$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: 56LdjpchioJlOqFXtkEbN0FsRtyPtZ0DV7YDdCzHmcQ= Subject key identifier: 0A:40:1C:9E:F3:96:18:DF:21:0B:36:4C:B9:02:77:5A:C8:72:2F:04 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 52AAC54E1274F818A1205D6E9CDDBFF2A5336667 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 0124 Signing time: Thu 26 Feb 2026 11:14:28 +0000 Manifest this update: Thu 26 Feb 2026 11:09:28 +0000 Manifest next update: Fri 27 Feb 2026 11:36:28 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: sT1kaoBI0Ld44FoXLUvFgYO+HIEZ9CaV4QFyAfo+IdI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:c5:4e:12:74:f8:18:a1:20:5d:6e:9c:dd:bf:f2:a5:33:66:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Feb 26 11:09:28 2026 GMT Not After : Feb 27 11:36:28 2026 GMT Subject: CN=0A401C9EF39618DF210B364CB902775AC8722F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:3e:92:26:96:f0:fc:6c:be:6a:28:bf:d5: de:80:6a:b8:d5:02:36:90:fc:74:21:ec:b7:30:a1: 65:3a:45:3d:02:98:67:31:48:43:4a:ab:0c:97:27: 60:47:96:c3:50:49:84:00:cf:a7:1e:93:2a:5a:45: 52:94:88:a5:df:ee:a2:07:00:cd:be:c2:a0:d7:77: ae:99:a2:17:3f:23:92:7a:f2:fc:db:58:2f:66:8f: 59:ce:29:cd:f3:56:9a:3b:66:11:6f:d7:92:36:ea: 22:da:a0:a7:b1:42:3e:89:e4:ab:63:98:2d:20:9c: 4a:ae:ed:ed:48:0e:f6:68:fc:20:98:8c:70:b3:9b: 24:df:fe:07:70:6a:a0:84:27:d5:a2:ed:68:99:f9: 5c:f8:d1:21:6c:69:f7:42:7e:fb:a7:8b:c8:ce:86: 01:66:1d:0a:bf:8a:26:55:3f:d9:7b:23:4f:e7:09: 4a:2d:5e:9b:1f:a1:87:f2:58:90:46:79:bd:3a:c0: f2:6b:cd:18:89:9c:bd:8c:7b:c6:98:79:c0:e7:c4: 0a:6b:19:15:2d:30:92:9f:42:f7:5c:8e:20:b7:aa: 86:7f:c5:63:5b:85:39:4c:1c:c8:a5:1b:30:dd:18: 5e:4c:85:bc:b5:53:72:0a:6e:fe:3e:63:8a:8a:c3: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:1C:9E:F3:96:18:DF:21:0B:36:4C:B9:02:77:5A:C8:72:2F:04 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:6f:00:63:a1:fd:47:64:db:e7:9d:e3:2d:2a:7a:56:27: 0e:37:53:1a:6e:93:bf:8d:35:30:15:37:53:6f:69:54:bb:64: a6:66:61:9c:3e:81:7b:18:84:7d:2e:f6:75:34:24:0b:3f:73: d9:7c:4f:f6:db:cd:7a:46:0b:11:0c:a7:54:ea:3c:a4:cb:cb: 07:0b:15:2d:e2:be:b0:99:7c:08:37:3b:36:74:37:20:18:7e: 4f:27:a1:35:bd:c8:be:55:d5:ec:f2:ff:ff:39:c6:63:d3:0e: f2:03:e1:1c:c7:d4:d3:f4:f2:f1:13:b3:5a:95:35:e2:12:18: d3:e6:e8:77:16:35:9b:6a:88:5b:83:06:8a:66:a0:9f:6a:b8: 50:f2:b4:b6:9f:9f:6e:7e:2d:9f:1b:63:0a:7e:e7:12:8a:bc: c6:f4:82:6b:a4:5c:8f:f4:06:71:40:80:6a:07:a7:73:16:b5: 66:7e:3a:0b:c8:a0:0b:e2:5a:bd:33:66:38:07:dd:05:f5:ae: d2:43:ff:ce:3e:65:ba:e0:40:19:f4:3e:31:aa:21:f7:64:56: 39:1e:c3:e0:50:56:b5:53:b4:c5:75:5d:01:f1:26:9f:d2:10: 23:fe:bf:b2:e1:9f:33:99:26:f6:52:69:54:c6:e6:1b:43:b3: 78:94:5e:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUqrFThJ0+BihIF1unN2/8qUzZmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjAyMjYxMTA5MjhaFw0yNjAyMjcxMTM2MjhaMDMxMTAvBgNV BAMTKDBBNDAxQzlFRjM5NjE4REYyMTBCMzY0Q0I5MDI3NzVBQzg3MjJGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColT6SJpbw/Gy+aii/1d6AarjV AjaQ/HQh7LcwoWU6RT0CmGcxSENKqwyXJ2BHlsNQSYQAz6cekypaRVKUiKXf7qIH AM2+wqDXd66Zohc/I5J68vzbWC9mj1nOKc3zVpo7ZhFv15I26iLaoKexQj6J5Ktj mC0gnEqu7e1IDvZo/CCYjHCzmyTf/gdwaqCEJ9Wi7WiZ+Vz40SFsafdCfvuni8jO hgFmHQq/iiZVP9l7I0/nCUotXpsfoYfyWJBGeb06wPJrzRiJnL2Me8aYecDnxApr GRUtMJKfQvdcjiC3qoZ/xWNbhTlMHMilGzDdGF5Mhby1U3IKbv4+Y4qKwx+vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCkAcnvOWGN8hCzZMuQJ3WshyLwQwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/BG8A Y6H9R2Tb553jLSp6VicON1MabpO/jTUwFTdTb2lUu2SmZmGcPoF7GIR9LvZ1NCQL P3PZfE/22816RgsRDKdU6jyky8sHCxUt4r6wmXwINzs2dDcgGH5PJ6E1vci+VdXs 8v//OcZj0w7yA+Ecx9TT9PLxE7NalTXiEhjT5uh3FjWbaohbgwaKZqCfarhQ8rS2 n59ufi2fG2MKfucSirzG9IJrpFyP9AZxQIBqB6dzFrVmfjoLyKAL4lq9M2Y4B90F 9a7SQ//OPmW64EAZ9D4xqiH3ZFY5HsPgUFa1U7TFdV0B8Saf0hAj/r+y4Z8zmSb2 UmlUxuYbQ7N4lF4J -----END CERTIFICATE-----Generated at Thu Feb 26 13:47:40 2026 by rpki-client