$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: hJ6tcP8+WiXt/I5qWeJbIcW9AVHeCxtNYwcAjhiDzRQ= Subject key identifier: 04:92:27:21:05:44:66:A5:79:69:F0:C2:9C:2E:3C:44:B7:CA:ED:6F Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 585472EA506559085232937495CDD84EB93B70DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 03C8 Signing time: Sun 18 Oct 2026 22:37:36 +0000 Manifest this update: Sun 18 Oct 2026 22:32:36 +0000 Manifest next update: Tue 20 Oct 2026 01:51:36 +0000 Files and hashes: 1: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 2: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 3: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 4: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 5: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: GiPgf7Zkl5w1JUBCeBD2EaPX3Y6yZaRT4mFhFCgwDO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:54:72:ea:50:65:59:08:52:32:93:74:95:cd:d8:4e:b9:3b:70:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Oct 18 22:32:36 2026 GMT Not After : Oct 20 01:51:36 2026 GMT Subject: CN=04922721054466A57969F0C29C2E3C44B7CAED6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:c4:a1:9e:d5:72:ca:da:d4:dc:8f:5a:94: a7:b6:43:0f:eb:b2:83:b0:a1:20:03:cc:0b:0f:67: 5d:27:61:f0:65:cf:cd:66:06:67:fe:74:24:b3:d9: fa:83:14:87:e1:c1:6e:57:8e:42:63:c0:7c:19:ad: 84:d4:b4:f3:35:83:9f:37:bd:6a:d7:e1:f8:bc:65: 63:20:e9:bb:7c:27:22:bd:c5:cc:d6:79:0d:f5:8b: db:b0:a7:34:59:7c:a5:1c:42:3f:01:f8:e1:a1:bf: 75:13:b3:dd:3d:8f:93:99:26:6d:a9:d1:c1:c6:23: 2c:a1:78:38:41:dd:73:1a:e0:7b:92:e8:dd:a1:b4: d0:4c:67:b0:76:d4:1d:25:d5:00:f2:2b:e1:d5:48: 42:bf:35:6a:eb:6a:bb:54:62:9f:be:33:f1:a5:40: fd:98:d6:ea:8b:d3:24:0b:41:a6:38:7c:7e:78:b4: 6f:e4:e7:77:2b:98:42:a8:93:9c:f6:a8:ba:6d:bd: cf:2d:6f:79:ce:80:6b:f9:cd:d5:10:56:7d:3b:db: a5:53:34:81:4e:3e:81:ad:d9:c9:7d:59:2d:da:5d: 21:55:49:6e:4a:ae:f9:68:0b:94:e1:48:25:29:70: 7c:ca:c0:63:fb:38:f0:51:2d:0e:b4:e3:85:35:1f: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:27:21:05:44:66:A5:79:69:F0:C2:9C:2E:3C:44:B7:CA:ED:6F X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:97:79:8e:c5:5f:d7:81:69:c7:23:cc:5a:5d:e9:1e:48:2f: a2:88:5c:8b:78:72:16:70:c3:fb:cb:d9:62:85:97:a6:8f:60: 14:49:24:db:40:db:11:d3:69:09:43:df:32:5b:f1:d7:5c:6c: a3:ec:f2:74:c6:32:a0:58:5b:00:b3:93:8c:49:41:e6:fd:f0: 0b:a5:21:3d:e5:46:8b:26:4d:90:02:29:0d:73:32:42:73:6a: 3d:67:34:b4:55:4d:21:e8:76:74:00:70:78:de:c7:0b:35:0d: 14:78:67:3c:df:ca:a6:6f:df:98:cb:32:a4:c1:d6:59:3c:db: 7d:29:89:e1:48:d7:99:d9:9a:47:47:df:8c:51:a0:57:9a:ab: 7f:c4:56:ce:98:f0:b2:96:b8:8f:7d:80:dc:bb:c8:55:01:f7: 34:39:ae:c2:11:83:eb:05:67:d1:43:99:e9:36:61:b4:43:63: 56:fd:95:c5:98:e1:a9:8a:81:d9:c5:49:33:df:e8:d2:a2:0d: 49:82:b1:3d:c7:73:31:23:f3:b8:00:78:5f:43:02:f0:cc:85: 3c:cd:fa:22:e0:24:2d:64:81:72:43:e4:58:49:a7:b5:d2:07: da:94:df:1b:1f:f2:9e:f6:12:6e:04:a3:a7:0a:dc:0b:71:50: 58:17:35:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWFRy6lBlWQhSMpN0lc3YTrk7cN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjEwMTgyMjMyMzZaFw0yNjEwMjAwMTUxMzZaMDMxMTAvBgNV BAMTKDA0OTIyNzIxMDU0NDY2QTU3OTY5RjBDMjlDMkUzQzQ0QjdDQUVENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1MShntVyytrU3I9alKe2Qw/r soOwoSADzAsPZ10nYfBlz81mBmf+dCSz2fqDFIfhwW5XjkJjwHwZrYTUtPM1g583 vWrX4fi8ZWMg6bt8JyK9xczWeQ31i9uwpzRZfKUcQj8B+OGhv3UTs909j5OZJm2p 0cHGIyyheDhB3XMa4HuS6N2htNBMZ7B21B0l1QDyK+HVSEK/NWrrartUYp++M/Gl QP2Y1uqL0yQLQaY4fH54tG/k53crmEKok5z2qLptvc8tb3nOgGv5zdUQVn0726VT NIFOPoGt2cl9WS3aXSFVSW5KrvloC5ThSCUpcHzKwGP7OPBRLQ6044U1HwsVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBJInIQVEZqV5afDCnC48RLfK7W8wHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpd5jsVf14FpxyPMWl3p Hkgvoohci3hyFnDD+8vZYoWXpo9gFEkk20DbEdNpCUPfMlvx11xso+zydMYyoFhb ALOTjElB5v3wC6UhPeVGiyZNkAIpDXMyQnNqPWc0tFVNIeh2dABweN7HCzUNFHhn PN/Kpm/fmMsypMHWWTzbfSmJ4UjXmdmaR0ffjFGgV5qrf8RWzpjwspa4j32A3LvI VQH3NDmuwhGD6wVn0UOZ6TZhtENjVv2VxZjhqYqB2cVJM9/o0qINSYKxPcdzMSPz uAB4X0MC8MyFPM36IuAkLWSBckPkWEmntdIH2pTfGx/ynvYSbgSjpwrcC3FQWBc1 aA== -----END CERTIFICATE-----Generated at Mon Oct 19 04:41:18 2026 by rpki-client