$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: ct2Jefj/FnjnX4M83KBtGb4xcu1scPnRO/LxzjSOuqQ= Subject key identifier: EA:48:81:9F:C1:61:82:FE:57:C1:B5:94:10:24:66:1C:C8:8A:3E:67 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 2E3B523D38CC798A005F55D50FEE73C588B4D3E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 36 Signing time: Tue 03 Mar 2026 23:08:20 +0000 Manifest this update: Tue 03 Mar 2026 23:03:20 +0000 Manifest next update: Thu 05 Mar 2026 02:08:20 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 6rd4fSA9Gtu/F3dBByQK+9G5Q7OJFiKLiyBvpScN84A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Mar 2026 17:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3b:52:3d:38:cc:79:8a:00:5f:55:d5:0f:ee:73:c5:88:b4:d3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Mar 3 23:03:20 2026 GMT Not After : Mar 5 02:08:20 2026 GMT Subject: CN=EA48819FC16182FE57C1B5941024661CC88A3E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:50:cb:c2:61:9c:f6:20:f1:2d:84:b2:6a: 8c:9a:49:66:b0:e3:0a:13:66:2f:1c:85:a9:69:0c: 8a:0e:69:6e:d1:09:5b:cc:a3:9b:1a:c9:71:a6:75: 48:76:cf:30:51:47:2c:c3:5f:1a:a1:be:b4:76:a9: 1e:e4:2e:85:62:bf:10:a2:3b:9d:88:7e:5c:f0:22: 23:6a:b6:30:e1:2b:de:a4:2f:e2:c2:99:5e:42:eb: 8d:18:bc:da:67:a2:f2:d4:ad:a1:3c:2d:d2:dd:58: e2:bf:92:ea:9b:f8:a2:82:59:4e:86:1b:e3:59:9a: 6c:79:03:d0:b0:5a:06:30:29:b6:68:55:63:38:4f: 45:fd:96:47:56:d5:7f:e9:10:00:b4:f9:89:75:92: e5:19:0a:f3:ac:98:e7:6f:24:0a:00:48:05:2a:99: 21:a2:7d:72:c2:07:29:36:94:7c:6d:8f:aa:ee:c5: 81:3d:60:a2:e3:e8:be:26:80:bb:58:2b:16:43:d6: 38:38:7a:64:e5:ea:b2:d3:4a:44:fe:61:84:6d:df: 87:0e:88:9c:ba:68:0b:69:18:b3:8d:87:43:06:da: 08:8b:11:8f:10:d3:d4:4c:fd:c3:e1:8f:ae:00:31: 03:81:92:70:09:6e:dd:9f:1b:e8:55:fd:27:a2:28: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:48:81:9F:C1:61:82:FE:57:C1:B5:94:10:24:66:1C:C8:8A:3E:67 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8f:3d:1b:c1:ae:ec:1e:b3:08:c2:0a:d9:8b:67:c0:38:9e: 94:16:61:62:73:99:8e:91:54:a1:d6:6e:ed:c1:b2:5d:1e:78: 6a:8f:bc:74:9a:92:d5:79:92:aa:ce:fe:4a:6f:15:71:01:59: 87:fd:20:ae:ba:a0:55:5f:56:f8:44:14:74:98:e6:fc:5d:68: 61:77:7a:e2:8b:6b:34:ec:59:d3:e5:56:f1:00:3a:53:89:48: 7e:84:61:ed:98:67:08:b4:11:75:2d:1d:d2:d6:0e:57:f9:b2: f3:2f:83:e7:f4:93:9d:ea:6e:6e:fe:76:32:9b:e6:db:cd:d9: 01:7e:87:7b:e9:07:68:1d:08:8a:95:16:58:ad:79:7d:e0:b8: df:18:9e:7a:a9:68:b6:1b:68:3e:00:86:5e:d7:b3:01:91:2f: 46:df:24:20:83:8a:0f:2e:80:60:e7:82:19:4a:b0:19:6c:58: a8:13:79:22:d6:e6:01:64:5a:85:4e:fa:0a:a8:1e:b7:09:5e: 13:da:13:dd:93:64:fa:e0:3a:d5:84:80:08:1b:14:2f:91:cb: 8f:9c:06:00:59:94:02:7a:68:51:b6:80:1d:e1:55:96:f2:6b: 24:55:6e:5e:fe:e1:af:96:c1:8c:df:21:66:98:39:2a:71:39: 5f:ef:1b:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULjtSPTjMeYoAX1XVD+5zxYi00+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjAzMDMyMzAzMjBaFw0yNjAzMDUwMjA4MjBaMDMxMTAvBgNV BAMTKEVBNDg4MTlGQzE2MTgyRkU1N0MxQjU5NDEwMjQ2NjFDQzg4QTNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGFDLwmGc9iDxLYSyaoyaSWaw 4woTZi8chalpDIoOaW7RCVvMo5sayXGmdUh2zzBRRyzDXxqhvrR2qR7kLoVivxCi O52IflzwIiNqtjDhK96kL+LCmV5C640YvNpnovLUraE8LdLdWOK/kuqb+KKCWU6G G+NZmmx5A9CwWgYwKbZoVWM4T0X9lkdW1X/pEAC0+Yl1kuUZCvOsmOdvJAoASAUq mSGifXLCByk2lHxtj6ruxYE9YKLj6L4mgLtYKxZD1jg4emTl6rLTSkT+YYRt34cO iJy6aAtpGLONh0MG2giLEY8Q09RM/cPhj64AMQOBknAJbt2fG+hV/SeiKP6NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6kiBn8Fhgv5XwbWUECRmHMiKPmcwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPjz0b wa7sHrMIwgrZi2fAOJ6UFmFic5mOkVSh1m7twbJdHnhqj7x0mpLVeZKqzv5KbxVx AVmH/SCuuqBVX1b4RBR0mOb8XWhhd3rii2s07FnT5VbxADpTiUh+hGHtmGcItBF1 LR3S1g5X+bLzL4Pn9JOd6m5u/nYym+bbzdkBfod76QdoHQiKlRZYrXl94LjfGJ56 qWi2G2g+AIZe17MBkS9G3yQgg4oPLoBg54IZSrAZbFioE3ki1uYBZFqFTvoKqB63 CV4T2hPdk2T64DrVhIAIGxQvkcuPnAYAWZQCemhRtoAd4VWW8mskVW5e/uGvlsGM 3yFmmDkqcTlf7xtZ -----END CERTIFICATE-----Generated at Wed Mar 4 06:41:30 2026 by rpki-client