$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: ue7h+npBGGAZEMkDPQFOS+RPactefmUvL6mw7z5bQD8= Subject key identifier: AD:79:8E:3F:9D:86:89:73:1B:B8:ED:EB:F4:5A:87:B8:C5:19:4D:02 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2E93DAA2296B775C3B99315608A5C7721C962DCB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 039E Signing time: Mon 16 Mar 2026 09:38:15 +0000 Manifest this update: Mon 16 Mar 2026 09:33:15 +0000 Manifest next update: Tue 17 Mar 2026 10:34:15 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 2: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: RPpkv17da3jY2Dhfv/OuurfPR06SHuKIleXl2FE3S2E=) 3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=) 4: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 5: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=) 6: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=) 7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 8: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 9: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=) 10: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=) 11: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 12: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 13: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: PkDDbwNzmD9S4zWIDBatVOk8IeTi2WfPIclFqFKlzas=) 15: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=) 16: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=) 17: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: LJ4gHgZAEFWpdr/v3OH4TTdu8k7vsVq+KPkGuVH98c8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Mar 2026 10:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:93:da:a2:29:6b:77:5c:3b:99:31:56:08:a5:c7:72:1c:96:2d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Mar 16 09:33:15 2026 GMT Not After : Mar 17 10:34:15 2026 GMT Subject: CN=AD798E3F9D8689731BB8EDEBF45A87B8C5194D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:7a:81:5d:14:b2:bc:b3:be:4f:bf:b0:d2: b2:c1:98:4b:f7:33:c7:e8:0c:d7:ea:42:a5:cc:26: 29:96:f7:b9:5e:c9:bf:28:f7:c6:08:29:d6:35:cc: 6e:69:89:c4:3d:49:c8:03:b9:e8:75:56:06:6b:2e: 64:44:59:fe:4a:c1:25:e9:f6:af:50:3a:57:b5:58: a8:01:dd:bb:4c:07:80:39:a4:d7:6a:d1:b1:02:93: 0c:fc:13:c0:d4:59:93:ff:13:8d:9d:e7:c6:22:cb: 99:95:c5:83:4b:3b:bd:8e:d1:c6:48:90:8f:91:d0: 27:36:1e:a1:89:26:2d:5e:39:34:13:e7:c8:cc:59: 27:4d:0f:fd:1f:04:c9:58:32:0d:fe:c0:48:d9:98: 42:cd:c5:7d:da:ff:50:85:f3:23:d2:35:d2:d3:2b: ee:b6:c1:c0:ef:55:91:73:fc:c4:5f:75:8e:83:27: 17:10:2e:34:66:86:b6:e9:28:3f:6c:6f:65:5d:f7: 5c:d5:03:fc:23:57:74:43:51:5b:06:da:1b:1b:cf: 77:06:00:1b:d2:dc:28:30:78:ab:f7:7c:9a:c2:f4: fe:1f:7e:23:db:41:b2:53:c9:1a:f9:d2:76:b0:61: bf:2e:9a:83:ca:24:bc:6f:5f:ad:69:16:83:ca:9e: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:79:8E:3F:9D:86:89:73:1B:B8:ED:EB:F4:5A:87:B8:C5:19:4D:02 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d8:f3:be:27:73:b4:c9:00:6a:56:60:01:46:71:db:4f:77: d7:21:3d:b6:1d:46:43:bc:83:36:bc:f7:e7:49:1d:01:be:07: 74:b2:8a:c7:a1:83:68:d8:1b:09:a2:f9:1f:7e:d1:36:7f:8b: 3f:70:2e:6b:a3:3a:ed:a3:21:e6:a2:8f:08:c7:8f:4a:04:16: 6d:e4:a9:ec:ef:d8:df:ab:37:52:35:7b:56:43:3e:a7:c9:6f: 10:bf:5a:da:1a:d6:78:9d:01:6c:73:c3:f9:ef:48:36:ea:c1: f3:9f:c6:51:f7:d4:45:6a:3b:16:63:65:46:fa:b5:3a:1f:f2: cc:fb:7f:ea:42:7c:90:49:79:25:5d:85:b4:22:5a:88:17:1d: b8:d4:3e:07:85:b0:90:45:63:cb:87:51:f0:10:de:6e:cb:3f: 90:96:c6:3d:97:49:74:9f:01:15:15:ef:48:3b:26:bb:4b:ab: 25:53:c6:3f:aa:ab:a6:e6:d8:8b:51:3f:94:5b:49:54:2f:d2: 6a:8e:ff:1d:47:4f:74:6f:2c:8d:cd:75:d1:9c:41:d9:fe:30: 38:e8:ab:e8:f5:58:3b:6d:4f:a5:41:26:ad:57:fc:b1:63:90: 16:78:f9:5c:da:c2:39:ab:2f:4c:e5:58:3d:1a:aa:18:0c:8a: 12:89:cb:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULpPaoilrd1w7mTFWCKXHchyWLcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNjAzMTYwOTMzMTVaFw0yNjAzMTcxMDM0MTVaMDMxMTAvBgNV BAMTKEFENzk4RTNGOUQ4Njg5NzMxQkI4RURFQkY0NUE4N0I4QzUxOTREMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xXqBXRSyvLO+T7+w0rLBmEv3 M8foDNfqQqXMJimW97leyb8o98YIKdY1zG5picQ9ScgDueh1VgZrLmREWf5KwSXp 9q9QOle1WKgB3btMB4A5pNdq0bECkwz8E8DUWZP/E42d58Yiy5mVxYNLO72O0cZI kI+R0Cc2HqGJJi1eOTQT58jMWSdND/0fBMlYMg3+wEjZmELNxX3a/1CF8yPSNdLT K+62wcDvVZFz/MRfdY6DJxcQLjRmhrbpKD9sb2Vd91zVA/wjV3RDUVsG2hsbz3cG ABvS3CgweKv3fJrC9P4ffiPbQbJTyRr50nawYb8umoPKJLxvX61pFoPKnnsPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrXmOP52GiXMbuO3r9FqHuMUZTQIwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBB2PO+ J3O0yQBqVmABRnHbT3fXIT22HUZDvIM2vPfnSR0Bvgd0sorHoYNo2BsJovkfftE2 f4s/cC5rozrtoyHmoo8Ix49KBBZt5Kns79jfqzdSNXtWQz6nyW8Qv1raGtZ4nQFs c8P570g26sHzn8ZR99RFajsWY2VG+rU6H/LM+3/qQnyQSXklXYW0IlqIFx241D4H hbCQRWPLh1HwEN5uyz+QlsY9l0l0nwEVFe9IOya7S6slU8Y/qqum5tiLUT+UW0lU L9Jqjv8dR090byyNzXXRnEHZ/jA46Kvo9Vg7bU+lQSatV/yxY5AWePlc2sI5qy9M 5Vg9GqoYDIoSicsa -----END CERTIFICATE-----Generated at Mon Mar 16 20:55:28 2026 by rpki-client