$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: lGRI4V40mB3c95S/Qui6Xgy3dI8nOd3Fz7UpT2UkP1w= Subject key identifier: 97:6A:2D:5F:73:49:2D:6E:B8:0D:DC:C2:19:CE:4B:DC:2F:47:46:90 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 3A592DF234BAA3C70C6C6D710E926A95C86B1550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 0109 Signing time: Sun 11 Oct 2026 23:18:43 +0000 Manifest this update: Sun 11 Oct 2026 23:13:43 +0000 Manifest next update: Tue 13 Oct 2026 02:23:43 +0000 Files and hashes: 1: 3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa (hash: A9qWfeTwCBhogli0VdJKmwQZ/I0kaj1HbDe6pPugx+s=) 2: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) 3: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: PcpRQkHklydDYh0ikvD8BrehCjftj4u4y29GAVlP3DA=) 4: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: 8F2w5Khpbb5Ut1EvQwEKiCjxdXdisax8m8Ke0GJpFOY=) 5: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) 6: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) 7: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 02:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:59:2d:f2:34:ba:a3:c7:0c:6c:6d:71:0e:92:6a:95:c8:6b:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Oct 11 23:13:43 2026 GMT Not After : Oct 13 02:23:43 2026 GMT Subject: CN=976A2D5F73492D6EB80DDCC219CE4BDC2F474690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:6d:0b:f3:d1:18:de:b1:70:fe:d0:bb:11: f1:d8:30:e4:4c:7f:01:09:4b:55:a7:f6:4e:74:1b: c5:5a:0e:20:ea:7e:32:2a:53:9f:d7:69:63:a7:2b: 24:97:4b:08:a0:2b:f9:6c:92:21:60:0d:79:26:52: 22:b4:6e:66:97:f6:78:21:fb:5f:d2:a1:12:f8:cb: b1:d2:28:81:bd:d1:7a:25:75:9f:74:82:4d:99:8d: 5f:88:64:e9:e2:5a:1f:20:19:4d:69:81:1d:02:1d: 9f:29:87:da:dd:8f:66:e5:bd:72:df:f8:aa:71:35: ed:7d:c6:14:dd:0a:c4:ef:1f:c9:16:17:88:fe:1f: 27:ef:4d:84:06:d0:0c:56:e3:c8:19:a2:70:0a:a7: 72:e5:81:dc:d6:94:45:83:df:27:27:b0:83:82:93: d5:fa:a2:2f:cb:a6:51:c9:3b:f4:b2:85:6a:8a:a5: 01:cd:34:3a:f8:c3:40:d0:87:5c:90:44:0a:d7:45: e4:f2:de:ee:51:79:9d:83:cc:24:0f:cb:ad:9b:e8: 7a:f7:f2:ed:20:b0:b2:b8:d5:bf:1e:85:d0:e6:aa: 23:ae:21:31:67:f7:98:2e:b7:47:0f:8d:dd:b2:24: cb:0d:81:34:bf:f6:25:2f:65:63:80:fa:7d:c5:d6: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6A:2D:5F:73:49:2D:6E:B8:0D:DC:C2:19:CE:4B:DC:2F:47:46:90 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:72:48:b2:65:da:3f:0e:2d:a0:cf:05:81:bb:98:7b:d6:cc: b0:90:53:20:aa:4b:39:cb:b7:a8:6d:8e:0b:79:d0:79:32:64: f2:da:35:97:d9:53:8d:a4:6d:5c:3f:d9:b8:77:89:85:1a:32: a9:e4:35:db:c5:2f:a1:2a:32:b2:14:e0:ad:61:86:6a:eb:03: 24:d9:07:56:5b:26:71:00:c1:96:9c:f9:bb:aa:32:84:f1:14: f3:81:50:f6:ea:3c:36:16:e0:fe:1c:f1:87:98:ef:6d:a3:6f: 24:2b:e6:64:11:02:fa:23:f5:1a:0c:4a:a2:a9:f5:e3:19:1a: b8:0d:d1:7a:e1:5d:8d:62:50:ce:b9:43:b6:cf:83:25:46:c8: a8:57:c7:27:e5:80:61:bd:bf:fb:38:1b:53:ea:2d:3d:77:af: 4f:67:c2:e5:52:41:f3:bd:2f:f8:cf:a8:44:a4:e3:c4:6e:bf: 4b:1c:09:7b:e8:65:f1:6b:e7:ad:98:e9:b6:86:a5:06:2c:7b: ea:d0:86:74:ce:c2:0d:48:d1:6f:79:67:e8:ce:fe:ac:07:04: 62:00:01:fd:37:7b:06:3d:c6:ad:ca:e5:3f:8e:91:3c:af:b6: 8c:82:e6:78:4c:0b:89:45:c0:20:e3:64:ea:6c:eb:d7:f0:a2: ce:35:00:32 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOlkt8jS6o8cMbG1xDpJqlchrFVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjEwMTEyMzEzNDNaFw0yNjEwMTMwMjIzNDNaMDMxMTAvBgNV BAMTKDk3NkEyRDVGNzM0OTJENkVCODBERENDMjE5Q0U0QkRDMkY0NzQ2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsM20L89EY3rFw/tC7EfHYMORM fwEJS1Wn9k50G8VaDiDqfjIqU5/XaWOnKySXSwigK/lskiFgDXkmUiK0bmaX9ngh +1/SoRL4y7HSKIG90XoldZ90gk2ZjV+IZOniWh8gGU1pgR0CHZ8ph9rdj2blvXLf +KpxNe19xhTdCsTvH8kWF4j+HyfvTYQG0AxW48gZonAKp3LlgdzWlEWD3ycnsIOC k9X6oi/LplHJO/SyhWqKpQHNNDr4w0DQh1yQRArXReTy3u5ReZ2DzCQPy62b6Hr3 8u0gsLK41b8ehdDmqiOuITFn95gut0cPjd2yJMsNgTS/9iUvZWOA+n3F1iG1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl2otX3NJLW64DdzCGc5L3C9HRpAwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHJIsmXaPw4toM8FgbuY e9bMsJBTIKpLOcu3qG2OC3nQeTJk8to1l9lTjaRtXD/ZuHeJhRoyqeQ128UvoSoy shTgrWGGausDJNkHVlsmcQDBlpz5u6oyhPEU84FQ9uo8Nhbg/hzxh5jvbaNvJCvm ZBEC+iP1GgxKoqn14xkauA3ReuFdjWJQzrlDts+DJUbIqFfHJ+WAYb2/+zgbU+ot PXevT2fC5VJB870v+M+oRKTjxG6/SxwJe+hl8WvnrZjptoalBix76tCGdM7CDUjR b3ln6M7+rAcEYgAB/Td7Bj3GrcrlP46RPK+2jILmeEwLiUXAIONk6mzr1/CizjUA Mg== -----END CERTIFICATE-----Generated at Mon Oct 12 12:45:59 2026 by rpki-client