$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: Nh0qKrtMBtXzuXaOjP/63yvRM4xNAagtoXThemMhn+E= Subject key identifier: 0B:05:67:07:E9:B0:A9:5A:81:0A:29:DD:82:40:98:EB:86:CC:8E:9F Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 472C8CE7181FD14EA2D4603FEEB72AC0C9CF5310 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 0261 Signing time: Thu 02 Apr 2026 18:05:59 +0000 Manifest this update: Thu 02 Apr 2026 18:00:59 +0000 Manifest next update: Sat 04 Apr 2026 09:04:59 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: O8cQXpitjctRYtVRHUnyWZx7fLNjNhan5eAHUtx0M5M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 Apr 2026 20:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2c:8c:e7:18:1f:d1:4e:a2:d4:60:3f:ee:b7:2a:c0:c9:cf:53:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Apr 2 18:00:59 2026 GMT Not After : Apr 4 09:04:59 2026 GMT Subject: CN=0B056707E9B0A95A810A29DD824098EB86CC8E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:7a:91:1e:c1:69:7f:e7:7a:4b:6e:7c:63: 12:7a:c8:f3:e7:d9:52:5b:8a:00:97:69:c7:6e:93: 7a:a6:9e:52:81:7d:9a:21:c0:7a:eb:f5:f9:89:80: 41:18:60:22:fb:df:57:73:ff:55:43:7b:15:88:1a: c8:d5:c8:c0:99:69:31:f0:f0:2e:03:37:b8:49:39: eb:ce:9a:62:7a:55:f4:9f:66:17:06:f4:ee:5c:dc: 6a:e4:4c:21:c6:25:f7:45:b6:b4:be:9f:28:3d:a6: 78:49:b2:2a:7e:15:6e:6b:57:d2:14:7d:51:9e:1d: 03:4c:89:28:00:65:c4:90:76:b9:d1:a9:1e:24:ff: 47:0e:1f:83:60:e7:06:8f:87:36:ab:45:21:7e:20: 50:41:71:e9:53:9b:9f:0f:b4:fa:b5:8e:09:17:2a: 7c:ae:5f:bc:d5:f4:8a:32:d4:a9:37:2c:1b:cd:f7: 42:67:ce:18:00:a2:9e:fe:3c:01:94:eb:e4:91:a6: 38:30:c8:59:1f:aa:06:a0:97:c6:1f:29:f0:ad:d0: 7a:ab:8e:97:3e:fc:ff:1c:09:7b:c6:f8:4e:6e:15: ee:14:79:9d:14:00:b4:bb:f6:42:9a:63:f0:17:65: 8a:4d:fd:f9:88:9c:3a:e5:55:d6:1f:a6:ed:77:cf: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:67:07:E9:B0:A9:5A:81:0A:29:DD:82:40:98:EB:86:CC:8E:9F X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:4c:80:b6:fe:4a:32:36:be:3c:2d:25:ab:40:06:dc:19:f4: 7c:56:e1:5f:4e:21:d6:0a:8a:88:ba:5f:5c:c3:9d:06:b8:94: 50:e1:2f:d5:2b:02:98:3e:48:e3:d9:70:be:2e:76:bf:69:2c: 3c:32:27:8a:96:75:5c:3a:cf:20:7f:a8:a0:49:22:7b:5f:f1: d8:62:e1:0b:61:4f:e1:4a:c9:e8:56:02:41:72:a2:8d:ab:05: 9c:b7:da:08:fe:8d:15:06:ed:57:bc:02:5c:c8:e4:21:68:33: 80:60:f5:df:81:0a:1d:57:62:86:7b:4b:ba:c3:17:31:a3:67: d6:b9:13:0e:04:d7:12:27:c0:86:41:6a:4e:96:93:8f:33:b6: 11:66:69:d4:0c:65:41:e1:9d:9d:7e:33:cd:9a:d5:94:b3:85: b5:8e:34:12:c8:c5:82:62:67:bb:e5:30:20:f5:86:0b:7f:e0: 39:a7:d4:12:6c:c6:9e:98:2a:50:50:41:37:0d:06:a1:0c:76: f0:63:51:c3:4d:2c:98:c3:ee:ac:de:68:90:c0:63:26:f7:30: df:87:a5:89:ae:eb:81:56:0a:ce:3f:0a:4b:84:f7:d6:84:4a: aa:1b:20:de:fb:45:d5:c3:18:cf:a6:ae:64:b8:64:67:27:a5: f0:b6:7d:f4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURyyM5xgf0U6i1GA/7rcqwMnPUxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA0MDIxODAwNTlaFw0yNjA0MDQwOTA0NTlaMDMxMTAvBgNV BAMTKDBCMDU2NzA3RTlCMEE5NUE4MTBBMjlERDgyNDA5OEVCODZDQzhFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPZ3qRHsFpf+d6S258YxJ6yPPn 2VJbigCXacduk3qmnlKBfZohwHrr9fmJgEEYYCL731dz/1VDexWIGsjVyMCZaTHw 8C4DN7hJOevOmmJ6VfSfZhcG9O5c3GrkTCHGJfdFtrS+nyg9pnhJsip+FW5rV9IU fVGeHQNMiSgAZcSQdrnRqR4k/0cOH4Ng5waPhzarRSF+IFBBcelTm58PtPq1jgkX KnyuX7zV9Ioy1Kk3LBvN90JnzhgAop7+PAGU6+SRpjgwyFkfqgagl8YfKfCt0Hqr jpc+/P8cCXvG+E5uFe4UeZ0UALS79kKaY/AXZYpN/fmInDrlVdYfpu13z6upAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUCwVnB+mwqVqBCindgkCY64bMjp8wHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0yAtv5KMja+PC0lq0AG 3Bn0fFbhX04h1gqKiLpfXMOdBriUUOEv1SsCmD5I49lwvi52v2ksPDInipZ1XDrP IH+ooEkie1/x2GLhC2FP4UrJ6FYCQXKijasFnLfaCP6NFQbtV7wCXMjkIWgzgGD1 34EKHVdihntLusMXMaNn1rkTDgTXEifAhkFqTpaTjzO2EWZp1AxlQeGdnX4zzZrV lLOFtY40EsjFgmJnu+UwIPWGC3/gOafUEmzGnpgqUFBBNw0GoQx28GNRw00smMPu rN5okMBjJvcw34elia7rgVYKzj8KS4T31oRKqhsg3vtF1cMYz6auZLhkZyel8LZ9 9A== -----END CERTIFICATE-----Generated at Fri Apr 3 10:21:32 2026 by rpki-client