$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: kq3fT/8WJbDGe7qqWvaa4imeCtstdi/oPipVYrUkJzE= Subject key identifier: 05:E4:8A:5C:EC:29:56:7E:A6:07:59:3C:DF:03:DB:0B:5E:A6:CD:BF Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 1F9849AFAFFBCDC9A1EFB8B897CE3F550DD4414D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 70 Signing time: Sat 18 Apr 2026 12:29:06 +0000 Manifest this update: Sat 18 Apr 2026 12:24:06 +0000 Manifest next update: Sun 19 Apr 2026 13:18:06 +0000 Files and hashes: 1: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: EkiENZYpqXlehqGhP48Yj2PlnyRyxbhpt04YO+HAvcs=) 2: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (hash: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc=) 3: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 13:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:98:49:af:af:fb:cd:c9:a1:ef:b8:b8:97:ce:3f:55:0d:d4:41:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Apr 18 12:24:06 2026 GMT Not After : Apr 19 13:18:06 2026 GMT Subject: CN=05E48A5CEC29567EA607593CDF03DB0B5EA6CDBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:31:78:09:0a:8f:9b:61:3f:4d:aa:f0:66: 98:f5:b8:e0:65:c1:bf:eb:c2:f1:8d:58:30:05:81: 0c:ae:bd:0e:f1:a2:15:32:f7:1f:dc:35:84:37:3d: 09:5e:e3:cb:8d:a7:60:19:c5:21:a2:fa:6f:7b:0a: 6e:48:a8:60:61:b1:35:fe:3f:33:17:6a:9f:9d:13: ae:82:3d:99:f7:64:36:41:5a:1c:b5:6b:92:23:1d: b0:c1:c3:52:44:d2:ce:9a:64:4c:8e:66:66:c4:2f: d2:49:6c:25:a9:0e:04:da:f9:d0:04:da:49:16:e0: ce:a9:a9:26:8b:73:36:b4:15:22:1b:7b:5a:53:e8: 0b:2d:d2:2e:00:52:e6:46:94:ef:b1:af:4d:59:b7: b2:28:5c:cf:c0:ef:e6:54:49:0d:c5:f0:1a:19:b1: ac:77:73:56:2f:b6:12:73:d5:8a:22:43:ff:50:2a: dd:bf:b3:a6:57:14:31:9a:5c:e9:44:30:7b:ff:07: fa:5c:c0:6b:f6:86:63:79:ac:ca:3b:25:51:d4:82: 2d:f9:79:2e:8a:a9:2f:bb:bb:16:93:17:68:80:88: d4:de:91:b2:4c:fc:ad:3a:1c:ad:6a:89:46:78:e1: 37:9e:aa:05:c9:74:e0:a2:43:e9:ee:c9:71:96:dc: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:8A:5C:EC:29:56:7E:A6:07:59:3C:DF:03:DB:0B:5E:A6:CD:BF X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a7:d6:76:6c:8b:b2:23:b9:92:7d:0e:93:50:13:ae:91:82: 8e:a2:bd:52:19:af:fa:04:6f:ef:0a:a6:5e:2b:0e:b3:06:77: 4a:18:ff:3c:98:f2:35:a3:04:95:af:7b:ec:11:3e:40:f9:65: 89:e8:d2:76:69:99:49:19:e4:6c:ee:46:42:06:f1:cb:d9:c6: e1:79:67:ac:9f:4f:e6:0b:7a:25:8e:cf:cd:1c:79:35:1b:5b: d7:21:e0:03:cc:aa:88:75:bb:c6:ca:d1:8e:4a:ec:ef:a1:12: 0f:a1:ff:c9:71:b3:d2:fc:0d:42:4e:d7:d2:25:87:6b:b9:fd: 05:76:54:0c:e7:66:41:a7:0f:17:da:76:cd:05:61:29:78:53: 2b:d1:43:07:4b:10:0c:74:6d:45:70:2a:dd:bd:06:6b:ca:db: 21:b7:df:ed:8f:58:a2:d7:64:a6:3d:51:41:02:08:dd:56:00: da:33:48:da:3d:d4:71:a3:b9:54:45:ee:ef:e9:08:58:a2:0a: a8:b1:eb:af:d3:c4:94:5b:34:24:62:05:66:83:ba:d1:6a:3c: 4a:77:7c:82:4f:75:f0:ed:3c:b5:e6:8d:3a:7a:be:f9:5e:8c: 5f:7d:2c:97:30:ae:33:d0:f6:22:cd:47:86:71:8d:51:51:af: a2:be:47:8d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH5hJr6/7zcmh77i4l84/VQ3UQU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA0MTgxMjI0MDZaFw0yNjA0MTkxMzE4MDZaMDMxMTAvBgNV BAMTKDA1RTQ4QTVDRUMyOTU2N0VBNjA3NTkzQ0RGMDNEQjBCNUVBNkNEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTTF4CQqPm2E/TarwZpj1uOBl wb/rwvGNWDAFgQyuvQ7xohUy9x/cNYQ3PQle48uNp2AZxSGi+m97Cm5IqGBhsTX+ PzMXap+dE66CPZn3ZDZBWhy1a5IjHbDBw1JE0s6aZEyOZmbEL9JJbCWpDgTa+dAE 2kkW4M6pqSaLcza0FSIbe1pT6Ast0i4AUuZGlO+xr01Zt7IoXM/A7+ZUSQ3F8BoZ sax3c1YvthJz1YoiQ/9QKt2/s6ZXFDGaXOlEMHv/B/pcwGv2hmN5rMo7JVHUgi35 eS6KqS+7uxaTF2iAiNTekbJM/K06HK1qiUZ44TeeqgXJdOCiQ+nuyXGW3GmlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBeSKXOwpVn6mB1k83wPbC16mzb8wHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDAp9Z2 bIuyI7mSfQ6TUBOukYKOor1SGa/6BG/vCqZeKw6zBndKGP88mPI1owSVr3vsET5A +WWJ6NJ2aZlJGeRs7kZCBvHL2cbheWesn0/mC3oljs/NHHk1G1vXIeADzKqIdbvG ytGOSuzvoRIPof/JcbPS/A1CTtfSJYdruf0FdlQM52ZBpw8X2nbNBWEpeFMr0UMH SxAMdG1FcCrdvQZrytsht9/tj1ii12SmPVFBAgjdVgDaM0jaPdRxo7lURe7v6QhY ogqoseuv08SUWzQkYgVmg7rRajxKd3yCT3Xw7Ty15o06er75XoxffSyXMK4z0PYi zUeGcY1RUa+ivkeN -----END CERTIFICATE-----Generated at Sun Apr 19 05:42:51 2026 by rpki-client