$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: YI9fU0JlejhTzU4InxVOdDzopb2wGdyrFO2Th8Rjiss= Subject key identifier: 39:37:2C:6F:06:A6:2D:0D:05:D5:E7:FA:ED:F3:BA:1C:30:3B:30:DC Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 47BF24022970C424C39F48F7871240BD076DE533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 0108 Signing time: Sun 11 Oct 2026 03:53:21 +0000 Manifest this update: Sun 11 Oct 2026 03:48:21 +0000 Manifest next update: Mon 12 Oct 2026 07:16:21 +0000 Files and hashes: 1: 3138352e3131362e38382e302f32332d3233203d3e20313937353337.roa (hash: A9qWfeTwCBhogli0VdJKmwQZ/I0kaj1HbDe6pPugx+s=) 2: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) 3: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: DkKZ9/KoCD4CAIbr3htJSajjmAevCairn4E/u0RDZc4=) 4: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) 5: 3138352e3131362e39302e302f32342d3234203d3e20383334.roa (hash: PcpRQkHklydDYh0ikvD8BrehCjftj4u4y29GAVlP3DA=) 6: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 7: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 07:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:24:02:29:70:c4:24:c3:9f:48:f7:87:12:40:bd:07:6d:e5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Oct 11 03:48:21 2026 GMT Not After : Oct 12 07:16:21 2026 GMT Subject: CN=39372C6F06A62D0D05D5E7FAEDF3BA1C303B30DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:ab:86:62:ef:26:11:a7:b2:d2:8b:4d:81: 20:46:07:bf:6e:dd:c1:fb:a5:cf:3b:0a:95:97:34: 0b:76:a5:b3:86:71:a9:0a:0d:55:89:37:8a:bb:d2: be:f3:33:f3:fb:4d:50:82:9c:bd:d4:7c:c8:70:7e: d0:cf:50:ae:3c:a7:49:0a:a8:6d:00:b5:d5:6a:b1: af:c2:dc:01:ed:ce:af:8a:73:3b:f6:b4:65:63:7d: c8:18:62:51:19:2f:a4:dc:cf:5b:87:3a:5f:87:ca: e4:78:8d:73:b2:ce:10:04:4b:a5:bc:8f:85:74:6b: 8a:9f:86:28:c0:51:9b:af:81:75:2f:74:9b:56:0d: a6:d1:01:fe:41:9e:4c:07:bd:36:41:91:1d:a2:33: 08:1f:3a:3a:00:c0:07:96:09:e1:7e:47:42:49:d6: ba:93:9b:c0:6c:f8:c3:2a:01:ad:65:a9:e1:60:50: 91:36:52:20:e7:93:bf:a5:86:18:eb:fe:a7:97:fd: 79:dd:68:8a:94:57:fb:34:7b:ea:ea:82:b6:7b:e7: 19:ce:f2:84:a5:f1:5b:41:4d:88:8b:47:1e:b7:ab: 1f:ea:8f:bf:f2:c3:b5:f8:2a:70:37:f8:ec:db:52: 9d:45:47:1d:61:81:1f:06:b5:08:fe:f9:ae:66:62: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:37:2C:6F:06:A6:2D:0D:05:D5:E7:FA:ED:F3:BA:1C:30:3B:30:DC X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:f6:32:5f:0d:5e:61:64:e8:32:18:97:d8:94:c7:e8:df: 54:ef:ee:16:91:21:9e:76:46:59:bb:a8:10:c9:fb:3c:45:5d: 32:75:2c:53:6e:f2:4d:05:60:8e:39:cb:38:df:6d:c4:db:cc: 40:32:13:e2:03:b8:6c:4d:59:e3:db:14:e9:76:f0:54:46:e4: 00:b4:db:3e:b2:ea:5e:45:7e:d2:de:ea:8f:ad:5d:4b:b1:b0: de:c3:9c:5c:8d:1f:f0:5a:c4:be:b9:4c:6d:14:2a:7a:62:8b: 22:93:f4:8f:1b:b6:21:bd:e9:31:4c:73:3c:34:d2:f0:66:3f: d1:fb:a8:84:f0:2f:02:b7:23:94:f6:a5:27:0e:58:9e:e4:3e: f9:fd:fc:d6:22:b9:2b:08:2d:26:d4:25:38:e2:a0:a2:ce:ea: af:8d:b0:11:d1:ea:b5:cc:eb:ca:a2:a4:b8:e6:f3:1c:2f:b5: 21:b8:79:3f:84:cd:98:96:1a:2d:9e:0c:bf:45:81:a6:9e:ae: dd:6a:42:07:fa:b9:63:1d:0f:79:b3:b5:6d:7d:3a:6d:4d:84: 61:c2:5e:f5:a2:52:18:90:03:b2:2d:cf:94:b0:25:21:e9:b8: f3:be:40:67:75:24:f2:5c:b3:e5:39:db:41:09:f6:55:6a:75: 53:3e:74:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR78kAilwxCTDn0j3hxJAvQdt5TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjEwMTEwMzQ4MjFaFw0yNjEwMTIwNzE2MjFaMDMxMTAvBgNV BAMTKDM5MzcyQzZGMDZBNjJEMEQwNUQ1RTdGQUVERjNCQTFDMzAzQjMwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrKuGYu8mEaey0otNgSBGB79u 3cH7pc87CpWXNAt2pbOGcakKDVWJN4q70r7zM/P7TVCCnL3UfMhwftDPUK48p0kK qG0AtdVqsa/C3AHtzq+Kczv2tGVjfcgYYlEZL6Tcz1uHOl+HyuR4jXOyzhAES6W8 j4V0a4qfhijAUZuvgXUvdJtWDabRAf5BnkwHvTZBkR2iMwgfOjoAwAeWCeF+R0JJ 1rqTm8Bs+MMqAa1lqeFgUJE2UiDnk7+lhhjr/qeX/XndaIqUV/s0e+rqgrZ75xnO 8oSl8VtBTYiLRx63qx/qj7/yw7X4KnA3+OzbUp1FRx1hgR8GtQj++a5mYsQPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOTcsbwamLQ0F1ef67fO6HDA7MNwwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnH2Ml8NXmFk6DIYl9iU x+jfVO/uFpEhnnZGWbuoEMn7PEVdMnUsU27yTQVgjjnLON9txNvMQDIT4gO4bE1Z 49sU6XbwVEbkALTbPrLqXkV+0t7qj61dS7Gw3sOcXI0f8FrEvrlMbRQqemKLIpP0 jxu2Ib3pMUxzPDTS8GY/0fuohPAvArcjlPalJw5YnuQ++f381iK5KwgtJtQlOOKg os7qr42wEdHqtczryqKkuObzHC+1Ibh5P4TNmJYaLZ4Mv0WBpp6u3WpCB/q5Yx0P ebO1bX06bU2EYcJe9aJSGJADsi3PlLAlIem4875AZ3Uk8lyz5TnbQQn2VWp1Uz50 HA== -----END CERTIFICATE-----Generated at Mon Oct 12 00:46:32 2026 by rpki-client