$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: r3pids0LLg5E0v7zdhUc/elto8sDnq6QL6mUGZSpwak= Subject key identifier: 10:D1:7A:9A:54:B7:63:17:D0:F6:F7:E3:92:12:CA:E9:2D:BE:21:E7 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 2D2604AF99A4385DFBFD0CDFCB0A157C4CEE9781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 0689 Signing time: Fri 24 Apr 2026 19:00:54 +0000 Manifest this update: Fri 24 Apr 2026 18:55:54 +0000 Manifest next update: Sat 25 Apr 2026 22:34:54 +0000 Files and hashes: 1: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=) 2: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: lioF6Pa/YVkC3/Yb4leMaF8QyftEu6UDlfCgDIZdUHE=) 3: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 4: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=) 5: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=) 6: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=) 7: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=) 8: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=) 9: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=) 10: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=) 11: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 12: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 13: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=) 14: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 15: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 16: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=) 17: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=) 18: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=) 19: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 20: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: p+Be19DO+AcFb4gkjYPxJHkKBEIAgNCzzJgXrpyeezM=) 21: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 22: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 23: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=) 24: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=) 25: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=) 26: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=) 27: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=) 28: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 29: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: rPMAE/Emhe8ab0enxKSEB8g0vJLbwLIQWJGIysDgBSk=) 30: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 31: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=) 32: 322e35382e38352e302f32342d3234203d3e20333939343638.roa (hash: DxOq5kGC1UY7gmuJl9GjMiorjvhCP4eEet6VwfLbzJ4=) 33: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=) 34: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=) 35: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=) 36: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=) 37: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=) 38: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=) 39: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=) 40: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: rZD8rahYSCJKmrmYmBTS/7vmJS9IDa+dMQdQnVTzzLc=) 41: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 42: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 43: 34352e382e3137332e302f32342d3234203d3e20343032323134.roa (hash: