$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: GZTnNI2amDMwGojdMOy/sHzuIwWZddiIzM76lTDLLBE= Subject key identifier: 02:C6:48:46:2C:C4:B0:C7:44:02:12:7E:D2:D9:05:3D:D9:4E:F3:B8 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 353BDEDF8B0A893839C72044F4E3A204A1BD7390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 15 Signing time: Mon 27 Apr 2026 19:51:09 +0000 Manifest this update: Mon 27 Apr 2026 19:46:09 +0000 Manifest next update: Tue 28 Apr 2026 21:53:09 +0000 Files and hashes: 1: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (hash: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=) 2: 34362e31382e38392e302f32342d3234203d3e20343032323831.roa (hash: PPj+d7eGo2PBJtltoQXVruPJaCtqJLk7W5YnaZT/qog=) 3: 3138352e3131362e39302e302f32342d3234203d3e20343032323839.roa (hash: +Ui26OpR2rnRNb3YOnuRkkVtjIfm7ZTC4lRerOfEZ6k=) 4: 34362e31382e39302e302f32342d3234203d3e20323037313538.roa (hash: c3XGP2QOaAegFM0BJ/uAWNxnHJgzHzZj7rsmxO7Bggk=) 5: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 6: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (hash: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=) 7: 34362e31382e39312e302f32342d3234203d3e20323032373932.roa (hash: ntblaebzWfMZkapnZj/wCZOlMJjioVqZTa39aOgNWdQ=) 8: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: CQVbPQEKe+OHWLtSGppHfbjQGDLvclRroSeXZLmkn20=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:de:df:8b:0a:89:38:39:c7:20:44:f4:e3:a2:04:a1:bd:73:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Apr 27 19:46:09 2026 GMT Not After : Apr 28 21:53:09 2026 GMT Subject: CN=02C648462CC4B0C74402127ED2D9053DD94EF3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:61:a1:76:23:a6:2f:4a:60:88:b1:04:85: b6:30:3f:09:95:53:7a:b7:c8:69:f9:4d:29:cf:27: 77:96:53:3b:ea:e6:bb:fa:17:70:8d:41:fe:df:1d: 93:d1:13:23:f5:c7:9f:dd:31:45:df:d2:0f:80:e5: ff:9c:eb:9b:5d:22:a1:4d:81:5f:1f:70:e7:6b:29: 64:9e:34:35:3e:5e:6f:fa:72:6f:52:f5:d8:ce:8b: b8:e9:28:80:a1:b7:2e:84:9e:69:09:da:d9:6a:27: c9:21:aa:93:9e:de:9c:3d:7e:7a:eb:ca:64:24:8e: 8d:fa:46:3b:ab:dd:98:02:d9:c9:ae:7b:a7:cd:19: 7b:15:c9:a6:5c:5e:72:0f:2c:86:d8:ea:c5:aa:a8: 2a:09:90:cd:eb:85:df:bf:61:1c:6f:eb:f9:67:cb: 00:89:04:bb:d9:eb:a3:4c:9e:d4:51:c2:3e:12:00: 27:13:47:8e:df:eb:85:22:27:b2:d7:df:af:8a:34: df:82:ca:f6:b3:78:1f:03:aa:49:b2:57:75:cd:c6: 08:de:ac:9b:8f:0a:9e:50:f5:e5:34:46:53:b9:ca: 94:eb:10:b4:a3:e7:b6:d1:81:58:3d:c0:00:73:35: f7:ed:1b:59:e5:52:e6:0b:50:aa:30:ee:40:42:f4: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C6:48:46:2C:C4:B0:C7:44:02:12:7E:D2:D9:05:3D:D9:4E:F3:B8 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:50:ff:d0:df:95:60:a5:4d:d1:f5:00:d6:5a:cf:c6:8e: d2:8c:6c:83:9c:1f:38:99:9e:25:e1:81:d4:5a:54:b3:fb:c9: f7:a6:53:8f:5c:e4:06:0b:74:cc:49:96:38:64:d1:f1:b1:27: dd:03:f9:46:13:c4:87:e7:78:8d:2e:fd:b3:b1:65:11:f9:c4: 61:b1:22:37:b4:2a:c9:7c:9a:51:d6:34:c7:72:a0:d6:c7:67: d6:f7:55:cd:42:40:4e:7f:33:41:63:e0:bc:cf:4e:84:fd:4e: a6:0b:37:65:9b:e6:58:55:d4:8b:b0:be:66:39:cc:1e:7e:86: d0:2b:68:f0:5f:66:d9:6e:33:d2:92:01:0f:eb:d0:1a:c1:45: 88:81:01:96:70:73:c2:42:bd:23:fb:dd:0d:20:84:ad:ed:22: c5:32:2b:a2:47:41:6a:7a:fd:0f:ee:ce:e0:d4:8f:a0:a7:8d: fe:02:e2:70:42:fc:a7:dc:83:bb:7f:2b:fe:9f:ab:ff:1b:49: a9:76:f4:78:9d:fb:0a:86:28:11:bb:d5:b6:f8:a8:44:2b:bc: f9:15:a1:67:7c:f5:a4:2c:45:b7:61:e5:c3:bc:51:78:d1:52: 6b:c7:bd:34:fb:32:cb:ae:6e:4e:b2:1a:ee:e7:42:e7:1e:d6: a8:46:f3:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNTve34sKiTg5xyBE9OOiBKG9c5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA0MjcxOTQ2MDlaFw0yNjA0MjgyMTUzMDlaMDMxMTAvBgNV BAMTKDAyQzY0ODQ2MkNDNEIwQzc0NDAyMTI3RUQyRDkwNTNERDk0RUYzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUmGhdiOmL0pgiLEEhbYwPwmV U3q3yGn5TSnPJ3eWUzvq5rv6F3CNQf7fHZPREyP1x5/dMUXf0g+A5f+c65tdIqFN gV8fcOdrKWSeNDU+Xm/6cm9S9djOi7jpKIChty6EnmkJ2tlqJ8khqpOe3pw9fnrr ymQkjo36Rjur3ZgC2cmue6fNGXsVyaZcXnIPLIbY6sWqqCoJkM3rhd+/YRxv6/ln ywCJBLvZ66NMntRRwj4SACcTR47f64UiJ7LX36+KNN+CyvazeB8DqkmyV3XNxgje rJuPCp5Q9eU0RlO5ypTrELSj57bRgVg9wABzNfftG1nlUuYLUKow7kBC9BrrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAsZIRizEsMdEAhJ+0tkFPdlO87gwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbFQ/9DflWClTdH1ANZa z8aO0oxsg5wfOJmeJeGB1FpUs/vJ96ZTj1zkBgt0zEmWOGTR8bEn3QP5RhPEh+d4 jS79s7FlEfnEYbEiN7QqyXyaUdY0x3Kg1sdn1vdVzUJATn8zQWPgvM9OhP1Opgs3 ZZvmWFXUi7C+ZjnMHn6G0Cto8F9m2W4z0pIBD+vQGsFFiIEBlnBzwkK9I/vdDSCE re0ixTIrokdBanr9D+7O4NSPoKeN/gLicEL8p9yDu38r/p+r/xtJqXb0eJ37CoYo EbvVtvioRCu8+RWhZ3z1pCxFt2Hlw7xReNFSa8e9NPsyy65uTrIa7udC5x7WqEbz gw== -----END CERTIFICATE-----Generated at Tue Apr 28 00:47:51 2026 by rpki-client