$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: lHoqkR10wSiSOTrQDS2P4qmAwnbzCpjoFK4X5TDH20E= Subject key identifier: D6:29:18:60:C8:66:E2:A7:3B:7D:C1:F3:92:8C:8D:D0:E2:50:4C:2C Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 635F444D7CE60F1330497396DBC4444E562DB836 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 0179 Signing time: Tue 21 Jul 2026 13:00:59 +0000 Manifest this update: Tue 21 Jul 2026 12:55:59 +0000 Manifest next update: Wed 22 Jul 2026 13:04:59 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: UBcUdyjck/3QAfaGUWUA88sm1lT6DDf17JsfSgL5e4s=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 13:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5f:44:4d:7c:e6:0f:13:30:49:73:96:db:c4:44:4e:56:2d:b8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Jul 21 12:55:59 2026 GMT Not After : Jul 22 13:04:59 2026 GMT Subject: CN=D6291860C866E2A73B7DC1F3928C8DD0E2504C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:cf:2c:68:3e:78:6f:49:9a:f5:62:1c:d7: 39:6a:ee:32:75:7c:39:9a:be:91:bd:4c:2b:5a:0e: 12:09:78:6d:e4:8b:1c:9a:5c:76:ae:8c:94:0e:70: d3:67:dc:89:90:d0:6a:cc:6b:82:87:ef:be:70:1d: 6e:a1:80:8f:14:c3:43:a1:74:e5:c9:47:55:12:4e: fb:32:b0:02:63:b5:28:0e:f0:08:be:fa:e8:96:ff: c5:68:df:f9:37:64:9e:27:fa:40:4f:32:67:43:01: 6f:4c:1e:37:c2:77:87:8d:c2:10:9a:dd:d8:05:2d: 02:1d:c8:f7:c4:67:44:fc:d2:bc:aa:8a:13:c4:3e: 02:93:8c:de:6c:d6:bd:0c:84:79:02:69:60:83:ae: c1:95:96:99:3f:68:99:22:fb:cc:b7:2d:c5:9b:63: 17:3a:b7:48:7d:62:e4:49:3b:8b:04:aa:3a:0e:dd: 01:1f:92:10:4d:ff:29:b1:9a:63:e1:a0:fa:d1:b1: e2:19:ba:d3:06:d0:87:09:21:9d:f1:5d:e1:c7:e3: 2b:88:46:11:2e:4e:76:c1:70:bc:ab:2c:22:e7:9b: a4:e7:9d:61:74:d5:0d:4d:dd:10:64:5c:c4:be:96: 9c:f3:0d:5a:ad:51:5a:27:e6:7c:af:d3:f0:25:96: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:18:60:C8:66:E2:A7:3B:7D:C1:F3:92:8C:8D:D0:E2:50:4C:2C X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:14:b8:b7:07:8f:b3:ce:77:3f:bd:c5:b2:2a:0a:37:61:31: ed:d5:46:4b:26:70:32:13:bf:d5:0d:30:c9:ac:f1:6f:18:3b: a1:e6:8f:6d:cd:a4:16:65:6d:53:e7:ab:5b:03:be:12:56:7f: 5d:aa:7e:25:a3:4a:b8:76:7b:fc:1c:df:ab:cd:1f:44:ee:7c: f3:b9:56:6a:dd:67:d5:ea:04:f0:fc:7a:18:a7:76:ca:65:51: d9:49:b2:38:79:07:e3:83:ca:d2:5b:80:15:5d:59:c2:d8:79: 64:28:d0:fa:33:ba:7d:79:67:0a:0c:75:e1:1c:11:80:f8:9c: d2:c3:43:c7:97:6c:42:20:a6:e2:bd:bf:5e:b7:bd:1b:4e:48: cf:2c:51:13:fc:08:67:fa:3c:e7:e1:74:35:fb:d9:1a:e1:3a: fe:5d:b6:06:e1:65:a5:ac:c8:30:a1:f9:b7:b5:20:ae:a1:b5: 5d:64:52:6b:96:fc:52:be:4b:f7:0b:fd:34:bf:05:9b:2f:23: 3b:63:58:38:f9:5e:39:f0:2b:c5:fb:1a:cb:6c:37:a9:f9:08: cd:99:5b:ce:f5:7b:cb:51:aa:8b:0f:19:5f:3b:8b:aa:79:4a: 8d:7d:ac:81:0f:76:7c:a0:e7:41:3c:6c:46:a6:2f:05:e7:e7: f6:d0:14:f0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY19ETXzmDxMwSXOW28RETlYtuDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA3MjExMjU1NTlaFw0yNjA3MjIxMzA0NTlaMDMxMTAvBgNV BAMTKEQ2MjkxODYwQzg2NkUyQTczQjdEQzFGMzkyOEM4REQwRTI1MDRDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3M8saD54b0ma9WIc1zlq7jJ1 fDmavpG9TCtaDhIJeG3kixyaXHaujJQOcNNn3ImQ0GrMa4KH775wHW6hgI8Uw0Oh dOXJR1USTvsysAJjtSgO8Ai++uiW/8Vo3/k3ZJ4n+kBPMmdDAW9MHjfCd4eNwhCa 3dgFLQIdyPfEZ0T80ryqihPEPgKTjN5s1r0MhHkCaWCDrsGVlpk/aJki+8y3LcWb Yxc6t0h9YuRJO4sEqjoO3QEfkhBN/ymxmmPhoPrRseIZutMG0IcJIZ3xXeHH4yuI RhEuTnbBcLyrLCLnm6TnnWF01Q1N3RBkXMS+lpzzDVqtUVon5nyv0/AllhC5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1ikYYMhm4qc7fcHzkoyN0OJQTCwwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYFLi3 B4+zznc/vcWyKgo3YTHt1UZLJnAyE7/VDTDJrPFvGDuh5o9tzaQWZW1T56tbA74S Vn9dqn4lo0q4dnv8HN+rzR9E7nzzuVZq3WfV6gTw/HoYp3bKZVHZSbI4eQfjg8rS W4AVXVnC2HlkKND6M7p9eWcKDHXhHBGA+JzSw0PHl2xCIKbivb9et70bTkjPLFET /Ahn+jzn4XQ1+9ka4Tr+XbYG4WWlrMgwofm3tSCuobVdZFJrlvxSvkv3C/00vwWb LyM7Y1g4+V458CvF+xrLbDep+QjNmVvO9XvLUaqLDxlfO4uqeUqNfayBD3Z8oOdB PGxGpi8F5+f20BTw -----END CERTIFICATE-----Generated at Tue Jul 21 17:49:38 2026 by rpki-client