$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft File: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft (raw, json) Hash identifier: /UgUup/C1FSfG+s+cPfEopACjs2zdR5QGjk7XyUeNX4= Subject key identifier: F9:25:55:AB:C6:E7:5F:40:93:E0:15:EF:2A:D8:48:6D:63:99:93:A3 Authority key identifier: 57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C Certificate issuer: /CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Certificate serial: 3B3A333CC80DCB0B85D6B65A9C4058273FA991BD Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft Manifest number: 03 Signing time: Sun 22 Feb 2026 18:13:25 +0000 Manifest this update: Sun 22 Feb 2026 18:08:25 +0000 Manifest next update: Mon 23 Feb 2026 21:23:25 +0000 Files and hashes: 1: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: BTLRcVPEb+mlVG5DuFyrRpHPvxtI1AwdQSn94JOGmgg=) 2: 575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl (hash: 9ohlLsATwtM5us1pOWJ6leLpaRCMaqkXRVifeW4MP+A=) 3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: JQ2KOFyxDm27iRQUekpK6hAiBu9T23O5crpHLbozT4Q=) 4: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: PYUZfxiEyn8hXYt+1cuoAJSsYY9rYNGWkjKHW4eXgHI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3a:33:3c:c8:0d:cb:0b:85:d6:b6:5a:9c:40:58:27:3f:a9:91:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C Validity Not Before: Feb 22 18:08:25 2026 GMT Not After : Feb 23 21:23:25 2026 GMT Subject: CN=F92555ABC6E75F4093E015EF2AD8486D639993A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:0a:4f:0a:5b:4f:c8:f3:d8:07:d9:58:ca: 81:8a:13:67:00:5e:7f:a6:51:6a:f9:47:5a:5b:01: 45:1d:a3:50:8b:58:b6:46:46:a0:da:17:82:60:b6: 4c:97:a5:69:12:5d:68:11:52:15:cd:97:4b:9e:3c: 30:bb:f8:2d:82:e3:28:44:73:77:35:d3:4c:85:74: cf:bc:6e:ff:f5:52:48:76:04:61:fb:61:76:ae:7b: b1:08:a8:56:04:5b:83:91:52:7e:d3:94:b0:a5:8a: 8e:19:21:a1:ef:7c:2c:ae:47:af:5d:af:01:c3:dd: 45:fd:9d:c3:bf:49:75:93:99:40:74:23:4f:fc:a5: 5e:1b:dd:2c:f5:c0:f0:53:1e:73:ed:44:5d:7f:30: 1f:48:32:c5:c7:3a:b0:7f:3e:af:d3:9f:41:bf:8f: 74:90:a2:d2:83:46:6b:2b:0a:d0:4a:1f:9c:40:86: b0:a1:1a:b9:87:8c:97:39:6e:7a:d9:fb:cd:1c:a6: 33:c4:cf:78:d5:dc:dd:c6:30:34:9f:48:83:56:85: 6b:a0:86:44:97:c1:a0:0e:fc:05:9c:3b:ca:48:c3: f9:29:1e:61:85:ac:d8:93:a6:50:b1:97:25:9d:4d: a8:49:7a:f2:a9:00:9a:69:28:bf:d0:a7:ca:9e:b6: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:25:55:AB:C6:E7:5F:40:93:E0:15:EF:2A:D8:48:6D:63:99:93:A3 X509v3 Authority Key Identifier: keyid:57:50:51:DD:9A:9B:FA:57:BC:C3:A2:B9:82:F2:4E:11:D9:BA:D6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/575051DD9A9BFA57BCC3A2B982F24E11D9BAD63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e1:e3:cd:68:be:9c:70:8f:b3:03:e3:c7:f4:63:2f:60:fb: 00:79:b0:ee:ea:d5:df:62:99:fe:90:e6:30:0f:d2:65:f9:57: 65:e7:b3:a6:b9:a9:08:bf:19:ce:e7:5a:55:81:93:aa:a4:92: cb:a6:c8:3d:4a:64:e6:ae:6f:8e:60:b3:fe:64:35:0d:e1:c1: a0:ed:85:92:9b:55:12:87:7c:b5:8d:e9:90:cb:ec:9e:b6:55: a8:2b:19:5b:49:34:94:58:29:3e:2a:48:93:d9:de:a9:2a:dd: c2:96:1a:b6:3f:bc:91:a9:9c:84:58:b9:66:0e:07:01:35:cc: e9:7c:6c:4d:95:5b:62:c7:62:46:af:97:19:86:f9:a5:55:ae: 78:45:2d:9c:04:c1:ac:f6:22:93:7d:ec:43:20:60:31:fd:35: 7e:d5:9c:eb:f2:a2:c0:b3:14:63:6f:3e:56:cf:dd:b6:73:c8: d3:8b:d0:93:35:e1:a7:1d:bf:30:10:8b:7a:a0:c4:02:16:77: a3:73:29:ad:3b:96:9f:5b:16:dc:55:7e:90:59:2e:df:de:3b: 62:47:d5:9e:eb:c1:7b:72:b0:99:66:c1:99:f3:4e:12:f6:20: 95:11:03:34:50:6a:2e:7d:57:d1:a6:20:67:d2:36:61:29:62: d6:8d:94:56 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUOzozPMgNywuF1rZanEBYJz+pkb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFE OUJBRDYzQzAeFw0yNjAyMjIxODA4MjVaFw0yNjAyMjMyMTIzMjVaMDMxMTAvBgNV BAMTKEY5MjU1NUFCQzZFNzVGNDA5M0UwMTVFRjJBRDg0ODZENjM5OTkzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQgpPCltPyPPYB9lYyoGKE2cA Xn+mUWr5R1pbAUUdo1CLWLZGRqDaF4JgtkyXpWkSXWgRUhXNl0uePDC7+C2C4yhE c3c100yFdM+8bv/1Ukh2BGH7YXaue7EIqFYEW4ORUn7TlLClio4ZIaHvfCyuR69d rwHD3UX9ncO/SXWTmUB0I0/8pV4b3Sz1wPBTHnPtRF1/MB9IMsXHOrB/Pq/Tn0G/ j3SQotKDRmsrCtBKH5xAhrChGrmHjJc5bnrZ+80cpjPEz3jV3N3GMDSfSINWhWug hkSXwaAO/AWcO8pIw/kpHmGFrNiTplCxlyWdTahJevKpAJppKL/Qp8qetjkpAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU+SVVq8bnX0CT4BXvKthIbWOZk6MwHwYDVR0j BBgwFoAUV1BR3Zqb+le8w6K5gvJOEdm61jwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvNTc1MDUxREQ5QTlCRkE1N0JDQzNBMkI5ODJGMjRFMTFEOUJBRDYzQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81NzUwNTFERDlBOUJGQTU3QkNDM0EyQjk4 MkYyNEUxMUQ5QkFENjNDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yLzU3NTA1MURE OUE5QkZBNTdCQ0MzQTJCOTgyRjI0RTExRDlCQUQ2M0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC54ePN aL6ccI+zA+PH9GMvYPsAebDu6tXfYpn+kOYwD9Jl+Vdl57OmuakIvxnO51pVgZOq pJLLpsg9SmTmrm+OYLP+ZDUN4cGg7YWSm1USh3y1jemQy+yetlWoKxlbSTSUWCk+ KkiT2d6pKt3Clhq2P7yRqZyEWLlmDgcBNczpfGxNlVtix2JGr5cZhvmlVa54RS2c BMGs9iKTfexDIGAx/TV+1Zzr8qLAsxRjbz5Wz922c8jTi9CTNeGnHb8wEIt6oMQC FnejcymtO5afWxbcVX6QWS7f3jtiR9We68F7crCZZsGZ804S9iCVEQM0UGoufVfR piBn0jZhKWLWjZRW -----END CERTIFICATE-----Generated at Mon Feb 23 07:34:41 2026 by rpki-client