$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: 6ghn38JLW62WkZA1wtmrj86G6q7CTVddoLcMj0P4fmM= Subject key identifier: 94:F2:C2:D9:C6:AE:73:9A:05:07:F3:EB:10:AD:EF:BC:F1:46:FC:D7 Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 260B116AF38276851A4B7FA02FE95F134228A6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 069E Signing time: Tue 06 Oct 2026 13:25:47 +0000 Manifest this update: Tue 06 Oct 2026 13:20:47 +0000 Manifest next update: Wed 07 Oct 2026 15:26:47 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) 3: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: Ky97X9TumBTmH6ZiLW6cCPj9WI8oTaFy+9qF60R0Iew=) 4: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 15:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0b:11:6a:f3:82:76:85:1a:4b:7f:a0:2f:e9:5f:13:42:28:a6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Oct 6 13:20:47 2026 GMT Not After : Oct 7 15:26:47 2026 GMT Subject: CN=94F2C2D9C6AE739A0507F3EB10ADEFBCF146FCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:98:0a:f9:13:90:af:f2:8b:94:31:8e:02: 77:19:5d:e9:9f:94:eb:a0:00:02:51:c9:a9:95:85: 41:c8:31:bb:a7:26:91:8d:d2:39:7a:ce:7c:ef:3f: e7:20:f9:a9:3b:ae:1d:88:34:23:ea:03:2f:4d:eb: 21:8f:35:b8:2c:68:af:53:35:28:6a:85:92:d8:19: c1:46:61:8c:aa:80:66:dd:03:9f:b5:53:13:65:57: 9f:07:24:6a:49:5c:8e:8e:13:dc:bb:ba:97:e1:b3: 8b:6d:e8:d1:fd:6b:2f:8a:5c:e3:d7:2d:4b:b5:b4: 87:d5:97:fd:94:dc:d0:1c:68:61:a4:dd:67:22:c0: 13:48:a8:81:c6:94:15:cf:f6:19:03:3d:13:1c:44: 17:ec:05:52:66:fa:f8:38:4d:67:2b:ba:b3:3b:9c: 6e:03:c3:d3:6d:a6:c8:88:06:e7:8d:6f:2f:1e:bc: 1b:9f:df:64:d1:7d:67:bb:87:64:87:87:cc:88:a1: ce:cb:0b:0f:14:45:84:c8:69:d2:c6:0b:58:3c:0c: fe:37:1e:ef:7b:57:fc:4b:49:b3:8f:09:8e:42:33: c3:6e:8a:d3:ec:3b:73:2c:c5:78:9d:36:ee:a5:8e: 70:3e:e5:61:bd:ef:cc:49:c1:d8:ff:0d:f6:80:1f: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F2:C2:D9:C6:AE:73:9A:05:07:F3:EB:10:AD:EF:BC:F1:46:FC:D7 X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:eb:3e:e8:24:60:34:26:9a:a5:f4:ab:d0:d6:c4:f0:64:66: 1d:a4:ec:5e:b3:8a:a0:c4:53:94:99:58:99:8d:03:5d:d4:3e: 99:b6:66:ae:4d:32:0f:10:be:2f:21:e0:e4:94:a6:3a:33:40: 8e:67:dc:f8:99:9c:df:45:52:f3:16:ef:d5:d0:f4:69:2c:20: 6a:79:14:48:e3:10:a5:18:9b:b1:c5:5f:55:6a:34:e1:af:6b: 87:18:22:94:3c:4e:d1:9c:67:d6:e2:49:4e:cd:03:c5:c2:e5: e4:4b:de:5f:a3:54:a4:fe:04:24:89:75:20:b1:ff:e8:e3:f1: 9b:4f:61:7f:76:49:b4:6c:39:27:cb:56:85:63:48:7a:1c:52: cb:ca:52:a7:2b:ad:57:e9:a3:92:fa:b1:31:b8:25:e5:6a:4e: 6e:56:c9:8a:13:56:64:71:b9:e4:ac:69:24:0a:56:af:ef:89: 29:bc:9a:82:85:06:ec:bd:c7:84:ae:03:7b:57:53:9c:39:ae: 8f:84:08:5f:4e:dd:6b:80:be:46:b7:f4:c4:4a:0d:db:cd:d8: 63:3e:b3:85:3e:ee:b3:80:a0:44:28:58:57:82:cf:76:cd:c1: 63:1d:3f:30:53:b0:ad:34:81:ce:6f:5b:a2:d6:64:52:7c:cd: 01:de:99:f5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJgsRavOCdoUaS3+gL+lfE0Iopu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjEwMDYxMzIwNDdaFw0yNjEwMDcxNTI2NDdaMDMxMTAvBgNV BAMTKDk0RjJDMkQ5QzZBRTczOUEwNTA3RjNFQjEwQURFRkJDRjE0NkZDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3JgK+ROQr/KLlDGOAncZXemf lOugAAJRyamVhUHIMbunJpGN0jl6znzvP+cg+ak7rh2INCPqAy9N6yGPNbgsaK9T NShqhZLYGcFGYYyqgGbdA5+1UxNlV58HJGpJXI6OE9y7upfhs4tt6NH9ay+KXOPX LUu1tIfVl/2U3NAcaGGk3WciwBNIqIHGlBXP9hkDPRMcRBfsBVJm+vg4TWcrurM7 nG4Dw9NtpsiIBueNby8evBuf32TRfWe7h2SHh8yIoc7LCw8URYTIadLGC1g8DP43 Hu97V/xLSbOPCY5CM8NuitPsO3MsxXidNu6ljnA+5WG978xJwdj/DfaAH1E9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlPLC2cauc5oFB/PrEK3vvPFG/NcwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPes+6CRgNCaapfSr0NbE 8GRmHaTsXrOKoMRTlJlYmY0DXdQ+mbZmrk0yDxC+LyHg5JSmOjNAjmfc+Jmc30VS 8xbv1dD0aSwgankUSOMQpRibscVfVWo04a9rhxgilDxO0Zxn1uJJTs0DxcLl5Eve X6NUpP4EJIl1ILH/6OPxm09hf3ZJtGw5J8tWhWNIehxSy8pSpyutV+mjkvqxMbgl 5WpOblbJihNWZHG55KxpJApWr++JKbyagoUG7L3HhK4De1dTnDmuj4QIX07da4C+ Rrf0xEoN283YYz6zhT7us4CgRChYV4LPds3BYx0/MFOwrTSBzm9botZkUnzNAd6Z 9Q== -----END CERTIFICATE-----Generated at Wed Oct 7 06:20:21 2026 by rpki-client