$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft File: 15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft (raw, json) Hash identifier: hr3QrU4hPnPSiK2mrY/ygDOnQJk2/DJBLT2KneM5oD0= Subject key identifier: 76:17:8B:AE:32:D0:21:08:C1:CE:6D:E0:07:0F:D5:E9:77:2D:DB:C4 Authority key identifier: 15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58 Certificate issuer: /CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358 Certificate serial: 40BC31ADDF2D8D57812DB221428A87A0094C8C33 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft Manifest number: 13 Signing time: Thu 09 Apr 2026 09:51:20 +0000 Manifest this update: Thu 09 Apr 2026 09:46:20 +0000 Manifest next update: Fri 10 Apr 2026 11:59:20 +0000 Files and hashes: 1: 326130613a363034373a32303a3a2f34342d3438203d3e20323135363835.roa (hash: HxKFgIaqkt5kQ++XijdGNjwJiU02ZWb1S5e5ZZU8cWA=) 2: 326130613a363034373a3a2f34382d3438203d3e20323031333932.roa (hash: Ro2QKqzgg4Vq3t5qzJYvp1IzdP4uN7u/L6YXMcpOinc=) 3: 15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl (hash: IOQRB42IEOi4FYMqiEMaPI/vXJF8ykMo8GMXz5xPMK4=) 4: 326130613a363034373a31303a3a2f34342d3438203d3e20323038363934.roa (hash: l+O+NUBh2MF2w9Gr9oh96B2oYvdXivhSEwDow9u3WJs=) 5: 3230362e3234352e3136362e302f32342d3234203d3e20323031333932.roa (hash: sW4GJC3tSqXMt7INqjU6PqY9hi8nZi/2kkXSaTLZp5o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 11:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:31:ad:df:2d:8d:57:81:2d:b2:21:42:8a:87:a0:09:4c:8c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358 Validity Not Before: Apr 9 09:46:20 2026 GMT Not After : Apr 10 11:59:20 2026 GMT Subject: CN=76178BAE32D02108C1CE6DE0070FD5E9772DDBC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:9f:ad:7c:ac:fb:24:3e:4e:51:76:bb:50: c6:96:43:7a:2c:c5:eb:ad:57:f4:4b:8d:0e:50:3d: 7b:ff:b0:d9:5a:c6:37:f7:41:5c:72:73:51:91:82: f4:72:27:f8:0b:ac:2a:14:cf:4b:18:4d:34:8c:ca: 6e:0c:37:69:e1:42:8e:de:22:3d:4a:c4:d2:01:11: 1b:9d:6d:44:a6:2d:fe:11:67:ab:ac:2a:9c:ec:bc: ca:ed:9e:ee:9b:0f:b6:0b:e4:de:8b:fe:eb:9c:f0: bf:54:36:bd:05:f6:70:da:57:d8:b7:a6:b5:85:db: 30:a5:7f:1e:78:5b:95:05:1e:44:06:0b:41:d0:d4: 27:88:e0:f4:26:7c:0e:70:66:f7:6e:10:5b:eb:89: 7f:4d:64:5c:2f:f9:23:d4:63:a8:cc:66:e4:00:5c: 20:df:d2:79:92:2d:0d:66:f1:72:17:2c:6a:a1:56: 09:f3:21:46:8f:79:04:00:c5:1e:eb:29:88:10:3f: df:b4:00:7d:67:fd:df:91:89:44:e5:9f:09:fb:20: b9:19:a3:ec:a0:68:e9:c6:3c:79:eb:40:d5:e0:69: d3:4b:c7:55:3f:57:e5:73:3e:56:70:82:dc:8a:86: 2d:e1:f7:19:fe:03:60:83:8e:75:8e:44:fb:ba:6d: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:17:8B:AE:32:D0:21:08:C1:CE:6D:E0:07:0F:D5:E9:77:2D:DB:C4 