$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: hqnj1F0keBWi57k2kt2BdV5NuyqKND9D/ZKHTAZDrZg= Subject key identifier: 62:CC:21:01:84:6B:AB:10:58:EC:28:0B:DC:2B:D8:86:5B:9F:63:96 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 2922540905E5E31E697F17D184371D51560C2A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: E9 Signing time: Fri 10 Apr 2026 15:48:34 +0000 Manifest this update: Fri 10 Apr 2026 15:43:34 +0000 Manifest next update: Sat 11 Apr 2026 15:54:34 +0000 Files and hashes: 1: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 2: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 3: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 4: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 5: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: dnUAn9nPzkqJzeOWsdAXTJjxC9GjggZ+iFw8F7vLDDI=) 6: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 7: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 8: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) 9: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 15:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:22:54:09:05:e5:e3:1e:69:7f:17:d1:84:37:1d:51:56:0c:2a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Apr 10 15:43:34 2026 GMT Not After : Apr 11 15:54:34 2026 GMT Subject: CN=62CC2101846BAB1058EC280BDC2BD8865B9F6396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:69:8b:11:b7:aa:ad:51:f4:2a:d1:9a:29: 99:b5:bb:0a:d3:e1:08:eb:71:e2:b0:da:86:7d:d0: 8e:27:e8:ad:6e:12:75:b2:46:e8:14:52:8a:a8:d2: f4:43:2a:87:09:43:b7:eb:98:67:60:c9:ed:25:00: 74:96:84:42:3a:5b:65:d1:6f:4f:a9:60:38:b8:fe: ac:1a:87:92:57:11:67:ea:9c:8a:86:72:2a:76:b8: b0:c8:80:4a:e5:68:42:45:e9:fd:1c:97:d1:fa:2a: d0:a1:ef:bc:49:f5:72:19:0b:0f:38:7b:d6:80:c6: 92:6b:67:b9:aa:4b:a3:0d:82:39:56:54:cd:b2:70: e6:a6:7b:f6:ab:a9:a4:6a:36:7e:76:5c:bc:a5:9f: 3a:47:41:26:c2:90:90:84:00:f9:d0:c5:5c:df:c0: 01:77:71:70:3e:8e:7e:4d:53:b3:c4:96:f9:06:0d: 05:b9:54:b8:d0:3f:35:d7:8f:5a:55:7e:c7:30:0c: e7:24:90:04:0a:8e:08:03:55:b1:f3:51:b1:7c:ef: a3:e2:ed:45:9a:22:3f:e0:dd:d6:23:55:42:00:52: 94:fc:37:a7:0e:56:b1:d8:75:ab:c9:20:0b:19:19: 59:18:3d:f4:4e:5b:c7:58:f6:87:ac:a8:27:23:f7: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:21:01:84:6B:AB:10:58:EC:28:0B:DC:2B:D8:86:5B:9F:63:96 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c0:19:9d:ff:12:e7:46:02:28:52:60:9e:4a:64:a0:40:1f: 25:0b:7f:54:29:71:8c:9b:04:71:b1:dc:1b:a3:d6:96:99:cf: 6f:22:15:df:68:77:be:ff:70:93:c4:b4:95:8e:6c:21:47:a9: 68:f8:c0:fc:71:cb:06:4a:74:9e:3f:22:2e:06:5e:ea:b1:6f: fb:45:cc:d7:0c:d0:4d:d5:eb:3a:71:c6:45:45:6c:41:58:f1: d4:89:e6:ac:5c:41:8a:b8:c2:94:bb:57:e6:29:8c:81:fe:c4: 58:47:17:00:a7:47:b4:f7:32:8c:d1:32:81:20:67:c0:54:a2: be:44:3c:a4:88:38:20:20:b3:c2:04:22:12:8f:61:24:e5:f9: 00:0b:fe:f8:f6:8d:8c:84:a2:47:cd:23:c2:e1:f5:6c:6b:6a: 02:d4:0c:ff:20:c9:c5:2e:5c:0c:97:87:02:75:c1:60:3d:b4: 71:bc:5c:99:95:4a:51:bb:dc:68:1a:e6:fc:d8:9b:5c:3e:6e: 2b:8c:54:f9:81:39:38:a9:90:c8:b2:d8:1f:4f:22:13:7e:ae: 80:57:fc:1f:86:fc:ea:f0:f6:ef:a8:44:f2:c0:de:5e:98:47: c8:3f:35:a5:2b:64:62:b5:55:d4:7c:65:c9:cc:d2:7b:9c:5e: 94:e7:9c:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKSJUCQXl4x5pfxfRhDcdUVYMKh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA0MTAxNTQzMzRaFw0yNjA0MTExNTU0MzRaMDMxMTAvBgNV BAMTKDYyQ0MyMTAxODQ2QkFCMTA1OEVDMjgwQkRDMkJEODg2NUI5RjYzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWmmLEbeqrVH0KtGaKZm1uwrT 4QjrceKw2oZ90I4n6K1uEnWyRugUUoqo0vRDKocJQ7frmGdgye0lAHSWhEI6W2XR b0+pYDi4/qwah5JXEWfqnIqGcip2uLDIgErlaEJF6f0cl9H6KtCh77xJ9XIZCw84 e9aAxpJrZ7mqS6MNgjlWVM2ycOame/arqaRqNn52XLylnzpHQSbCkJCEAPnQxVzf wAF3cXA+jn5NU7PElvkGDQW5VLjQPzXXj1pVfscwDOckkAQKjggDVbHzUbF876Pi 7UWaIj/g3dYjVUIAUpT8N6cOVrHYdavJIAsZGVkYPfROW8dY9oesqCcj98HRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYswhAYRrqxBY7CgL3CvYhlufY5YwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcAZnf8S50YCKFJgnkpk oEAfJQt/VClxjJsEcbHcG6PWlpnPbyIV32h3vv9wk8S0lY5sIUepaPjA/HHLBkp0 nj8iLgZe6rFv+0XM1wzQTdXrOnHGRUVsQVjx1InmrFxBirjClLtX5imMgf7EWEcX AKdHtPcyjNEygSBnwFSivkQ8pIg4ICCzwgQiEo9hJOX5AAv++PaNjISiR80jwuH1 bGtqAtQM/yDJxS5cDJeHAnXBYD20cbxcmZVKUbvcaBrm/NibXD5uK4xU+YE5OKmQ yLLYH08iE36ugFf8H4b86vD276hE8sDeXphHyD81pStkYrVV1HxlyczSe5xelOec eg== -----END CERTIFICATE-----Generated at Sat Apr 11 02:38:48 2026 by rpki-client