$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: cVtfcb2rcAMGXYCzEklknbXrchwxoHUfXirKCxqivZs= Subject key identifier: 42:45:0D:5D:D9:31:23:F6:22:D1:4F:CF:D5:D8:2F:0F:5E:B4:E6:01 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 1A81E1AF1F51813CBAEFA931A30B2D1C34EFC324 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 30 Signing time: Sun 22 Feb 2026 19:15:30 +0000 Manifest this update: Sun 22 Feb 2026 19:10:30 +0000 Manifest next update: Mon 23 Feb 2026 20:57:30 +0000 Files and hashes: 1: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 2: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: MmtNU1tW5yzQRGixW8qjRuTzeS4crW4w1VEavIwSKM8=) 3: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 4: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 20:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:81:e1:af:1f:51:81:3c:ba:ef:a9:31:a3:0b:2d:1c:34:ef:c3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Feb 22 19:10:30 2026 GMT Not After : Feb 23 20:57:30 2026 GMT Subject: CN=42450D5DD93123F622D14FCFD5D82F0F5EB4E601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:4d:75:d2:66:86:e8:53:d9:5d:ef:1c:ce: 43:7a:71:d1:44:e2:90:83:bd:92:6a:33:72:eb:d4: ac:ef:de:2f:ed:f5:86:2f:30:13:a0:c5:2b:bb:27: d0:78:38:2e:3c:e9:e8:ec:e0:d4:14:94:e7:aa:41: 28:24:5d:fd:6e:d4:bf:3d:86:06:90:0f:82:1e:20: 2b:fc:28:3f:fa:d8:54:1d:56:36:1c:72:92:90:65: de:b5:08:ec:4f:f9:24:81:06:2d:dc:b0:d6:9a:4d: 9d:55:01:8a:ea:f0:4d:f7:fb:fb:29:8d:fb:6e:dc: 4d:ff:ed:ac:52:bc:ea:30:60:12:64:ca:0b:23:b8: 70:93:b7:1e:dc:af:fa:16:6e:da:d9:0b:c8:0b:1f: 8e:2c:6e:e4:85:84:d5:88:cf:4a:38:55:ff:0c:a9: 08:67:22:b1:63:bf:9b:7b:76:99:1c:a8:df:7f:75: 97:6f:e4:38:17:fc:1c:95:29:ac:fe:e6:b8:6c:62: af:6f:4a:e1:9d:3f:4e:27:d3:b0:68:45:de:99:48: f4:7a:c4:e5:f7:4b:80:b8:09:00:cd:29:1e:cf:6e: dc:4d:27:23:03:c3:08:2c:c2:17:de:e8:4d:a5:35: dd:f9:0c:d1:39:1a:bd:dc:6d:dc:62:a9:bc:3a:0b: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:45:0D:5D:D9:31:23:F6:22:D1:4F:CF:D5:D8:2F:0F:5E:B4:E6:01 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5a:6a:3e:27:0c:2b:47:09:f2:83:68:5d:ad:a0:94:c7:f8: 1b:cc:3d:d3:17:c2:e2:29:74:30:e9:06:8a:c6:f5:4f:28:eb: 26:6f:a2:4a:70:af:95:42:5f:94:99:11:8b:bf:ab:ba:9a:6a: fb:a5:d6:61:d0:68:44:37:f9:70:49:1f:d7:e5:8d:92:dc:14: 31:36:ec:e2:5e:17:ba:52:5d:79:03:9d:5a:5c:2b:ed:63:f9: c4:45:19:db:55:d1:00:8c:a7:a0:38:80:7c:d9:59:bc:19:18: ef:31:b4:6f:2c:d5:ae:97:39:b5:7d:71:9e:4b:15:c4:24:91: 30:13:f7:53:6e:af:24:3f:81:9a:a3:d3:f9:b8:3d:d3:db:52: b0:a9:8b:44:38:fa:31:65:31:81:39:9a:16:15:03:57:9f:6a: 3a:78:af:08:57:a2:37:88:1d:79:3e:e1:f9:1a:05:24:39:89: d3:c5:fc:dd:cb:fe:42:a0:96:18:e4:61:1e:be:4f:20:b9:91: 49:6d:49:f3:7d:9b:39:56:a6:4f:3b:f2:90:55:b2:b7:72:f4: 7f:a5:9d:aa:ec:67:67:ed:5a:35:13:01:68:28:4d:1b:ef:1e: ad:e8:d6:ac:df:d2:e5:7a:3f:a9:cb:04:81:0e:61:5c:85:9f: 6e:f5:86:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGoHhrx9RgTy676kxowstHDTvwyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjAyMjIxOTEwMzBaFw0yNjAyMjMyMDU3MzBaMDMxMTAvBgNV BAMTKDQyNDUwRDVERDkzMTIzRjYyMkQxNEZDRkQ1RDgyRjBGNUVCNEU2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxE110maG6FPZXe8czkN6cdFE 4pCDvZJqM3Lr1Kzv3i/t9YYvMBOgxSu7J9B4OC486ejs4NQUlOeqQSgkXf1u1L89 hgaQD4IeICv8KD/62FQdVjYccpKQZd61COxP+SSBBi3csNaaTZ1VAYrq8E33+/sp jftu3E3/7axSvOowYBJkygsjuHCTtx7cr/oWbtrZC8gLH44sbuSFhNWIz0o4Vf8M qQhnIrFjv5t7dpkcqN9/dZdv5DgX/ByVKaz+5rhsYq9vSuGdP04n07BoRd6ZSPR6 xOX3S4C4CQDNKR7PbtxNJyMDwwgswhfe6E2lNd35DNE5Gr3cbdxiqbw6C1mpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQkUNXdkxI/Yi0U/P1dgvD1605gEwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2Wmo+ JwwrRwnyg2hdraCUx/gbzD3TF8LiKXQw6QaKxvVPKOsmb6JKcK+VQl+UmRGLv6u6 mmr7pdZh0GhEN/lwSR/X5Y2S3BQxNuziXhe6Ul15A51aXCvtY/nERRnbVdEAjKeg OIB82Vm8GRjvMbRvLNWulzm1fXGeSxXEJJEwE/dTbq8kP4Gao9P5uD3T21KwqYtE OPoxZTGBOZoWFQNXn2o6eK8IV6I3iB15PuH5GgUkOYnTxfzdy/5CoJYY5GEevk8g uZFJbUnzfZs5VqZPO/KQVbK3cvR/pZ2q7Gdn7Vo1EwFoKE0b7x6t6Nas39Llej+p ywSBDmFchZ9u9YbI -----END CERTIFICATE-----Generated at Mon Feb 23 10:16:03 2026 by rpki-client