X509v3 Authority Key Identifier: keyid:15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:dd:b2:94:f5:33:e1:91:4b:e4:e0:d6:ae:54:f0:54:c7:d2: da:30:d4:53:36:36:81:69:84:ef:0b:01:b7:e0:e9:0d:2c:ab: 60:df:38:ea:d1:22:a9:1c:c8:9a:0e:37:e1:cf:29:93:4d:48: 51:a9:04:20:b4:59:29:f1:b2:99:ab:58:1b:71:16:20:4f:b7: e5:d3:99:30:cf:db:ff:81:77:b5:d6:bb:36:b9:f8:14:db:70: e8:85:1d:76:56:cd:a2:d9:3b:07:ae:08:62:91:aa:74:c4:81: 9e:15:89:2e:10:c8:a9:ef:41:5f:00:2b:d5:9d:93:0d:62:b4: 56:61:28:27:e0:48:8c:4a:98:5e:ee:61:76:cd:43:38:24:73: 4a:17:8b:94:7a:de:9e:3f:94:8b:17:e0:47:dd:3d:96:80:4c: ac:6a:d6:19:b2:26:f9:0f:e9:a7:a8:39:dd:bb:86:df:8b:85: 45:c0:38:b7:93:4d:8d:f3:6f:03:0e:f4:f0:4d:6f:cc:4b:3a: 60:ab:46:2b:11:9e:67:6a:15:0a:d9:26:dc:76:da:c1:f8:a8: e7:d3:50:50:41:9c:67:b7:a8:80:55:42:c5:5b:ba:fd:83:c2: 9f:bd:eb:85:6f:d9:61:93:b3:62:9c:ba:f1:09:c8:41:d8:5d: bf:3c:65:5f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQLwxrd8tjVeBLbIhQoqHoAlMjDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQz QzNCMjM1ODAeFw0yNjA0MDkwOTQ2MjBaFw0yNjA0MTAxMTU5MjBaMDMxMTAvBgNV BAMTKDc2MTc4QkFFMzJEMDIxMDhDMUNFNkRFMDA3MEZENUU5NzcyRERCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AJ+tfKz7JD5OUXa7UMaWQ3os xeutV/RLjQ5QPXv/sNlaxjf3QVxyc1GRgvRyJ/gLrCoUz0sYTTSMym4MN2nhQo7e Ij1KxNIBERudbUSmLf4RZ6usKpzsvMrtnu6bD7YL5N6L/uuc8L9UNr0F9nDaV9i3 prWF2zClfx54W5UFHkQGC0HQ1CeI4PQmfA5wZvduEFvriX9NZFwv+SPUY6jMZuQA XCDf0nmSLQ1m8XIXLGqhVgnzIUaPeQQAxR7rKYgQP9+0AH1n/d+RiUTlnwn7ILkZ o+ygaOnGPHnrQNXgadNLx1U/V+VzPlZwgtyKhi3h9xn+A2CDjnWORPu6bSwdAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUdheLrjLQIQjBzm3gBw/V6Xct28QwHwYDVR0j BBgwFoAUFcXrbBWnMq3DGxXPep8P5Dw7I1gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjJkNjFjZTMtZTA5MS00MGYwLTkyZWQtZDlmMDFjOTRh ZmQxLzEvMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQzQzNCMjM1OC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQzQzNC MjM1OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iMmQ2MWNlMy1l MDkxLTQwZjAtOTJlZC1kOWYwMWM5NGFmZDEvMS8xNUM1RUI2QzE1QTczMkFEQzMx QjE1Q0Y3QTlGMEZFNDNDM0IyMzU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd2ylPUz4ZFL5ODWrlTw VMfS2jDUUzY2gWmE7wsBt+DpDSyrYN846tEiqRzImg434c8pk01IUakEILRZKfGy matYG3EWIE+35dOZMM/b/4F3tda7Nrn4FNtw6IUddlbNotk7B64IYpGqdMSBnhWJ LhDIqe9BXwAr1Z2TDWK0VmEoJ+BIjEqYXu5hds1DOCRzSheLlHrenj+UixfgR909 loBMrGrWGbIm+Q/pp6g53buG34uFRcA4t5NNjfNvAw708E1vzEs6YKtGKxGeZ2oV Ctkm3Hbawfio59NQUEGcZ7eogFVCxVu6/YPCn73rhW/ZYZOzYpy68QnIQdhdvzxl Xw== -----END CERTIFICATE-----Generated at Thu Apr 9 20:55:43 2026 by rpki-client