$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: a2kKQrEP/ecVq75xVSIEIKfNbeCiy3DtlcKB653g79U= Subject key identifier: 7F:7C:FE:C2:24:2A:56:06:B9:EA:05:E3:13:58:80:1F:4E:26:C3:04 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 748EDA5D0B25A8D2B886D3784E3A13BD1A71C350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 037B Signing time: Mon 31 Aug 2026 09:17:37 +0000 Manifest this update: Mon 31 Aug 2026 09:12:37 +0000 Manifest next update: Tue 01 Sep 2026 12:26:37 +0000 Files and hashes: 1: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: UH05I6lT3JB5+gVDGG/N6VW6h5tCQI8ivClrFhuGWgM=) 2: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 3: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 4: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 5: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8e:da:5d:0b:25:a8:d2:b8:86:d3:78:4e:3a:13:bd:1a:71:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Aug 31 09:12:37 2026 GMT Not After : Sep 1 12:26:37 2026 GMT Subject: CN=7F7CFEC2242A5606B9EA05E31358801F4E26C304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:58:66:b5:0b:67:b2:62:90:08:ad:9a:34: 05:04:bd:b5:7f:69:e3:ff:c9:16:24:50:9f:d7:69: 57:0f:4c:67:5d:6a:00:c1:9f:2c:43:29:88:47:5d: fb:14:fe:20:40:d9:b6:a9:d5:93:3c:73:ca:fe:14: 24:1b:48:0c:73:a5:0c:38:52:41:ee:c8:3d:de:84: 67:5c:e7:1f:47:dc:1b:df:78:6a:da:2f:f9:94:cd: f3:13:9f:25:2f:99:db:64:4b:76:31:3f:3d:50:13: 4e:1d:d0:23:72:e5:b4:2d:ea:f5:72:d7:f5:67:73: c9:39:cc:fe:03:ca:fb:f6:30:f4:48:c9:95:20:74: ed:d4:73:e0:88:d1:12:2f:69:a8:e8:79:fd:ae:7a: d4:a4:42:4c:65:e8:fc:ba:02:d5:56:05:ae:9a:26: 8e:da:d7:e9:de:ec:b9:74:22:c3:f1:c1:3c:d5:2f: ae:fd:6a:a5:f3:9b:1b:10:e2:6c:99:db:00:89:ee: 25:8c:a4:6d:e6:fb:d8:bb:14:07:f2:0e:0c:c8:05: 1a:b5:69:5b:85:58:5d:44:a1:41:e5:b1:e4:d4:4e: cf:b3:9a:49:7c:a0:7b:70:c2:90:c6:bf:cd:a0:0a: ca:ee:11:6f:30:27:1e:85:13:39:bc:07:54:02:58: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7C:FE:C2:24:2A:56:06:B9:EA:05:E3:13:58:80:1F:4E:26:C3:04 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:07:c8:34:2a:61:08:2c:ff:19:b7:be:d5:e6:92:de:de:2a: 20:02:a0:86:c7:af:1d:63:20:5d:4a:e4:96:5f:ee:a0:1d:b8: e9:9b:87:01:07:4c:1a:70:e4:e5:40:de:31:cb:bc:e7:9d:1c: 3a:ff:ae:6f:14:97:48:18:ac:88:54:a3:e2:ac:01:12:3e:a6: 80:e5:7b:1c:2f:b6:ea:ab:25:97:ff:54:58:1b:5d:53:27:36: 63:d8:9b:79:5e:73:06:a4:c1:76:95:22:f5:46:e5:5b:62:05: 26:4a:81:fb:cc:c9:26:9d:bd:99:6d:40:00:c4:54:4b:61:0f: 09:d3:72:d0:95:ce:c0:3e:7c:7f:e3:95:cd:97:de:63:78:10: 34:b0:07:49:80:dc:cb:17:61:e9:9a:fb:f4:fe:c6:96:73:d6: b5:56:3a:f2:9a:04:a2:fb:80:25:d4:0d:91:5c:75:9b:be:4a: 19:bd:f2:ca:9c:8b:73:f1:9b:84:50:81:3b:81:7b:a4:3e:a3: 02:34:9c:20:d1:ef:25:c8:8c:a9:f2:67:5a:07:fb:e0:17:05: 68:15:26:55:15:88:c8:85:9a:d3:77:59:b1:e9:ff:9a:73:78: 6a:03:d6:5c:61:10:39:ef:e7:62:db:58:14:fe:dd:bb:dd:98: 0d:79:1d:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdI7aXQslqNK4htN4TjoTvRpxw1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA4MzEwOTEyMzdaFw0yNjA5MDExMjI2MzdaMDMxMTAvBgNV BAMTKDdGN0NGRUMyMjQyQTU2MDZCOUVBMDVFMzEzNTg4MDFGNEUyNkMzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXAFhmtQtnsmKQCK2aNAUEvbV/ aeP/yRYkUJ/XaVcPTGddagDBnyxDKYhHXfsU/iBA2bap1ZM8c8r+FCQbSAxzpQw4 UkHuyD3ehGdc5x9H3BvfeGraL/mUzfMTnyUvmdtkS3YxPz1QE04d0CNy5bQt6vVy 1/Vnc8k5zP4Dyvv2MPRIyZUgdO3Uc+CI0RIvaajoef2uetSkQkxl6Py6AtVWBa6a Jo7a1+ne7Ll0IsPxwTzVL679aqXzmxsQ4myZ2wCJ7iWMpG3m+9i7FAfyDgzIBRq1 aVuFWF1EoUHlseTUTs+zmkl8oHtwwpDGv82gCsruEW8wJx6FEzm8B1QCWBp/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf3z+wiQqVga56gXjE1iAH04mwwQwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgfINCphCCz/Gbe+1eaS 3t4qIAKghsevHWMgXUrkll/uoB246ZuHAQdMGnDk5UDeMcu8550cOv+ubxSXSBis iFSj4qwBEj6mgOV7HC+26qsll/9UWBtdUyc2Y9ibeV5zBqTBdpUi9UblW2IFJkqB +8zJJp29mW1AAMRUS2EPCdNy0JXOwD58f+OVzZfeY3gQNLAHSYDcyxdh6Zr79P7G lnPWtVY68poEovuAJdQNkVx1m75KGb3yypyLc/GbhFCBO4F7pD6jAjScINHvJciM qfJnWgf74BcFaBUmVRWIyIWa03dZsen/mnN4agPWXGEQOe/nYttYFP7du92YDXkd 0w== -----END CERTIFICATE-----Generated at Tue Sep 1 04:50:15 2026 by rpki-client