$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: a3JuJxfMbmVfZghB2NDRgOQ5j0JagupZAFc1EB19TGw= Subject key identifier: B1:02:ED:EA:14:1D:61:FE:A1:C1:79:C0:B9:F9:01:F1:DA:99:20:74 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 705544FF787CF7AA00A0912F9DAC3B5749BECB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 23 Signing time: Sat 18 Apr 2026 03:19:09 +0000 Manifest this update: Sat 18 Apr 2026 03:14:09 +0000 Manifest next update: Sun 19 Apr 2026 05:01:09 +0000 Files and hashes: 1: 3138352e3230302e3230392e302f32342d3234203d3e203136353039.roa (hash: CuXfjWH6sNSmDX0CVenmxSFqV6xo/B4MPUYw4r8/ALk=) 2: 3138352e3230302e3231312e302f32342d3234203d3e203136353039.roa (hash: gHl9NlfVjA+KTXiLSEpXJhNXImzXFqsKFvp5vKD6g+c=) 3: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: ApPUL/1PP3SfTPAwBU8PUjmGqZ0IhRS37ADB1by/kpM=) 4: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: G6lIA/eIW9SxYnXkDwa8m2NW9IQOTL6PtYyIcf8oEII=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:55:44:ff:78:7c:f7:aa:00:a0:91:2f:9d:ac:3b:57:49:be:cb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Apr 18 03:14:09 2026 GMT Not After : Apr 19 05:01:09 2026 GMT Subject: CN=B102EDEA141D61FEA1C179C0B9F901F1DA992074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:20:9a:a7:98:59:eb:f0:4c:28:be:1a:19: c0:da:a0:d8:66:b7:20:b3:75:95:8c:85:06:d1:bd: c6:32:de:cc:c7:c7:69:0a:f2:96:de:0f:cc:13:c0: a9:8d:8f:08:42:2a:7d:12:02:4c:25:02:22:1f:97: 0d:a5:2c:fb:ab:27:9b:32:3c:36:c3:e1:4c:6f:37: 04:25:6f:cb:7a:77:90:a8:f6:47:e6:c8:9d:ba:c2: 68:9a:2b:39:9a:44:ea:26:43:79:f4:f9:7d:11:65: ed:fe:dd:61:7a:94:10:7e:12:65:3d:be:b2:99:e6: a9:f3:73:d5:51:fa:0a:28:a2:76:90:98:31:ca:f7: 12:e5:9f:c9:03:00:dc:1e:6b:34:67:80:b5:8e:6a: 22:74:30:b5:0e:cb:02:44:69:4c:da:ed:03:ad:c1: 0b:e5:04:6f:88:d2:eb:a0:77:90:af:1a:0a:98:ef: 7b:dd:a3:a2:e5:41:12:8d:61:87:6c:ae:38:78:4f: 12:be:31:e5:e8:ee:88:04:8d:d6:e8:e8:75:aa:da: be:b9:f2:cb:39:56:32:15:86:3d:4e:70:61:d1:39: 2d:77:b2:a9:b2:b0:c6:51:1e:e7:a4:97:8d:27:07: 75:03:90:15:00:72:f0:44:f6:b4:3c:9c:de:ba:3e: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:ED:EA:14:1D:61:FE:A1:C1:79:C0:B9:F9:01:F1:DA:99:20:74 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:38:8d:12:bc:a0:a3:ab:48:b0:06:fc:ab:53:af:87:04:fe: 06:4d:5f:14:95:25:a8:70:98:ea:c0:ef:07:10:58:72:4a:08: 57:84:73:57:e1:28:bd:f6:86:78:39:7b:6e:3d:bb:ad:cd:51: 91:99:13:a0:5d:5e:fb:11:12:50:33:00:50:bb:8f:d1:67:4d: 53:3f:20:f7:9a:35:c5:3e:04:6b:1c:f2:f5:4a:bf:ad:89:f1: 78:ec:77:a7:ac:0f:a6:c8:68:f8:fd:b2:8f:da:0b:2b:b5:37: 92:ad:ba:cf:ff:79:3c:9f:6d:e6:3a:a1:fc:e3:af:fa:2b:5f: 7f:60:f5:64:5b:d2:d9:5f:b2:a4:49:26:c6:c0:5d:93:30:df: 10:2d:4d:96:ec:06:ad:0e:0c:3d:17:34:89:a4:31:87:3c:d4: 34:b6:19:a9:93:5e:40:8f:7a:31:6a:3c:ed:58:b6:91:9d:ae: 97:30:92:ab:db:70:6b:f5:48:6b:6e:93:c7:fa:8a:39:37:c1: 26:9e:5b:e6:7d:26:23:3c:bd:80:d8:5b:c6:b5:52:08:73:26: 80:33:46:61:57:64:b3:22:a6:36:43:76:39:82:47:18:f4:62: 5f:fb:3d:c8:85:0b:7c:27:59:7f:17:91:f1:98:63:66:10:db: 89:df:b9:87 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcFVE/3h896oAoJEvnaw7V0m+yzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA0MTgwMzE0MDlaFw0yNjA0MTkwNTAxMDlaMDMxMTAvBgNV BAMTKEIxMDJFREVBMTQxRDYxRkVBMUMxNzlDMEI5RjkwMUYxREE5OTIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xSCap5hZ6/BMKL4aGcDaoNhm tyCzdZWMhQbRvcYy3szHx2kK8pbeD8wTwKmNjwhCKn0SAkwlAiIflw2lLPurJ5sy PDbD4UxvNwQlb8t6d5Co9kfmyJ26wmiaKzmaROomQ3n0+X0RZe3+3WF6lBB+EmU9 vrKZ5qnzc9VR+gooonaQmDHK9xLln8kDANweazRngLWOaiJ0MLUOywJEaUza7QOt wQvlBG+I0uugd5CvGgqY73vdo6LlQRKNYYdsrjh4TxK+MeXo7ogEjdbo6HWq2r65 8ss5VjIVhj1OcGHROS13sqmysMZRHuekl40nB3UDkBUAcvBE9rQ8nN66PvTzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsQLt6hQdYf6hwXnAufkB8dqZIHQwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTiNErygo6tIsAb8q1Ov hwT+Bk1fFJUlqHCY6sDvBxBYckoIV4RzV+EovfaGeDl7bj27rc1RkZkToF1e+xES UDMAULuP0WdNUz8g95o1xT4Eaxzy9Uq/rYnxeOx3p6wPpsho+P2yj9oLK7U3kq26 z/95PJ9t5jqh/OOv+itff2D1ZFvS2V+ypEkmxsBdkzDfEC1NluwGrQ4MPRc0iaQx hzzUNLYZqZNeQI96MWo87Vi2kZ2ulzCSq9twa/VIa26Tx/qKOTfBJp5b5n0mIzy9 gNhbxrVSCHMmgDNGYVdksyKmNkN2OYJHGPRiX/s9yIULfCdZfxeR8ZhjZhDbid+5 hw== -----END CERTIFICATE-----Generated at Sat Apr 18 18:17:27 2026 by rpki-client