$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: cczXJDGoHd416oBzKwp4a9QTml1boSqy76BG/xGVKPk= Subject key identifier: BA:77:C2:56:5F:70:1E:C3:87:87:EF:38:88:95:9E:FE:CB:99:61:FA Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 364CCCCFACDFF7D57E64E227E88DAACB9D88FA7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 0724 Signing time: Tue 21 Apr 2026 12:14:56 +0000 Manifest this update: Tue 21 Apr 2026 12:09:56 +0000 Manifest next update: Wed 22 Apr 2026 14:35:56 +0000 Files and hashes: 1: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=) 2: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: HOJUjQHw3n3vLOp4ELlcKmpXxBRTpyVDdnuOO/DKcpY=) 3: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=) 4: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: D6sys78d1VHUPnQGvPOUfa9pG9olePRUcwiyJ1CBP8Y=) 5: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=) 6: 3231332e3133392e36372e302f32342d3234203d3e203231383430.roa (hash: pFdE5gy29hjYZhB9VvrsN9wvvGJKHZXcNTzoJSuW9uE=) 7: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: fJsom9F0kK13YCja85kMhtBJkHN5sEU0G4E2NSYs0/M=) 8: 3231332e3133392e36352e302f32342d3234203d3e203331373135.roa (hash: DLaV1sFNoIrmOFdG/w3fReS7aY1M4x1P7DARyXDc6LA=) 9: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=) 10: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: FY200EeTGQqoD9S8sjuLjCwpFp/7NCHvuVTZp+n3GiM=) 11: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=) 12: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=) 13: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=) 14: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=) 15: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: rJ4eUQV9EW/4zEru3iPGp2rvoa05JQMdC8bhqECOk60=) 16: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=) 17: 3231332e3133392e37352e302f32342d3234203d3e203231383430.roa (hash: v250iXtra+Z/KKJJC+rUD3hpGZMyGlwjTm5LLjqKRQ4=) 18: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=) 19: 3231332e3133392e38302e302f32342d3234203d3e203232343237.roa (hash: g2v8voZzjWLOYqIOoWNtEKKH0iUdXIeZf8etwqeRplw=) 20: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=) 21: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=) 22: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=) 23: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=) 24: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=) 25: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=) 26: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=) 27: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=) 28: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=) 29: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=) 30: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=) 31: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=) 32: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=) 33: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: f7C4581jJeKKnyLKipb2ZqdzpdWZFHeKPCD6CEFc/5E=) 34: 3231332e3133392e39322e302f32342d3234203d3e203331373135.roa (hash: BYAn2P29WRgE+5pdG5goQ8GsMhYsyn767YwPiSlp0aI=) 35: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=) 36: 3231332e3133392e38312e302f32342d3234203d3e203232343237.roa (hash: 