$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: DWCQMWmcruVyayLzFzBJ/rPfi3k3GOhYY6n5VS1iCXE= Subject key identifier: 98:C1:9C:D4:C6:9E:0E:BA:2A:E2:6F:7C:92:7A:78:47:E3:68:D1:D0 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 683EBF8C2400F3D9ED4B10AFAC414E421D8976C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0387 Signing time: Fri 27 Feb 2026 07:36:42 +0000 Manifest this update: Fri 27 Feb 2026 07:31:42 +0000 Manifest next update: Sat 28 Feb 2026 09:48:42 +0000 Files and hashes: 1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 3: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 4: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 6: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 7: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 8: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: pi1wGssLvt0qFwdI5X56Ph++KaohfGZ5abLnwBAv6Ng=) 11: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 12: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 13: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 14: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3e:bf:8c:24:00:f3:d9:ed:4b:10:af:ac:41:4e:42:1d:89:76:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Feb 27 07:31:42 2026 GMT Not After : Feb 28 09:48:42 2026 GMT Subject: CN=98C19CD4C69E0EBA2AE26F7C927A7847E368D1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:39:dd:69:a8:90:62:c7:e0:0c:0c:92:31: 6e:fd:24:67:23:16:48:33:db:77:fc:e9:1f:64:c4: a2:f8:37:74:50:8d:cb:9c:6f:b5:89:8b:51:a0:f5: 0c:45:5a:75:f0:12:06:9f:9f:1b:49:eb:8c:92:d1: 81:f5:2f:bf:bf:29:3f:15:7b:40:39:1a:28:66:2e: 3a:e9:50:c9:73:e7:3e:3f:c5:96:94:6d:79:b0:b2: 51:e6:dc:d3:ec:bd:3b:8a:0c:03:df:ea:1f:ce:be: 33:06:84:a6:8a:d6:44:21:e9:7d:c5:73:bd:72:f6: 50:0b:38:cb:2d:74:c3:a2:d3:87:35:56:d1:ea:be: f0:26:6c:95:05:cd:f7:6b:9a:2c:30:34:1e:c3:b4: 10:c9:a0:9d:bd:c2:82:d2:6a:ff:56:b1:04:77:fc: 3f:4a:21:6d:8c:be:11:03:51:f3:98:c0:06:1d:75: 40:ef:f3:3e:2f:36:86:15:31:a0:86:56:05:eb:d6: 70:84:40:22:74:55:dc:11:2a:4d:15:3f:3a:64:66: 93:e3:e5:f2:34:53:5e:b0:82:5e:d4:c8:23:1c:1a: 40:f5:db:a7:08:a4:df:ca:78:36:88:22:06:45:e2: de:d2:e0:df:bf:e9:65:f5:ce:19:03:b4:46:97:78: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:9C:D4:C6:9E:0E:BA:2A:E2:6F:7C:92:7A:78:47:E3:68:D1:D0 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:15:3b:0d:88:2a:31:6b:2e:3c:a7:7d:c1:9e:a7:bb:24:99: fb:da:d8:69:77:df:7d:79:f3:95:47:ea:c1:03:1b:bb:97:6e: e6:ca:40:c2:a6:92:17:12:88:55:f0:95:42:5b:63:dd:8e:e0: c5:ce:c4:02:52:26:b3:32:dc:4e:c2:c2:8a:32:60:e7:b6:72: 93:eb:10:7a:5b:62:ee:0f:ab:28:f8:c2:83:15:d0:0d:e4:7c: 79:e9:0d:e5:43:c6:13:18:9f:2f:6b:bb:4c:83:04:e5:1a:bb: 51:90:22:fd:5a:29:9a:2b:d2:49:3c:26:7e:ba:d4:a2:90:4b: 44:1b:d4:60:0b:a0:de:57:b9:a2:1e:0e:a9:9e:fc:a4:d7:ed: 74:ef:13:47:5b:4c:2d:8d:12:d5:37:33:f4:25:31:e6:d1:f0: 1c:8e:89:40:49:c2:88:40:8c:ec:c3:37:82:bd:c8:f5:18:6b: 56:08:73:0d:5b:1c:4f:1a:06:80:d0:51:7d:91:66:68:8e:1c: 54:53:0e:ca:6d:bd:ec:28:2f:27:5e:9e:d3:a5:06:4b:13:9b: bd:31:bf:7f:54:b8:87:f9:c1:76:7c:f3:8f:d6:66:c4:50:b0: fb:7d:b2:bf:ca:76:7f:a4:f3:ea:d8:88:b2:2a:f2:f4:b3:3a: 23:b6:94:fb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaD6/jCQA89ntSxCvrEFOQh2JdsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAyMjcwNzMxNDJaFw0yNjAyMjgwOTQ4NDJaMDMxMTAvBgNV BAMTKDk4QzE5Q0Q0QzY5RTBFQkEyQUUyNkY3QzkyN0E3ODQ3RTM2OEQxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlzndaaiQYsfgDAySMW79JGcj Fkgz23f86R9kxKL4N3RQjcucb7WJi1Gg9QxFWnXwEgafnxtJ64yS0YH1L7+/KT8V e0A5GihmLjrpUMlz5z4/xZaUbXmwslHm3NPsvTuKDAPf6h/OvjMGhKaK1kQh6X3F c71y9lALOMstdMOi04c1VtHqvvAmbJUFzfdrmiwwNB7DtBDJoJ29woLSav9WsQR3 /D9KIW2MvhEDUfOYwAYddUDv8z4vNoYVMaCGVgXr1nCEQCJ0VdwRKk0VPzpkZpPj 5fI0U16wgl7UyCMcGkD126cIpN/KeDaIIgZF4t7S4N+/6WX1zhkDtEaXeL/DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmMGc1MaeDroq4m98knp4R+No0dAwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArFTsN iCoxay48p33Bnqe7JJn72thpd999efOVR+rBAxu7l27mykDCppIXEohV8JVCW2Pd juDFzsQCUiazMtxOwsKKMmDntnKT6xB6W2LuD6so+MKDFdAN5Hx56Q3lQ8YTGJ8v a7tMgwTlGrtRkCL9WimaK9JJPCZ+utSikEtEG9RgC6DeV7miHg6pnvyk1+107xNH W0wtjRLVNzP0JTHm0fAcjolAScKIQIzswzeCvcj1GGtWCHMNWxxPGgaA0FF9kWZo jhxUUw7Kbb3sKC8nXp7TpQZLE5u9Mb9/VLiH+cF2fPOP1mbEULD7fbK/ynZ/pPPq 2IiyKvL0szojtpT7 -----END CERTIFICATE-----Generated at Fri Feb 27 12:24:47 2026 by rpki-client