$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: TJAgYWegA8aAADCdp44fLmQjQsyMx8SRcaYE4VJj7nU= Subject key identifier: 99:4E:F4:66:F4:DE:2D:C8:14:6D:86:5A:13:C8:A0:AA:AB:F5:C0:A6 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 1DC1B36E5C9001D5082787815C01028DA5CF8E96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 18 Signing time: Tue 21 Apr 2026 10:16:33 +0000 Manifest this update: Tue 21 Apr 2026 10:11:33 +0000 Manifest next update: Wed 22 Apr 2026 10:54:33 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: PDHMGtQVKvGE9M7U1iVmYlzDRjgHY6aC8Zs1YWAiThE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 03:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c1:b3:6e:5c:90:01:d5:08:27:87:81:5c:01:02:8d:a5:cf:8e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Apr 21 10:11:33 2026 GMT Not After : Apr 22 10:54:33 2026 GMT Subject: CN=994EF466F4DE2DC8146D865A13C8A0AAABF5C0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:4e:88:e2:f7:0d:d1:8f:6e:cf:4d:9c:da: 21:15:82:ff:a4:35:61:e3:58:68:50:21:83:0d:37: 44:05:57:f9:86:a0:89:62:01:70:2f:ec:7b:c0:96: 14:41:a6:89:86:64:73:11:d1:1b:ac:e0:1a:51:23: fd:14:00:81:d8:c2:98:7a:a2:31:18:e0:ac:1b:43: 88:9e:29:0a:e6:11:e0:95:8b:81:64:86:47:01:d7: 63:e3:b6:5f:fb:83:c0:90:c6:5b:19:3d:b0:9f:65: fb:ed:b9:49:4a:81:d6:31:ae:6c:b2:b4:07:c3:f3: 8f:84:7a:e8:a2:34:0e:ab:ea:b9:05:ee:e5:d8:da: d8:07:7b:9e:8b:b9:47:f5:b4:2a:0e:0f:23:bc:b0: eb:ef:68:52:fa:bb:07:56:05:88:18:e3:6a:56:c1: 70:be:37:9a:00:39:e0:02:45:f7:e7:9d:44:1d:aa: 61:a4:b7:37:38:d4:7a:fb:a0:64:10:30:15:13:b5: 67:f5:fa:30:03:1b:60:82:47:e7:90:de:28:ab:18: d5:ba:4c:3c:18:66:c5:1e:37:05:08:08:84:e6:44: 64:2b:65:16:0f:70:43:1a:ea:18:32:2d:9c:e2:2d: 0f:2e:f2:51:e3:e6:e3:93:e9:4e:c2:d2:41:59:e5: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:F4:66:F4:DE:2D:C8:14:6D:86:5A:13:C8:A0:AA:AB:F5:C0:A6 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2c:2f:2f:5d:47:68:e1:5c:fb:2a:6d:e2:33:e4:39:f6:c3: c5:b8:a2:fc:f6:b7:27:30:7d:26:91:a9:1a:c0:5a:1a:43:c0: 6d:07:66:ae:8d:8b:d8:2d:d0:49:a4:85:a0:ce:86:d6:4e:32: 00:8c:b7:44:82:c2:c5:eb:9d:d0:bb:6e:9b:2e:97:25:20:4d: dc:30:c7:9d:a0:3f:95:48:53:ac:94:76:a3:6a:d2:53:72:6b: 9f:97:f9:e5:4d:ec:b7:f7:93:d5:d0:7b:89:99:48:04:57:5e: 6b:dc:48:68:36:7a:c6:15:14:58:ce:f6:d2:74:88:82:f9:41: b1:de:89:2f:d5:9b:e1:c1:05:26:7d:4f:19:a4:af:64:43:ea: 88:0c:50:38:32:93:ee:df:fa:92:a5:b3:7c:e5:8e:ab:12:ce: b7:89:9f:cb:1b:94:d4:dd:a6:d8:e0:81:90:10:db:b4:11:af: aa:21:b0:3c:32:e7:e1:9c:c3:df:00:11:5e:fd:ab:fb:a2:b6: c3:b3:a9:63:a0:f3:f8:6c:ff:ee:68:21:64:70:aa:aa:c2:73: cd:7e:bf:a7:2f:5c:ea:f1:18:7f:e7:a8:b0:ad:7e:7d:58:02: e4:3d:a8:49:26:7d:5b:1a:31:d2:b9:74:5d:dc:ff:b4:8e:ed: e0:13:72:89 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHcGzblyQAdUIJ4eBXAECjaXPjpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA0MjExMDExMzNaFw0yNjA0MjIxMDU0MzNaMDMxMTAvBgNV BAMTKDk5NEVGNDY2RjRERTJEQzgxNDZEODY1QTEzQzhBMEFBQUJGNUMwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh06I4vcN0Y9uz02c2iEVgv+k NWHjWGhQIYMNN0QFV/mGoIliAXAv7HvAlhRBpomGZHMR0Rus4BpRI/0UAIHYwph6 ojEY4KwbQ4ieKQrmEeCVi4FkhkcB12Pjtl/7g8CQxlsZPbCfZfvtuUlKgdYxrmyy tAfD84+EeuiiNA6r6rkF7uXY2tgHe56LuUf1tCoODyO8sOvvaFL6uwdWBYgY42pW wXC+N5oAOeACRffnnUQdqmGktzc41Hr7oGQQMBUTtWf1+jADG2CCR+eQ3iirGNW6 TDwYZsUeNwUICITmRGQrZRYPcEMa6hgyLZziLQ8u8lHj5uOT6U7C0kFZ5eKzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmU70ZvTeLcgUbYZaE8igqqv1wKYwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABLC8v XUdo4Vz7Km3iM+Q59sPFuKL89rcnMH0mkakawFoaQ8BtB2aujYvYLdBJpIWgzobW TjIAjLdEgsLF653Qu26bLpclIE3cMMedoD+VSFOslHajatJTcmufl/nlTey395PV 0HuJmUgEV15r3EhoNnrGFRRYzvbSdIiC+UGx3okv1ZvhwQUmfU8ZpK9kQ+qIDFA4 MpPu3/qSpbN85Y6rEs63iZ/LG5TU3abY4IGQENu0Ea+qIbA8MufhnMPfABFe/av7 orbDs6ljoPP4bP/uaCFkcKqqwnPNfr+nL1zq8Rh/56iwrX59WALkPahJJn1bGjHS uXRd3P+0ju3gE3KJ -----END CERTIFICATE-----Generated at Tue Apr 21 18:59:08 2026 by rpki-client