$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: QcwhaYnl3snQoqN3XG/oq0r6byz+QX/yHGP3eKoh/1E= Subject key identifier: 03:BD:6B:45:1E:4A:13:C7:D8:F9:02:A4:0A:82:76:EE:64:75:2B:3F Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 0BD28E49D27A8122C5DDFC0A9E8BA9769BD14D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0685 Signing time: Fri 13 Mar 2026 08:22:23 +0000 Manifest this update: Fri 13 Mar 2026 08:17:23 +0000 Manifest next update: Sat 14 Mar 2026 11:25:23 +0000 Files and hashes: 1: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 2: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 3: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 4: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 5: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: y4e9KkrAwOT7SU1GtUDOWLINERFHveNqgC5j69bFf0g=) 6: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 7: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 8: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 9: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 10: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 11: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 12: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 13: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 14: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 15: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 16: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 17: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 18: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 19: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 20: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 21: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 22: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 09:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d2:8e:49:d2:7a:81:22:c5:dd:fc:0a:9e:8b:a9:76:9b:d1:4d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Mar 13 08:17:23 2026 GMT Not After : Mar 14 11:25:23 2026 GMT Subject: CN=03BD6B451E4A13C7D8F902A40A8276EE64752B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:9b:18:fd:57:b3:1f:96:86:90:f8:89:3a: ea:82:c9:2c:aa:c3:82:e4:77:11:7e:ef:24:cb:68: 2e:a8:62:2a:34:02:55:9e:26:c7:33:9d:f6:f3:52: 2e:94:ae:35:dc:f0:08:cb:8c:4a:13:77:df:e7:de: 14:c8:62:00:72:f8:c8:da:35:41:01:c0:26:4f:f8: 12:35:50:0b:d8:c7:3d:df:53:fd:2a:3c:cd:41:fa: f0:04:58:63:f4:db:81:b4:bf:4b:6d:cc:33:d3:0d: b3:0a:19:2d:b0:0a:9a:7b:c9:b6:f7:2d:4e:b2:f1: d3:f1:9b:00:2c:55:43:b6:cc:90:41:e1:99:bd:f4: 79:b6:37:90:8e:6c:59:b4:b0:2d:aa:52:ab:a7:71: f4:f2:70:62:02:39:0e:86:e3:52:f3:f2:d5:ab:b7: 1b:39:f4:7f:2d:b8:70:02:1e:b9:6d:d6:aa:2b:e6: 16:a6:f0:2f:39:24:da:b3:10:e2:59:dd:24:8e:e8: fc:33:c3:cf:2b:ad:97:da:80:11:21:3a:e6:e1:88: 2c:81:ec:0d:b2:53:9d:34:84:bd:93:7e:0e:56:dd: 37:c4:34:97:73:45:84:b9:ad:e6:75:6b:c8:0b:e8: e2:46:be:45:a4:e3:12:fc:43:ca:1a:36:9f:ae:e6: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:6B:45:1E:4A:13:C7:D8:F9:02:A4:0A:82:76:EE:64:75:2B:3F X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:fb:05:39:5f:28:76:40:e4:48:3b:f7:17:c1:68:e3:98: ee:4f:40:d3:6c:55:5c:5c:5b:5f:ab:94:1c:d3:5b:14:d4:a7: 2e:52:bb:df:c6:20:31:42:5a:b7:c3:7b:b1:b8:0f:d4:65:87: a6:fe:2f:93:a2:35:c7:7b:97:42:2a:6e:d0:9c:91:d4:d7:2a: 49:98:76:0f:ae:f0:78:46:a5:f2:35:d0:d3:71:e1:f3:31:79: da:e2:13:35:d0:cf:de:29:f3:cf:0f:ac:2d:1e:6e:af:54:65: bd:d5:6f:74:c1:7d:78:c8:67:ee:1e:eb:0e:2d:ed:9f:d9:0c: 9e:7f:22:4b:7b:57:df:0b:a1:65:f2:b4:cc:ad:53:ed:ac:8d: 45:90:f3:8f:c7:36:84:11:1d:5e:08:ae:b8:f7:46:3b:98:51: 51:0c:3c:45:8b:1d:44:77:38:d5:16:36:13:65:05:15:d3:fa: d6:e4:c8:62:3b:ce:e0:de:63:7c:7a:30:c6:86:c2:64:66:b5: 43:b8:0e:48:b8:85:5a:ea:a3:81:ff:ad:78:9f:37:51:de:c9: d7:f9:24:51:28:6e:a0:91:0c:2d:99:c4:be:f8:71:5e:85:7d: 2e:79:de:9c:ff:78:3b:cb:24:88:ab:c4:40:2c:83:54:d2:f3: 67:10:c3:c2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC9KOSdJ6gSLF3fwKnoupdpvRTR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAzMTMwODE3MjNaFw0yNjAzMTQxMTI1MjNaMDMxMTAvBgNV BAMTKDAzQkQ2QjQ1MUU0QTEzQzdEOEY5MDJBNDBBODI3NkVFNjQ3NTJCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1JsY/VezH5aGkPiJOuqCySyq w4LkdxF+7yTLaC6oYio0AlWeJscznfbzUi6UrjXc8AjLjEoTd9/n3hTIYgBy+Mja NUEBwCZP+BI1UAvYxz3fU/0qPM1B+vAEWGP024G0v0ttzDPTDbMKGS2wCpp7ybb3 LU6y8dPxmwAsVUO2zJBB4Zm99Hm2N5CObFm0sC2qUquncfTycGICOQ6G41Lz8tWr txs59H8tuHACHrlt1qor5ham8C85JNqzEOJZ3SSO6Pwzw88rrZfagBEhOubhiCyB 7A2yU500hL2Tfg5W3TfENJdzRYS5reZ1a8gL6OJGvkWk4xL8Q8oaNp+u5n+lAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUA71rRR5KE8fY+QKkCoJ27mR1Kz8wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwH7BTlfKHZA5Eg79xfB aOOY7k9A02xVXFxbX6uUHNNbFNSnLlK738YgMUJat8N7sbgP1GWHpv4vk6I1x3uX Qipu0JyR1NcqSZh2D67weEal8jXQ03Hh8zF52uITNdDP3inzzw+sLR5ur1RlvdVv dMF9eMhn7h7rDi3tn9kMnn8iS3tX3wuhZfK0zK1T7ayNRZDzj8c2hBEdXgiuuPdG O5hRUQw8RYsdRHc41RY2E2UFFdP61uTIYjvO4N5jfHowxobCZGa1Q7gOSLiFWuqj gf+teJ83Ud7J1/kkUShuoJEMLZnEvvhxXoV9LnnenP94O8skiKvEQCyDVNLzZxDD wg== -----END CERTIFICATE-----Generated at Fri Mar 13 11:37:25 2026 by rpki-client