$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: Q85hvb8Vimem/Dr8qfJacU5PtSeT74cIfDTX5W5TKP8= Subject key identifier: D8:12:21:DE:38:B8:8D:1F:28:0E:87:2D:E2:C9:12:26:A1:70:C0:D8 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 4EAC70B46BCB2D71666217D6C70A0ED07FE56EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 04C1 Signing time: Thu 22 Oct 2026 18:48:12 +0000 Manifest this update: Thu 22 Oct 2026 18:43:12 +0000 Manifest next update: Fri 23 Oct 2026 20:41:12 +0000 Files and hashes: 1: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 2: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 3: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 4: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 5: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: yiysFmWPfC5d7rHYCj1Ls8ng+n9T/g3FeaFr0kluPUY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 19:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ac:70:b4:6b:cb:2d:71:66:62:17:d6:c7:0a:0e:d0:7f:e5:6e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Oct 22 18:43:12 2026 GMT Not After : Oct 23 20:41:12 2026 GMT Subject: CN=D81221DE38B88D1F280E872DE2C91226A170C0D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:f2:44:b1:e2:b0:e2:fe:4e:fb:a2:d5:5a: 36:7d:68:d1:5e:7b:c5:cf:44:1d:37:9d:93:1b:27: 0b:49:a5:72:57:dc:de:40:da:f2:57:0f:21:c7:29: ad:66:51:81:45:b3:58:51:92:88:6b:0a:11:1b:a0: 1d:8e:38:4c:b0:25:d6:9d:8f:2d:6e:8f:f0:3b:5d: 9a:fd:1c:21:a3:f9:54:50:db:3f:a8:8f:38:42:95: 58:8c:56:9f:c3:70:ea:d5:95:47:41:80:86:d5:f8: c0:d1:86:6f:4a:5c:34:9a:4c:8d:f9:d8:39:8e:0c: c8:6d:9c:34:12:4d:e8:b6:06:92:2e:19:9f:5e:bf: 21:5c:96:bc:0f:df:60:de:06:82:e9:9a:0f:d5:cb: e9:13:72:d1:52:5f:a4:51:68:2e:b3:16:91:e0:49: f0:02:27:ea:a7:41:22:38:23:6a:ae:dd:f3:93:6a: 6e:40:8e:bb:74:0d:66:c0:95:7b:62:04:c0:a3:c1: 74:44:39:09:91:00:6d:ad:70:85:73:59:98:90:a9: ec:20:75:c7:e7:bd:1b:01:49:f6:ee:bf:5d:56:09: 5c:b6:fa:a1:a9:1d:6b:2d:42:67:f0:fb:00:42:f5: d7:eb:8c:71:02:08:a7:2f:5d:9f:8f:bf:01:6f:f9: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:21:DE:38:B8:8D:1F:28:0E:87:2D:E2:C9:12:26:A1:70:C0:D8 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:55:f6:d2:aa:f5:e6:5d:c1:76:e9:e8:37:d9:6e:d3:40:a3: 1d:2a:59:ac:3e:1c:31:a3:66:68:cb:1b:80:89:bb:b5:a1:f6: e5:e1:f4:17:4d:47:05:12:59:82:dc:54:59:09:39:a9:a1:03: 61:2c:f9:bf:84:5e:68:35:08:b7:5e:c0:48:71:89:f6:96:1b: 33:37:61:c5:7a:8b:c8:7a:60:80:04:86:04:df:2d:fc:e2:39: f7:ae:25:79:7a:80:d3:ec:31:0d:50:4d:aa:b9:af:b7:37:5f: 03:ba:b6:66:a1:c7:ac:fe:48:7b:df:a2:6b:06:05:85:aa:d7: 60:0d:b4:c1:04:0f:f2:09:a5:ba:69:0d:cf:cd:9f:fa:26:f0: 37:af:18:e3:04:93:1c:62:88:4a:5d:f6:b4:36:2f:c7:3f:95: 6c:de:4c:98:b8:67:61:2f:66:45:15:d9:0e:c1:61:9a:a9:44: 4b:e2:10:59:72:87:bb:e5:2e:88:58:eb:82:3c:3b:5c:98:41: 56:a1:30:20:88:6b:8f:65:2f:51:9c:be:df:3d:00:78:25:b5: b0:41:0d:8c:eb:f7:78:31:a9:d2:df:5e:40:e9:08:1a:da:2a: bf:e4:1c:01:21:58:73:e0:25:6c:52:c8:66:1d:de:97:ff:3c: db:be:20:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTqxwtGvLLXFmYhfWxwoO0H/lbuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjEwMjIxODQzMTJaFw0yNjEwMjMyMDQxMTJaMDMxMTAvBgNV BAMTKEQ4MTIyMURFMzhCODhEMUYyODBFODcyREUyQzkxMjI2QTE3MEMwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ufJEseKw4v5O+6LVWjZ9aNFe e8XPRB03nZMbJwtJpXJX3N5A2vJXDyHHKa1mUYFFs1hRkohrChEboB2OOEywJdad jy1uj/A7XZr9HCGj+VRQ2z+ojzhClViMVp/DcOrVlUdBgIbV+MDRhm9KXDSaTI35 2DmODMhtnDQSTei2BpIuGZ9evyFclrwP32DeBoLpmg/Vy+kTctFSX6RRaC6zFpHg SfACJ+qnQSI4I2qu3fOTam5Ajrt0DWbAlXtiBMCjwXREOQmRAG2tcIVzWZiQqewg dcfnvRsBSfbuv11WCVy2+qGpHWstQmfw+wBC9dfrjHECCKcvXZ+PvwFv+bKTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2BIh3ji4jR8oDoct4skSJqFwwNgwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1X20qr15l3BdunoN9lu 00CjHSpZrD4cMaNmaMsbgIm7taH25eH0F01HBRJZgtxUWQk5qaEDYSz5v4ReaDUI t17ASHGJ9pYbMzdhxXqLyHpggASGBN8t/OI5964leXqA0+wxDVBNqrmvtzdfA7q2 ZqHHrP5Ie9+iawYFharXYA20wQQP8gmlumkNz82f+ibwN68Y4wSTHGKISl32tDYv xz+VbN5MmLhnYS9mRRXZDsFhmqlES+IQWXKHu+UuiFjrgjw7XJhBVqEwIIhrj2Uv UZy+3z0AeCW1sEENjOv3eDGp0t9eQOkIGtoqv+QcASFYc+AlbFLIZh3el/88274g Fg== -----END CERTIFICATE-----Generated at Fri Oct 23 04:24:19 2026 by rpki-client