$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: DkIm2uQizNETYVsCmkOStcpphRecbrtgK/9xv8tdMz4= Subject key identifier: AC:E4:6D:AD:73:47:2A:6A:34:61:73:55:2C:F8:7E:C9:90:24:D1:9C Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 4F5D8897AC1B1B4A380EF12F493B6156EDB75CB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 010A Signing time: Mon 12 Oct 2026 18:24:03 +0000 Manifest this update: Mon 12 Oct 2026 18:19:03 +0000 Manifest next update: Tue 13 Oct 2026 21:02:03 +0000 Files and hashes: 1: 3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa (hash: A9qWfeTwCBhogli0VdJKmwQZ/I0kaj1HbDe6pPugx+s=) 2: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: PcpRQkHklydDYh0ikvD8BrehCjftj4u4y29GAVlP3DA=) 3: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) 4: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: nW9+EgHT3oOhsXjlwH4++UdwAomM/XjI7PGAjqr/BNw=) 5: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) 6: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 7: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 21:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5d:88:97:ac:1b:1b:4a:38:0e:f1:2f:49:3b:61:56:ed:b7:5c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Oct 12 18:19:03 2026 GMT Not After : Oct 13 21:02:03 2026 GMT Subject: CN=ACE46DAD73472A6A346173552CF87EC99024D19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:7a:62:c6:27:88:53:27:7e:b7:20:1c:25: 78:93:7b:07:8a:22:e8:32:2f:31:68:de:d6:4f:9b: 2b:13:10:2a:5d:71:8a:19:21:9c:ae:7d:a9:af:88: 78:a1:b5:bf:dd:48:50:56:9e:d0:32:26:04:e0:19: 78:3e:92:a6:72:f2:4f:25:4f:45:ac:b2:6e:39:16: 8a:d0:db:a6:b2:b8:45:45:fd:eb:c5:ef:6f:87:43: 31:8b:6b:26:09:4e:86:00:b8:f6:08:93:c1:cd:c2: e1:32:5e:bc:c4:5c:56:6f:79:65:d2:95:f8:91:6a: 7f:e4:12:14:19:ea:56:72:12:2f:3e:8a:59:e3:9b: 7a:03:de:4c:fa:0b:a9:20:fb:f6:9c:86:d3:c6:a2: fc:d3:9e:2e:57:99:a5:24:ea:28:3e:43:1a:5d:f7: 39:8c:2a:65:46:09:9f:b9:d2:26:1c:f0:b6:ef:02: da:86:a4:96:68:da:10:db:94:58:e4:12:db:f0:84: 26:f0:49:a2:b3:5e:b4:6a:58:91:53:a2:3f:ce:0b: 5e:9b:36:91:e0:eb:89:9f:72:33:87:0a:d5:ff:a7: 7f:62:2e:a9:9b:b2:f2:9e:b3:59:9f:d7:06:7b:e4: ee:ed:56:e5:1d:e3:24:58:42:d7:9e:38:5b:ec:0e: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E4:6D:AD:73:47:2A:6A:34:61:73:55:2C:F8:7E:C9:90:24:D1:9C X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ef:8e:f4:39:54:21:3d:42:b4:48:83:e8:f8:2a:9c:44:37: 6c:e0:98:b8:f7:be:65:af:b1:a3:d0:61:31:70:da:a4:17:dd: 1b:d2:74:59:2e:39:e2:59:60:a1:2d:dd:e3:87:88:d9:75:02: 25:21:8a:a5:0d:18:55:37:5b:cb:ec:d8:b5:f4:3f:62:d2:0c: 87:c1:02:e6:84:72:52:ec:29:76:bf:19:af:f7:06:ed:1b:81: 5b:71:43:bf:3b:1d:1c:25:35:cf:80:03:1c:9e:50:bc:7d:67: 21:b1:55:5b:cf:13:ea:2d:c4:3f:88:94:c5:f7:0f:88:30:7d: 71:54:6c:40:32:89:72:71:ab:77:cd:bf:ce:78:52:9c:5c:34: 97:b6:d6:da:1d:64:3a:35:1e:1d:d9:f4:e9:9d:90:af:6f:76: 11:1f:75:a5:ed:dc:0d:75:47:2f:bf:b1:6f:68:57:6e:98:01: f4:17:13:18:e8:00:a3:d3:e9:84:21:91:d7:66:0d:f5:e8:52: 9a:32:cc:0b:11:68:e9:37:78:fd:77:b3:d5:73:63:0f:ba:fc: b7:fd:42:cc:02:09:35:44:e7:c3:fa:77:09:fe:a7:93:6f:9e: 8e:52:65:67:63:18:ea:ca:9c:da:ff:8d:b1:81:93:81:ec:8c: 0a:5b:d7:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT12Il6wbG0o4DvEvSTthVu23XLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjEwMTIxODE5MDNaFw0yNjEwMTMyMTAyMDNaMDMxMTAvBgNV BAMTKEFDRTQ2REFENzM0NzJBNkEzNDYxNzM1NTJDRjg3RUM5OTAyNEQxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v3pixieIUyd+tyAcJXiTeweK IugyLzFo3tZPmysTECpdcYoZIZyufamviHihtb/dSFBWntAyJgTgGXg+kqZy8k8l T0Wssm45ForQ26ayuEVF/evF72+HQzGLayYJToYAuPYIk8HNwuEyXrzEXFZveWXS lfiRan/kEhQZ6lZyEi8+ilnjm3oD3kz6C6kg+/achtPGovzTni5XmaUk6ig+Qxpd 9zmMKmVGCZ+50iYc8LbvAtqGpJZo2hDblFjkEtvwhCbwSaKzXrRqWJFToj/OC16b NpHg64mfcjOHCtX/p39iLqmbsvKes1mf1wZ75O7tVuUd4yRYQteeOFvsDvxxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrORtrXNHKmo0YXNVLPh+yZAk0ZwwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD++O9DlUIT1CtEiD6Pgq nEQ3bOCYuPe+Za+xo9BhMXDapBfdG9J0WS454llgoS3d44eI2XUCJSGKpQ0YVTdb y+zYtfQ/YtIMh8EC5oRyUuwpdr8Zr/cG7RuBW3FDvzsdHCU1z4ADHJ5QvH1nIbFV W88T6i3EP4iUxfcPiDB9cVRsQDKJcnGrd82/znhSnFw0l7bW2h1kOjUeHdn06Z2Q r292ER91pe3cDXVHL7+xb2hXbpgB9BcTGOgAo9PphCGR12YN9ehSmjLMCxFo6Td4 /Xez1XNjD7r8t/1CzAIJNUTnw/p3Cf6nk2+ejlJlZ2MY6sqc2v+NsYGTgeyMClvX ew== -----END CERTIFICATE-----Generated at Tue Oct 13 04:55:08 2026 by rpki-client