$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: voQpt0hZ09Hw6crRBl+bpozl46iJU1STIefSJJ4cLls= Subject key identifier: 20:BB:AA:4A:CC:22:AB:1E:AC:07:78:05:43:63:55:27:DA:2E:35:11 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 1A0EE5B2B8669202AB7D43F00284D7466EAFF269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 01BE Signing time: Mon 12 Oct 2026 16:58:33 +0000 Manifest this update: Mon 12 Oct 2026 16:53:33 +0000 Manifest next update: Tue 13 Oct 2026 17:15:33 +0000 Files and hashes: 1: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 2: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 3: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 4: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: 3LKRLmHLUMw4A6H+gCq50LgnjsxnvnpCabGWDbd8Bwo=) 5: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 17:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0e:e5:b2:b8:66:92:02:ab:7d:43:f0:02:84:d7:46:6e:af:f2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Oct 12 16:53:33 2026 GMT Not After : Oct 13 17:15:33 2026 GMT Subject: CN=20BBAA4ACC22AB1EAC07780543635527DA2E3511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:d6:30:7c:0b:c1:7b:19:aa:ca:d0:eb:44: ba:29:47:e4:8c:ed:bd:87:20:2a:e9:85:54:63:ca: 87:11:9f:84:87:ba:7c:dd:44:33:f2:f9:f2:a7:4b: 3f:73:a0:16:78:f4:98:14:c3:98:ef:e8:29:d2:f9: 2f:1d:ef:80:43:5a:ef:f5:58:b8:5f:97:03:41:62: 1d:0b:2f:e5:a8:17:87:a6:e2:c2:7a:49:77:3d:c5: 91:36:07:c4:7e:6c:ad:b1:44:57:3e:a9:00:47:58: 81:6f:55:21:77:c0:ae:11:9f:32:70:ee:b9:8e:bf: e7:4c:43:fa:14:89:36:37:5f:c6:7e:cb:b6:8a:ca: eb:e7:08:1e:87:cb:b7:28:91:88:58:aa:b4:55:ae: f8:6d:ac:c7:95:a1:d2:70:e6:0a:87:a6:2d:e2:f5: 88:2a:3e:39:a0:a6:3b:50:36:0f:5f:b8:74:5d:e5: a9:37:11:d2:40:41:18:b2:28:d3:5e:63:b0:18:0b: ae:3b:4b:02:af:e5:aa:92:b2:42:02:bc:d3:36:e6: dc:a3:f8:db:4a:0b:df:e2:29:42:6b:9b:16:a4:11: 36:39:4a:e3:e6:e0:aa:92:67:63:1e:b9:35:e0:d0: 29:75:fc:4e:2c:b7:e5:33:c6:2b:01:5d:f1:9d:4a: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:AA:4A:CC:22:AB:1E:AC:07:78:05:43:63:55:27:DA:2E:35:11 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:00:6b:e7:57:ec:54:50:5a:6c:8e:ea:cc:fc:61:41:66:d0: 33:f2:56:f9:09:cd:b6:d7:7f:0d:e4:18:3b:35:64:c3:6d:f3: a7:55:b9:f8:6d:ef:17:5a:4b:4b:40:9c:fe:1c:5f:f6:41:28: 72:88:48:81:a4:53:14:c9:7d:b6:1e:ea:c5:ae:d0:e8:f4:8d: 4d:af:3b:82:61:3b:e5:24:be:d6:93:5b:ad:92:5f:9f:f3:a4: 48:e0:57:31:12:06:00:cc:97:6a:24:8c:ce:2f:ed:05:b8:93: 7d:0b:f0:bc:8e:ea:8c:3f:84:16:ca:ae:ea:4a:ef:f0:98:b8: ff:ab:98:d0:ba:5d:68:fc:1d:76:b2:7b:1d:98:91:d6:a7:f9: 2b:fc:5e:03:5c:5e:0a:60:c1:06:c5:5b:13:65:d1:ad:3e:70: 62:69:52:23:b0:ad:a3:8e:be:ec:15:56:44:66:8a:5a:da:7f: 0f:aa:8c:d3:3a:54:e5:9d:22:46:69:16:fb:e5:87:4d:b8:f2: 70:52:7e:38:74:6a:73:38:7a:1e:ec:c4:a1:02:25:c9:21:4a: 2a:aa:1c:ee:a4:32:93:d5:6a:5e:5d:38:1b:69:9f:46:63:01: 77:ec:ec:e8:de:75:3f:81:65:be:36:e9:88:e7:67:7d:ee:21: e1:bf:9b:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGg7lsrhmkgKrfUPwAoTXRm6v8mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjEwMTIxNjUzMzNaFw0yNjEwMTMxNzE1MzNaMDMxMTAvBgNV BAMTKDIwQkJBQTRBQ0MyMkFCMUVBQzA3NzgwNTQzNjM1NTI3REEyRTM1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbdYwfAvBexmqytDrRLopR+SM 7b2HICrphVRjyocRn4SHunzdRDPy+fKnSz9zoBZ49JgUw5jv6CnS+S8d74BDWu/1 WLhflwNBYh0LL+WoF4em4sJ6SXc9xZE2B8R+bK2xRFc+qQBHWIFvVSF3wK4RnzJw 7rmOv+dMQ/oUiTY3X8Z+y7aKyuvnCB6Hy7cokYhYqrRVrvhtrMeVodJw5gqHpi3i 9YgqPjmgpjtQNg9fuHRd5ak3EdJAQRiyKNNeY7AYC647SwKv5aqSskICvNM25tyj +NtKC9/iKUJrmxakETY5SuPm4KqSZ2MeuTXg0Cl1/E4st+UzxisBXfGdSrYvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUILuqSswiqx6sB3gFQ2NVJ9ouNREwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQBr51fsVFBabI7qzPxh QWbQM/JW+QnNttd/DeQYOzVkw23zp1W5+G3vF1pLS0Cc/hxf9kEocohIgaRTFMl9 th7qxa7Q6PSNTa87gmE75SS+1pNbrZJfn/OkSOBXMRIGAMyXaiSMzi/tBbiTfQvw vI7qjD+EFsqu6krv8Ji4/6uY0LpdaPwddrJ7HZiR1qf5K/xeA1xeCmDBBsVbE2XR rT5wYmlSI7Cto46+7BVWRGaKWtp/D6qM0zpU5Z0iRmkW++WHTbjycFJ+OHRqczh6 HuzEoQIlySFKKqoc7qQyk9VqXl04G2mfRmMBd+zs6N51P4FlvjbpiOdnfe4h4b+b rg== -----END CERTIFICATE-----Generated at Tue Oct 13 08:13:56 2026 by rpki-client