$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: hi3RrI1acE/sBDY34vzbHD6v/tn06I0MpR2NKcW4RCE= Subject key identifier: CD:36:7D:27:BA:8B:7D:A3:90:6C:79:37:E9:85:25:8D:29:65:70:EA Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 2C66E5E1B0A99532D7AFC031F9A17CC377B0851C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: B9 Signing time: Mon 25 May 2026 08:03:33 +0000 Manifest this update: Mon 25 May 2026 07:58:33 +0000 Manifest next update: Tue 26 May 2026 11:57:33 +0000 Files and hashes: 1: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: 7ZBgkTOfkn/g3l8LHy3a+nl6OSUpj7qbxcEUC6N/i4s=) 2: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM=) 3: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 4: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 5: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:66:e5:e1:b0:a9:95:32:d7:af:c0:31:f9:a1:7c:c3:77:b0:85:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: May 25 07:58:33 2026 GMT Not After : May 26 11:57:33 2026 GMT Subject: CN=CD367D27BA8B7DA3906C7937E985258D296570EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:25:ec:e3:61:2c:c1:ea:46:2e:cd:cb:e3: 62:f7:c0:d4:17:6e:c4:39:c0:bf:ba:ad:f2:8a:18: 87:77:9d:7f:e7:ac:30:7e:53:0e:22:df:24:aa:21: 33:9f:e3:c5:3e:16:7d:32:d6:bd:60:da:71:bc:2c: 70:b1:eb:73:c9:1a:0c:25:2e:07:0a:7b:8c:94:4e: e5:62:ee:c8:83:65:1e:30:68:29:cb:2b:c6:d9:ae: a3:4e:d9:0a:10:68:04:b7:e0:00:84:07:63:4f:5d: 5a:be:a5:ea:98:d2:8b:04:33:62:57:d7:34:6b:34: f9:7b:1a:00:e4:24:0b:9a:75:d3:d3:7b:07:5f:f2: 8f:d8:5d:93:6f:ba:41:e4:17:4b:ea:c3:f0:66:e9: a5:69:c5:a4:f3:cf:8b:c4:f5:c6:2b:d9:99:a7:31: 33:85:17:4f:06:24:95:25:ea:12:99:69:39:5a:78: ae:60:f5:81:8f:d4:02:aa:8b:4d:bb:c6:13:5f:91: 3b:7c:5b:15:b3:3b:22:7c:49:9a:9d:41:80:f3:2e: 92:e4:16:ef:3e:a0:bb:28:80:61:c1:2c:54:c1:88: bd:39:2d:ef:de:e2:78:09:a1:b5:98:32:56:b4:be: e8:73:13:f0:db:c4:bf:12:a9:75:4b:f8:b6:9a:75: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:36:7D:27:BA:8B:7D:A3:90:6C:79:37:E9:85:25:8D:29:65:70:EA X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:70:a1:dc:f8:d2:e3:5c:76:bb:e2:8b:23:db:1e:d9:da:e6: 27:ca:5a:95:06:91:53:32:e5:7f:d6:47:41:b4:ac:9b:10:8b: 35:29:02:38:09:c6:5b:6f:8f:6a:cc:3d:42:64:e9:20:07:77: 2a:02:fe:53:92:40:c4:96:49:be:f7:77:18:0f:41:ea:ad:36: bf:8f:f3:de:0f:c2:1e:10:80:f3:5e:0d:ad:90:52:b6:e3:26: 86:fc:a6:50:7b:8f:69:ea:ba:4e:a2:54:ba:c2:6f:20:b0:98: b0:27:52:d3:05:78:b7:6a:1e:38:88:d7:15:0b:c3:3b:0c:ac: b1:8b:22:2b:8b:04:04:8c:41:9b:a3:7d:be:83:86:ee:a3:26: a2:a2:93:29:4e:5c:2a:95:dd:5a:5b:5f:2d:8b:b4:5d:2a:e0: 85:6d:e9:4a:dc:3b:04:6b:f0:51:a9:5b:8d:6d:d4:bf:53:73: 10:48:1b:9d:7c:44:aa:74:62:d8:73:09:2f:e9:fa:f0:23:ef: 65:bd:ea:4c:00:27:53:78:32:ca:7e:6b:cf:78:65:27:1d:3f: 9b:aa:98:18:a9:0e:93:8e:ba:9d:69:58:1f:a9:9f:bd:6f:93: 00:7a:f0:1a:db:56:c9:92:9a:21:24:90:02:54:9d:89:94:f1: 15:c8:44:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULGbl4bCplTLXr8Ax+aF8w3ewhRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA1MjUwNzU4MzNaFw0yNjA1MjYxMTU3MzNaMDMxMTAvBgNV BAMTKENEMzY3RDI3QkE4QjdEQTM5MDZDNzkzN0U5ODUyNThEMjk2NTcwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRWCXs42EswepGLs3L42L3wNQX bsQ5wL+6rfKKGId3nX/nrDB+Uw4i3ySqITOf48U+Fn0y1r1g2nG8LHCx63PJGgwl LgcKe4yUTuVi7siDZR4waCnLK8bZrqNO2QoQaAS34ACEB2NPXVq+peqY0osEM2JX 1zRrNPl7GgDkJAuaddPTewdf8o/YXZNvukHkF0vqw/Bm6aVpxaTzz4vE9cYr2Zmn MTOFF08GJJUl6hKZaTlaeK5g9YGP1AKqi027xhNfkTt8WxWzOyJ8SZqdQYDzLpLk Fu8+oLsogGHBLFTBiL05Le/e4ngJobWYMla0vuhzE/DbxL8SqXVL+LaadUG5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzTZ9J7qLfaOQbHk36YUljSllcOowHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAycKHc +NLjXHa74osj2x7Z2uYnylqVBpFTMuV/1kdBtKybEIs1KQI4CcZbb49qzD1CZOkg B3cqAv5TkkDElkm+93cYD0HqrTa/j/PeD8IeEIDzXg2tkFK24yaG/KZQe49p6rpO olS6wm8gsJiwJ1LTBXi3ah44iNcVC8M7DKyxiyIriwQEjEGbo32+g4buoyaiopMp Tlwqld1aW18ti7RdKuCFbelK3DsEa/BRqVuNbdS/U3MQSBudfESqdGLYcwkv6frw I+9lvepMACdTeDLKfmvPeGUnHT+bqpgYqQ6TjrqdaVgfqZ+9b5MAevAa21bJkpoh JJACVJ2JlPEVyET0 -----END CERTIFICATE-----Generated at Mon May 25 17:20:10 2026 by rpki-client