hRMpZt50rHA/kNyP9JTpxG/2+AVVgI2kmc0YKSYBUlY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 22:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:04:af:99:a4:38:5d:fb:fd:0c:df:cb:0a:15:7c:4c:ee:97:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Apr 24 18:55:54 2026 GMT Not After : Apr 25 22:34:54 2026 GMT Subject: CN=10D17A9A54B76317D0F6F7E39212CAE92DBE21E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:72:d8:d6:12:49:46:7b:c6:48:5d:36:c3: 6c:eb:d8:4d:c8:bb:75:7a:65:42:56:3b:7c:5d:93: 02:1a:77:58:44:b6:ae:07:ba:08:07:95:8b:7d:0c: 60:c0:d6:4a:9b:64:33:0f:64:39:7a:c1:60:d9:37: 6e:09:65:30:ad:79:1b:fe:eb:7d:bf:3d:04:52:ef: bb:01:3e:36:ad:60:eb:90:9f:1f:c0:95:e4:28:21: 54:d3:45:63:3d:1a:29:94:43:78:99:4b:ef:c8:ae: 4c:8f:de:0e:e3:71:22:d5:dd:ce:29:a9:69:51:e2: 85:16:56:50:a8:09:6c:3d:86:32:80:95:04:3c:66: 56:f3:dd:96:35:c8:8f:d6:95:b2:89:e5:ec:0c:4e: 69:91:43:62:ed:d8:f0:62:46:b4:4b:66:8b:e9:e7: 73:57:75:00:bd:8b:91:33:0f:39:50:dc:5e:e0:5c: 29:46:39:cb:0c:41:a5:4d:ab:b4:5d:52:24:a1:d2: 7d:37:9e:06:ce:f9:1a:c1:fd:4d:36:5c:dd:87:9e: 4f:f7:5f:f3:a0:51:9f:bc:3a:42:cc:73:4b:4c:8f: 0d:81:49:88:84:3d:24:2e:9d:aa:33:df:c1:22:ab: b3:9e:39:e2:39:27:20:87:95:3e:03:3d:2b:bb:82: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:7A:9A:54:B7:63:17:D0:F6:F7:E3:92:12:CA:E9:2D:BE:21:E7 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b0:17:68:d5:f1:86:ec:fb:db:db:d8:b7:11:47:a8:fe:3d: f2:a1:ec:5c:1a:65:75:c8:37:3e:86:86:0c:97:da:a0:07:93: 92:81:27:16:d6:38:4f:c7:18:57:41:4d:29:ee:59:0c:df:08: ab:ba:28:11:44:34:3a:b1:96:16:03:2d:f4:98:9d:32:d1:9b: 6f:3c:92:37:e1:85:59:65:61:8a:c4:df:68:91:0d:75:a1:67: 5f:03:ab:1a:1a:2d:fd:78:b5:25:6a:e1:2a:cf:51:d1:3f:6c: 39:ac:8f:d6:8c:55:c6:2c:96:80:74:cb:bb:c1:53:ba:03:4a: d4:93:de:53:d9:7e:77:e9:df:9c:a7:09:53:c0:6d:24:eb:99: ac:ab:4b:fa:b0:8d:d2:98:b3:f1:12:16:5b:93:2b:fd:47:04: 8d:37:f2:73:c8:cc:cc:a6:ce:ca:58:5e:c0:b5:48:60:88:9f: e9:24:26:36:01:83:b0:66:f2:cb:29:a7:ad:18:7e:1c:98:4f: 6a:62:67:3a:47:f7:72:37:de:c4:f9:b6:05:8d:b8:63:6a:9b: 00:e8:13:5a:c6:a4:80:78:2d:1b:11:61:c5:a7:8f:1f:42:5c: 62:96:67:4f:90:99:5a:cd:1b:31:00:04:ec:f2:53:17:e0:56: 37:5e:78:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULSYEr5mkOF37/QzfywoVfEzul4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjA0MjQxODU1NTRaFw0yNjA0MjUyMjM0NTRaMDMxMTAvBgNV BAMTKDEwRDE3QTlBNTRCNzYzMTdEMEY2RjdFMzkyMTJDQUU5MkRCRTIxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIHLY1hJJRnvGSF02w2zr2E3I u3V6ZUJWO3xdkwIad1hEtq4HuggHlYt9DGDA1kqbZDMPZDl6wWDZN24JZTCteRv+ 632/PQRS77sBPjatYOuQnx/AleQoIVTTRWM9GimUQ3iZS+/IrkyP3g7jcSLV3c4p qWlR4oUWVlCoCWw9hjKAlQQ8Zlbz3ZY1yI/WlbKJ5ewMTmmRQ2Lt2PBiRrRLZovp 53NXdQC9i5EzDzlQ3F7gXClGOcsMQaVNq7RdUiSh0n03ngbO+RrB/U02XN2Hnk/3 X/OgUZ+8OkLMc0tMjw2BSYiEPSQunaoz38Eiq7OeOeI5JyCHlT4DPSu7gtkvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUENF6mlS3YxfQ9vfjkhLK6S2+IecwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbAXaNXxhuz729vYtxFH qP498qHsXBpldcg3PoaGDJfaoAeTkoEnFtY4T8cYV0FNKe5ZDN8Iq7ooEUQ0OrGW FgMt9JidMtGbbzySN+GFWWVhisTfaJENdaFnXwOrGhot/Xi1JWrhKs9R0T9sOayP 1oxVxiyWgHTLu8FTugNK1JPeU9l+d+nfnKcJU8BtJOuZrKtL+rCN0piz8RIWW5Mr /UcEjTfyc8jMzKbOylhewLVIYIif6SQmNgGDsGbyyymnrRh+HJhPamJnOkf3cjfe xPm2BY24Y2qbAOgTWsakgHgtGxFhxaePH0JcYpZnT5CZWs0bMQAE7PJTF+BWN154 pA== -----END CERTIFICATE-----Generated at Sat Apr 25 13:59:44 2026 by rpki-client