$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: xViYoussHlzLnm5KjIkAMVZSLq9PWk7KxX6xheHTmo0= Subject key identifier: 04:A5:46:65:75:9D:AF:EB:A1:2B:C0:70:2D:58:1D:1A:A4:12:82:B9 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 2C37A65146043DB912E0C9D2328487D1D0B37848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0672 Signing time: Mon 27 Apr 2026 18:16:09 +0000 Manifest this update: Mon 27 Apr 2026 18:11:09 +0000 Manifest next update: Tue 28 Apr 2026 19:12:09 +0000 Files and hashes: 1: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 2: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=) 3: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: nXUh0ebgy9mYqJQktRAKJanQbA25ra3ks9kYQHdJm44=) 4: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 5: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=) 6: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=) 7: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 8: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) 9: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=) 10: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 11: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 12: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=) 13: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 14: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=) 15: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=) 16: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=) 17: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=) 18: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 19: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 20: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 21: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=) 22: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:37:a6:51:46:04:3d:b9:12:e0:c9:d2:32:84:87:d1:d0:b3:78:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Apr 27 18:11:09 2026 GMT Not After : Apr 28 19:12:09 2026 GMT Subject: CN=04A54665759DAFEBA12BC0702D581D1AA41282B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:f7:b0:7a:73:9b:fc:ce:0e:a0:ce:be:47: cb:9f:ef:36:47:cd:c4:ef:65:01:2e:b1:32:e4:c8: 95:35:81:0c:87:f0:99:a3:b4:9c:b4:23:5c:6c:fd: b7:d5:d8:ad:61:81:65:9f:cf:c7:71:46:4b:4f:f8: 82:86:ed:07:e2:54:60:6b:ec:cc:cb:9c:b1:82:2b: 95:88:32:73:9c:f9:36:f4:ce:10:c9:88:dd:ab:90: d2:ec:11:aa:9d:d8:8d:21:80:56:8f:66:f6:80:03: d5:27:a0:09:d3:e8:83:70:dd:f0:49:75:81:75:00: 33:b8:80:bc:65:d9:a1:fd:d1:43:29:6d:90:b5:c9: 9a:82:67:9f:3e:2a:a1:ca:79:da:3f:04:5f:dd:5e: ad:85:7a:5b:69:6d:c2:f6:57:a7:ea:9f:7a:1e:f1: 32:d5:f0:d5:51:21:24:1e:ac:c0:3d:f1:cd:ab:5f: 7b:e7:55:7d:a3:bf:e9:76:cc:5e:44:83:db:41:bf: 93:c8:dc:43:1e:cd:72:c2:65:e6:eb:42:1e:1a:32: 6f:59:66:53:40:53:bb:38:be:e2:19:a4:c9:aa:3d: 8c:28:d3:9f:11:33:b3:16:5a:5b:21:a8:5b:96:54: 7c:e8:28:01:b8:71:ed:54:2d:98:de:59:ce:d9:95: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:46:65:75:9D:AF:EB:A1:2B:C0:70:2D:58:1D:1A:A4:12:82:B9 X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:66:0b:f7:17:93:3e:93:be:00:3d:7a:a6:98:03:1e:15: 84:3a:fc:81:0b:b3:00:0d:0f:88:26:77:24:cf:be:c2:48:76: 68:ce:62:de:38:3a:2d:a4:d2:0e:f3:0b:10:56:a7:6f:df:8a: 5f:a0:09:18:30:83:8e:b5:d7:53:8f:f1:31:8c:3f:84:8b:5b: 03:40:d1:33:bc:89:4b:d4:3d:d2:e2:fd:59:3e:7c:82:19:4c: 0f:73:a5:bb:25:28:8b:6b:6c:f2:9c:e6:d1:bb:4b:cb:16:97: 38:08:87:86:81:3b:ab:60:4e:a1:c8:f3:44:70:28:54:43:0c: 0c:c3:33:87:d9:0c:76:4d:86:70:4d:1c:e1:fc:a9:ac:fc:89: f6:42:d3:24:be:45:85:84:6a:8b:b3:eb:04:54:f1:c7:91:51: 27:2f:d1:5c:f5:29:3b:6e:fb:48:a7:d4:f6:13:d5:b4:f1:87: 1d:40:21:00:37:7e:fb:61:cd:f1:97:6a:b8:11:17:fa:fe:5a: f9:7c:43:de:80:61:fa:ae:c1:35:51:fa:0b:95:03:a7:6c:13: 04:1f:38:87:a0:98:86:90:90:3c:ca:01:42:5f:f0:07:8c:05: 92:c9:c2:76:4c:16:1e:fe:52:33:82:e5:9a:26:63:6f:4d:80: d7:16:c6:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULDemUUYEPbkS4MnSMoSH0dCzeEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNjA0MjcxODExMDlaFw0yNjA0MjgxOTEyMDlaMDMxMTAvBgNV BAMTKDA0QTU0NjY1NzU5REFGRUJBMTJCQzA3MDJENTgxRDFBQTQxMjgyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdvewenOb/M4OoM6+R8uf7zZH zcTvZQEusTLkyJU1gQyH8JmjtJy0I1xs/bfV2K1hgWWfz8dxRktP+IKG7QfiVGBr 7MzLnLGCK5WIMnOc+Tb0zhDJiN2rkNLsEaqd2I0hgFaPZvaAA9UnoAnT6INw3fBJ dYF1ADO4gLxl2aH90UMpbZC1yZqCZ58+KqHKedo/BF/dXq2FeltpbcL2V6fqn3oe 8TLV8NVRISQerMA98c2rX3vnVX2jv+l2zF5Eg9tBv5PI3EMezXLCZebrQh4aMm9Z ZlNAU7s4vuIZpMmqPYwo058RM7MWWlshqFuWVHzoKAG4ce1ULZjeWc7ZlUoNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBKVGZXWdr+uhK8BwLVgdGqQSgrkwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbNmC/cXkz6TvgA9eqaY Ax4VhDr8gQuzAA0PiCZ3JM++wkh2aM5i3jg6LaTSDvMLEFanb9+KX6AJGDCDjrXX U4/xMYw/hItbA0DRM7yJS9Q90uL9WT58ghlMD3OluyUoi2ts8pzm0btLyxaXOAiH hoE7q2BOocjzRHAoVEMMDMMzh9kMdk2GcE0c4fyprPyJ9kLTJL5FhYRqi7PrBFTx x5FRJy/RXPUpO277SKfU9hPVtPGHHUAhADd++2HN8ZdquBEX+v5a+XxD3oBh+q7B NVH6C5UDp2wTBB84h6CYhpCQPMoBQl/wB4wFksnCdkwWHv5SM4LlmiZjb02A1xbG 7A== -----END CERTIFICATE-----Generated at Tue Apr 28 00:53:23 2026 by rpki-client