Mu6nLpoZDk8rob 8eNS28T6q3AZWzE9RJSlxaQNKs3xybLkCJQA1H0z3pOBgPDsP/P2Qn1RU6Xqyw4X MmiI05dOYSqOmNl0soX0t+tXTeEBqfj7sVb15CuJNaUrnOwJqJgbBt5tdiExAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUk5h3P4KfEoDsu49n+JkYemLZJM4wHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQs8Az wHNHppKpRVLssvt/xjkfkjht0xnRkSne2SuE5cE4Cx+ZhFo8mujdKNKTSoWZQVq9 gqRCWWcCWb5cK6IZGzCS9pUdysiAx+nG37BGJochLn5oT3K55K22j6f1NS2w1e0C 2XJkGt54v2CA+F8pO6zxo6fHPP659J1ZZHu8WeNM07UTyeQMFd8TiKYpxcDAcbVG 6CXH4lHVkyrYPLiUn/dnI4iJHB7qVZnRq0UMWQPn7ZBHjX67/BIEUDzL1OIpdnni 5QazmnmNRYFyxXqZkS0zeP3UkFk6eUxE7NxwJ0+ewn0tz7pWBSUJIYUS/gylNWA7 c0t5ppbZx5cdQK+d -----END CERTIFICATE-----Generated at Wed Mar 4 19:19:51 2026 by rpki-client