$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: TEoas47YIu+iiavfUqjrimT37wby1KiskPKyA0r2PZk= Subject key identifier: 0B:F5:59:0E:9B:A7:83:E8:BB:9F:A1:03:98:99:A0:D0:8A:D7:F7:DB Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 0E32EDD93E91950739289F46BA25A86E037F6F51 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 7A Signing time: Thu 09 Apr 2026 15:26:32 +0000 Manifest this update: Thu 09 Apr 2026 15:21:32 +0000 Manifest next update: Fri 10 Apr 2026 17:33:32 +0000 Files and hashes: 1: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: q0o/Hct1n3tziNX4a3tkHBnCmZEw/dEBj3dALehxJf8=) 2: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 3: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 4: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 17:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:ed:d9:3e:91:95:07:39:28:9f:46:ba:25:a8:6e:03:7f:6f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Apr 9 15:21:32 2026 GMT Not After : Apr 10 17:33:32 2026 GMT Subject: CN=0BF5590E9BA783E8BB9FA1039899A0D08AD7F7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:20:16:cb:1a:90:f5:62:5f:49:fc:68:3f: 93:fa:4b:01:f1:ac:28:ff:bd:4b:54:45:17:9f:dc: 5c:da:fa:d9:21:57:46:bc:63:1d:0c:25:16:ed:78: 8b:3d:d9:7a:2f:48:4b:95:7c:cc:de:b3:48:7b:1f: e3:29:62:8c:e7:55:de:9a:10:7c:06:20:d5:6d:8b: 94:9a:fb:86:d8:f2:49:c3:39:8f:b4:ef:7e:5f:7c: a9:eb:f0:5e:64:18:87:bd:fb:5f:20:1d:ec:81:04: 1f:6f:c3:34:30:26:c3:fe:17:62:ac:08:df:d9:d4: d2:b9:ba:74:9f:6a:75:f1:c6:5a:72:ab:06:d9:8b: 17:b8:c3:59:62:fd:f5:90:c3:7d:33:a2:94:eb:7f: 49:b7:d5:09:7a:75:c1:b0:fe:5a:db:5c:c7:6c:47: 50:e3:00:07:82:ab:fa:71:0f:10:78:dc:81:36:b4: 6a:cb:fe:0f:f8:47:40:31:05:e2:af:41:4e:32:78: f5:aa:20:81:57:54:ea:9f:74:c2:1a:5a:51:97:37: f2:04:9d:55:3a:5d:8a:01:33:1e:35:fb:1b:2f:dd: a0:e5:1a:04:86:8d:19:d8:00:8c:19:6f:f2:b0:5e: ec:d1:60:a7:a1:76:e5:85:c4:15:fb:a0:32:5b:09: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F5:59:0E:9B:A7:83:E8:BB:9F:A1:03:98:99:A0:D0:8A:D7:F7:DB X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fe:28:c5:9d:c9:c4:ea:f9:25:0f:89:b7:a0:51:3d:71:84: 4d:09:00:e8:1d:67:c1:47:ed:d2:f2:0c:ba:a0:1d:80:71:e7: cb:f7:61:6d:01:b1:5e:22:af:5e:74:1a:90:fe:14:9d:ff:86: c8:40:c8:2d:c9:9f:b2:29:0a:17:80:3a:d5:1c:ed:35:97:c2: 89:27:ae:ea:3c:6e:65:04:53:27:e1:26:9b:06:38:86:40:1a: ac:74:02:ae:cf:0d:90:14:f6:df:d7:98:71:de:87:93:b5:9e: e0:b1:a9:c9:78:f7:78:0b:83:87:70:cf:3e:16:30:9d:08:4e: 08:5d:fc:fd:60:1f:7c:95:12:20:a7:38:bf:16:f4:01:10:d1: 43:c4:b1:78:cc:57:bb:32:31:d0:2e:50:91:75:49:6d:43:1c: d4:a1:7c:89:94:82:52:d1:30:27:08:ed:f4:5d:d1:7e:d6:9d: 05:be:0e:f3:a9:88:8c:1f:2e:cd:c6:b7:26:a8:e8:99:37:1f: 74:ef:9b:2c:e4:32:cd:9a:96:b7:d7:1a:82:89:7f:16:19:ca: 06:fb:f3:d7:cd:f3:e9:f1:94:a4:b8:5e:de:05:7c:c4:f6:b9: 18:1d:19:ef:d7:cc:2b:28:38:50:66:76:19:67:03:4a:a6:99: 86:d5:5f:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDjLt2T6RlQc5KJ9GuiWobgN/b1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA0MDkxNTIxMzJaFw0yNjA0MTAxNzMzMzJaMDMxMTAvBgNV BAMTKDBCRjU1OTBFOUJBNzgzRThCQjlGQTEwMzk4OTlBMEQwOEFEN0Y3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLCAWyxqQ9WJfSfxoP5P6SwHx rCj/vUtURRef3Fza+tkhV0a8Yx0MJRbteIs92XovSEuVfMzes0h7H+MpYoznVd6a EHwGINVti5Sa+4bY8knDOY+0735ffKnr8F5kGIe9+18gHeyBBB9vwzQwJsP+F2Ks CN/Z1NK5unSfanXxxlpyqwbZixe4w1li/fWQw30zopTrf0m31Ql6dcGw/lrbXMds R1DjAAeCq/pxDxB43IE2tGrL/g/4R0AxBeKvQU4yePWqIIFXVOqfdMIaWlGXN/IE nVU6XYoBMx41+xsv3aDlGgSGjRnYAIwZb/KwXuzRYKehduWFxBX7oDJbCeqxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUC/VZDpung+i7n6EDmJmg0IrX99swHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4/ijF ncnE6vklD4m3oFE9cYRNCQDoHWfBR+3S8gy6oB2AcefL92FtAbFeIq9edBqQ/hSd /4bIQMgtyZ+yKQoXgDrVHO01l8KJJ67qPG5lBFMn4SabBjiGQBqsdAKuzw2QFPbf 15hx3oeTtZ7gsanJePd4C4OHcM8+FjCdCE4IXfz9YB98lRIgpzi/FvQBENFDxLF4 zFe7MjHQLlCRdUltQxzUoXyJlIJS0TAnCO30XdF+1p0Fvg7zqYiMHy7NxrcmqOiZ Nx9075ss5DLNmpa31xqCiX8WGcoG+/PXzfPp8ZSkuF7eBXzE9rkYHRnv18wrKDhQ ZnYZZwNKppmG1V9b -----END CERTIFICATE-----Generated at Fri Apr 10 02:58:34 2026 by rpki-client