$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: Pjfpuj7jOtpOETqEc9tihy/3UhJrAI7HP2mrJynocNc= Subject key identifier: 3E:74:B7:DD:65:32:36:58:9C:5D:CD:24:1E:54:E6:82:DA:21:02:13 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 2DC6A2B9EF880B51E8ECEF8A0B807956789579E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 02EC Signing time: Fri 17 Jul 2026 12:16:24 +0000 Manifest this update: Fri 17 Jul 2026 12:11:24 +0000 Manifest next update: Sat 18 Jul 2026 15:30:24 +0000 Files and hashes: 1: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: bbrdrLz56PKJY+p+otxbeG8id1gGvo/jkYeqOUBj2sc=) 2: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 3: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 4: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 5: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 15:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c6:a2:b9:ef:88:0b:51:e8:ec:ef:8a:0b:80:79:56:78:95:79:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Jul 17 12:11:24 2026 GMT Not After : Jul 18 15:30:24 2026 GMT Subject: CN=3E74B7DD653236589C5DCD241E54E682DA210213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:7a:6f:d6:38:6f:bb:34:ef:ed:35:52:91: 2e:da:8a:a3:79:17:47:4f:09:94:32:8b:72:82:5f: 5e:23:2d:05:40:64:84:59:5a:d0:8a:fd:88:2c:01: 37:25:d3:d0:5d:81:71:58:7d:6f:59:01:e9:83:cc: 63:2a:e9:92:48:e9:7c:8d:d0:de:63:42:f2:96:62: 7c:c4:a4:5e:5a:85:68:56:89:d3:16:9f:cc:d4:67: 1b:84:d6:ce:9d:f6:3b:02:14:21:b5:86:d9:e5:d9: b8:d2:61:0d:b9:4d:43:94:3b:0a:7d:c2:32:80:d7: 76:18:a1:c4:2b:fc:0c:31:7d:f9:16:81:9d:44:0e: a2:a6:a9:28:fa:dc:62:ca:f5:8c:5d:be:81:45:28: 14:66:0a:f5:0a:ba:5e:cc:7c:2e:b2:7d:0a:96:cf: f8:a8:ba:d1:75:9f:b9:8a:d7:ab:70:d7:90:b1:a7: 31:28:c4:e8:29:9d:de:f6:d6:95:98:62:5e:1e:03: 14:f7:12:b4:05:44:d5:fe:4d:d0:12:34:8a:38:2a: 33:87:4b:6e:f3:62:c0:1f:8a:d6:39:23:5a:e5:91: d8:e3:69:0d:01:2b:59:86:c7:62:8e:74:d7:31:3d: 19:c8:8d:9f:eb:d8:be:05:6b:da:f3:4e:46:b7:6b: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:B7:DD:65:32:36:58:9C:5D:CD:24:1E:54:E6:82:DA:21:02:13 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:da:ac:73:2d:c7:c7:c6:9c:ef:73:3e:bc:6d:3c:2c:4b:57: 66:d0:e8:70:be:26:fe:64:52:a6:a4:47:66:54:19:da:73:f3: c1:64:db:34:ec:37:7a:78:59:55:2c:be:05:d3:26:52:c4:d3: c8:2b:6a:1e:a3:e0:f2:4e:1b:bf:59:ff:b3:35:54:15:63:0d: 62:79:8b:c7:71:89:a2:7d:08:44:6e:57:b7:d2:50:10:38:bf: b2:0b:98:82:d4:6b:6c:55:76:1a:5b:ba:bf:c8:04:c9:e6:dc: e4:23:4a:d8:95:14:fb:26:0e:15:39:1b:7e:dc:11:2d:f4:31: 64:48:0f:ae:68:2a:be:88:6d:1e:91:f7:e7:ba:14:3c:2d:cb: 11:8e:d0:de:98:91:f1:8f:6e:4a:52:44:64:f6:26:5e:8f:61: 6f:46:eb:ba:bd:40:cd:03:d7:8e:3f:16:e0:84:a1:f1:e3:39: bd:e2:a4:af:d8:94:e3:c1:04:3b:ff:50:47:b6:59:26:0f:5e: 50:e0:a2:fc:97:11:8d:29:4e:96:7d:d4:eb:d3:d9:44:1a:2e: 48:71:cc:c6:09:39:8e:de:0a:c0:d9:4c:31:77:e8:97:ee:5f: f1:ca:e4:d7:d0:aa:76:fc:93:52:ee:0e:ce:85:60:67:16:5f: 30:be:77:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULcaiue+IC1Ho7O+KC4B5VniVeecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA3MTcxMjExMjRaFw0yNjA3MTgxNTMwMjRaMDMxMTAvBgNV BAMTKDNFNzRCN0RENjUzMjM2NTg5QzVEQ0QyNDFFNTRFNjgyREEyMTAyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt93pv1jhvuzTv7TVSkS7aiqN5 F0dPCZQyi3KCX14jLQVAZIRZWtCK/YgsATcl09BdgXFYfW9ZAemDzGMq6ZJI6XyN 0N5jQvKWYnzEpF5ahWhWidMWn8zUZxuE1s6d9jsCFCG1htnl2bjSYQ25TUOUOwp9 wjKA13YYocQr/AwxffkWgZ1EDqKmqSj63GLK9YxdvoFFKBRmCvUKul7MfC6yfQqW z/ioutF1n7mK16tw15CxpzEoxOgpnd721pWYYl4eAxT3ErQFRNX+TdASNIo4KjOH S27zYsAfitY5I1rlkdjjaQ0BK1mGx2KOdNcxPRnIjZ/r2L4Fa9rzTka3azRpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPnS33WUyNlicXc0kHlTmgtohAhMwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtqscy3Hx8ac73M+vG08 LEtXZtDocL4m/mRSpqRHZlQZ2nPzwWTbNOw3enhZVSy+BdMmUsTTyCtqHqPg8k4b v1n/szVUFWMNYnmLx3GJon0IRG5Xt9JQEDi/sguYgtRrbFV2Glu6v8gEyebc5CNK 2JUU+yYOFTkbftwRLfQxZEgPrmgqvohtHpH357oUPC3LEY7Q3piR8Y9uSlJEZPYm Xo9hb0brur1AzQPXjj8W4ISh8eM5veKkr9iU48EEO/9QR7ZZJg9eUOCi/JcRjSlO ln3U69PZRBouSHHMxgk5jt4KwNlMMXfol+5f8crk19CqdvyTUu4OzoVgZxZfML53 MA== -----END CERTIFICATE-----Generated at Sat Jul 18 01:48:38 2026 by rpki-client