5OXqLHfaMz4oBWakF90MFYsUXM1IOnkArdNd9qqILtU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4c:cc:cf:ac:df:f7:d5:7e:64:e2:27:e8:8d:aa:cb:9d:88:fa:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Apr 21 12:09:56 2026 GMT Not After : Apr 22 14:35:56 2026 GMT Subject: CN=BA77C2565F701EC38787EF3888959EFECB9961FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:53:ab:8a:44:aa:76:10:71:9a:e9:b2:ef: 25:59:a1:63:7b:dd:6c:e4:aa:3d:91:18:75:55:89: 2c:7e:b8:fe:45:6b:49:d2:2b:ce:2d:e2:55:d2:63: 71:00:ac:bd:6d:0d:b2:f3:5b:cd:19:56:9a:78:b5: 84:11:2f:cf:5d:7d:76:4e:5c:e7:cd:92:8f:0f:38: 5b:a2:2e:80:f5:36:f0:19:0a:2a:30:eb:48:e5:1b: 89:af:ca:d5:2b:72:43:67:1d:66:0c:a1:c9:1d:32: e6:24:96:6c:0e:0a:5f:66:d7:12:50:2a:35:59:61: 65:c2:74:bc:bd:96:ed:67:81:6f:71:20:9b:fa:51: 35:8c:a5:d1:7a:53:90:ff:c6:2a:ee:56:4f:1b:10: c5:a2:0c:b3:bc:c9:37:52:32:0c:c6:f6:d9:2b:c0: 84:3c:26:a4:1b:49:b4:a6:c7:b3:7f:54:85:9f:cf: 2a:51:63:2e:aa:0e:9d:8e:c6:49:9e:e4:2a:b0:cd: e8:5a:01:be:b8:9d:55:34:b9:de:bd:f6:46:4b:7b: 3b:77:c3:c9:0e:58:e4:7f:71:74:57:8e:1a:7a:6e: 0b:6c:36:74:a6:31:d6:5f:19:43:44:c0:3c:78:96: 66:7c:5d:52:99:a7:9d:5e:c6:75:fc:9d:f2:54:67: f8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:77:C2:56:5F:70:1E:C3:87:87:EF:38:88:95:9E:FE:CB:99:61:FA X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:78:da:43:af:28:81:29:4f:c1:2e:eb:76:f6:aa:85:36:58: c4:dc:2f:8c:c8:6e:2a:bb:54:eb:40:9e:4e:8a:76:90:04:d7: 14:ab:17:0c:1e:d7:22:c8:f5:0b:ae:fe:0c:3b:8a:6c:ac:ca: 79:98:d4:ac:2f:37:72:25:72:cb:86:e1:18:f0:5a:c1:de:0e: 1c:97:5b:4f:3f:bc:9c:3f:ea:1f:1d:10:6b:40:da:5d:bd:be: 7a:74:b9:b8:db:5e:17:16:25:b6:94:3a:5f:df:e7:77:d1:84: ec:ba:3c:ce:af:e0:8c:ce:10:6c:44:03:73:da:4d:f7:73:55: d8:98:11:61:58:e1:f0:4c:46:aa:75:e4:9b:b1:a5:5d:fb:e6: 96:2a:1c:12:a1:17:a2:b8:b9:7a:32:f9:22:a3:84:c5:f8:56: 6b:2a:6b:33:7d:f6:45:07:6e:34:41:bc:8a:a5:ef:cf:1f:ef: 2d:4e:80:b6:52:dd:d8:e4:d1:25:44:03:0b:d0:68:be:b8:5d: 85:25:15:f7:84:3c:c7:a2:d0:df:51:bc:d1:3f:b3:fa:a7:70: 7d:62:9b:c7:8e:dc:fb:7e:55:a9:cc:30:0c:74:77:ff:c4:56: 28:04:0f:f9:66:f5:29:aa:0f:2d:f5:89:7e:6f:bf:c1:14:c2: cc:53:68:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNkzMz6zf99V+ZOIn6I2qy52I+n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjA0MjExMjA5NTZaFw0yNjA0MjIxNDM1NTZaMDMxMTAvBgNV BAMTKEJBNzdDMjU2NUY3MDFFQzM4Nzg3RUYzODg4OTU5RUZFQ0I5OTYxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+FOrikSqdhBxmumy7yVZoWN7 3Wzkqj2RGHVViSx+uP5Fa0nSK84t4lXSY3EArL1tDbLzW80ZVpp4tYQRL89dfXZO XOfNko8POFuiLoD1NvAZCiow60jlG4mvytUrckNnHWYMockdMuYklmwOCl9m1xJQ KjVZYWXCdLy9lu1ngW9xIJv6UTWMpdF6U5D/xiruVk8bEMWiDLO8yTdSMgzG9tkr wIQ8JqQbSbSmx7N/VIWfzypRYy6qDp2Oxkme5CqwzehaAb64nVU0ud699kZLezt3 w8kOWOR/cXRXjhp6bgtsNnSmMdZfGUNEwDx4lmZ8XVKZp51exnX8nfJUZ/i1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUunfCVl9wHsOHh+84iJWe/suZYfowHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXjaQ68ogSlPwS7rdvaq hTZYxNwvjMhuKrtU60CeTop2kATXFKsXDB7XIsj1C67+DDuKbKzKeZjUrC83ciVy y4bhGPBawd4OHJdbTz+8nD/qHx0Qa0DaXb2+enS5uNteFxYltpQ6X9/nd9GE7Lo8 zq/gjM4QbEQDc9pN93NV2JgRYVjh8ExGqnXkm7GlXfvmliocEqEXori5ejL5IqOE xfhWayprM332RQduNEG8iqXvzx/vLU6AtlLd2OTRJUQDC9BovrhdhSUV94Q8x6LQ 31G80T+z+qdwfWKbx47c+35VqcwwDHR3/8RWKAQP+Wb1KaoPLfWJfm+/wRTCzFNo tg== -----END CERTIFICATE-----Generated at Wed Apr 22 04:08:10 2026 by rpki-client