$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: x3X7bFyTxYEaX5NxjlKzz3eKuwt+zFuVkcDKv4MdKHc= Subject key identifier: 76:0F:B1:E4:66:CE:E6:BF:29:BF:95:82:B9:3A:DA:56:AC:E8:50:4E Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 27D30918CEDB1933D99B5313A74C86FF9430574C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 017E Signing time: Tue 25 Aug 2026 09:40:38 +0000 Manifest this update: Tue 25 Aug 2026 09:35:38 +0000 Manifest next update: Wed 26 Aug 2026 11:47:38 +0000 Files and hashes: 1: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 2: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 3: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 4: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 5: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: GFegJZpXQd0LR4ti26vya+646ubniEmChQ0E7xfHEGU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 11:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d3:09:18:ce:db:19:33:d9:9b:53:13:a7:4c:86:ff:94:30:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Aug 25 09:35:38 2026 GMT Not After : Aug 26 11:47:38 2026 GMT Subject: CN=760FB1E466CEE6BF29BF9582B93ADA56ACE8504E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:10:d3:cf:d8:eb:ff:f3:6f:3c:39:fd:9d: 4d:8c:6c:ea:ef:2e:17:6a:92:1e:60:70:ac:cf:4e: 8c:93:3d:49:ec:48:e4:83:f3:ff:7a:d9:13:7e:ba: 1d:17:06:24:e2:20:77:f9:5c:28:73:c4:1d:7e:01: 1e:d5:1e:1a:b3:b0:97:72:b7:41:23:f0:ca:20:0e: 3f:0c:ec:c0:11:d5:60:03:cd:da:da:c3:47:58:90: 2b:77:b9:04:9d:b6:49:8d:87:1c:e6:c1:5b:e1:6a: 73:0b:dc:6e:0d:8c:17:ff:b3:42:8b:a8:d9:fb:5f: 78:4c:e1:5a:27:d4:3e:23:53:b4:ab:32:59:27:2f: 6f:0e:03:09:c3:ad:05:94:ad:0f:fa:c3:64:fc:67: ed:11:f1:58:6e:3a:33:30:5a:11:52:2e:7e:aa:dc: 8f:a0:87:02:4e:83:32:1f:fc:ed:b9:f6:31:49:44: 05:07:36:c6:3c:9f:ce:c8:ae:46:e7:b8:4f:07:54: 08:d0:34:86:4a:9b:a2:28:a0:a8:e6:03:01:2b:0f: aa:fd:a5:1c:c7:9c:fd:b4:6d:5f:5d:74:30:5f:2d: 6c:bb:66:4e:3a:c3:c8:81:30:06:09:ae:73:db:a2: 44:2b:15:b6:f8:46:c9:87:51:95:c8:4a:32:f1:fd: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:B1:E4:66:CE:E6:BF:29:BF:95:82:B9:3A:DA:56:AC:E8:50:4E X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fc:f2:f4:ce:90:ed:79:41:b6:13:20:ef:b5:e7:f7:69:b3: 8f:a1:b0:a5:3f:2e:90:9f:f6:be:a6:82:02:49:b5:31:81:83: 12:3f:2a:d9:76:b4:27:b3:5c:c8:65:0b:82:35:80:2e:89:c1: f1:97:90:23:6c:6e:4b:28:06:64:6f:4b:9b:82:52:d0:75:c7: bf:db:c5:db:a1:76:9a:96:80:0e:35:1e:30:fa:bd:4b:83:b3: 54:ce:13:30:f1:0d:9e:21:88:28:a0:81:e6:dc:96:48:1c:4d: f1:34:21:89:b6:ce:48:66:78:7e:df:0d:f1:c9:c3:24:4a:7f: 60:62:c7:28:68:89:39:8a:d6:0a:ad:93:3e:56:2d:8f:fb:2f: 37:1f:a0:30:14:c2:9c:81:38:dc:c4:24:e6:df:99:4c:16:93: 98:d1:71:df:4d:f4:27:23:d0:6b:83:3d:f4:51:30:eb:64:75: a4:df:97:71:fe:4c:c1:8d:6c:97:df:10:1a:61:86:e8:1f:fd: 66:af:b5:89:29:62:f2:5f:d4:f3:f0:13:70:01:ed:0c:e8:b5: d7:88:87:05:8c:9a:27:fd:2f:69:d6:0f:4d:a4:e1:6e:61:0a: 67:68:6e:b1:f6:40:62:cf:99:05:51:a9:ba:89:09:21:18:61: 2c:1a:10:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ9MJGM7bGTPZm1MTp0yG/5QwV0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA4MjUwOTM1MzhaFw0yNjA4MjYxMTQ3MzhaMDMxMTAvBgNV BAMTKDc2MEZCMUU0NjZDRUU2QkYyOUJGOTU4MkI5M0FEQTU2QUNFODUwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wBDTz9jr//NvPDn9nU2MbOrv Lhdqkh5gcKzPToyTPUnsSOSD8/962RN+uh0XBiTiIHf5XChzxB1+AR7VHhqzsJdy t0Ej8MogDj8M7MAR1WADzdraw0dYkCt3uQSdtkmNhxzmwVvhanML3G4NjBf/s0KL qNn7X3hM4Von1D4jU7SrMlknL28OAwnDrQWUrQ/6w2T8Z+0R8VhuOjMwWhFSLn6q 3I+ghwJOgzIf/O259jFJRAUHNsY8n87IrkbnuE8HVAjQNIZKm6IooKjmAwErD6r9 pRzHnP20bV9ddDBfLWy7Zk46w8iBMAYJrnPbokQrFbb4RsmHUZXISjLx/UZ/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdg+x5GbO5r8pv5WCuTraVqzoUE4wHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfzy9M6Q7XlBthMg77Xn 92mzj6GwpT8ukJ/2vqaCAkm1MYGDEj8q2Xa0J7NcyGULgjWALonB8ZeQI2xuSygG ZG9Lm4JS0HXHv9vF26F2mpaADjUeMPq9S4OzVM4TMPENniGIKKCB5tyWSBxN8TQh ibbOSGZ4ft8N8cnDJEp/YGLHKGiJOYrWCq2TPlYtj/svNx+gMBTCnIE43MQk5t+Z TBaTmNFx3030JyPQa4M99FEw62R1pN+Xcf5MwY1sl98QGmGG6B/9Zq+1iSli8l/U 8/ATcAHtDOi114iHBYyaJ/0vadYPTaThbmEKZ2husfZAYs+ZBVGpuokJIRhhLBoQ sA== -----END CERTIFICATE-----Generated at Tue Aug 25 15:38:54 2026 by rpki-client