$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft File: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft (raw, json) Hash identifier: Ou/RBO+D0YQIFhHb5I8Rc4lW9C29B2XdV/nNCIb674Y= Subject key identifier: 8E:FB:FB:2B:5C:42:A1:2A:FF:75:45:A0:E7:14:45:EA:0B:9D:03:C0 Authority key identifier: F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 Certificate issuer: /CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Certificate serial: 4BAA3986BA969B4A3F438E7E8344A94128A4AF04 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft Manifest number: BE Signing time: Fri 17 Apr 2026 10:00:57 +0000 Manifest this update: Fri 17 Apr 2026 09:55:57 +0000 Manifest next update: Sat 18 Apr 2026 13:28:57 +0000 Files and hashes: 1: F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl (hash: 7/EhMJGpcxVrT/XX3V9ceXbeNQYyJwc/K2Gr8g2Vl5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 13:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:aa:39:86:ba:96:9b:4a:3f:43:8e:7e:83:44:a9:41:28:a4:af:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D1A7E9DFF0D90E760FB87D5605458BA870BF32 Validity Not Before: Apr 17 09:55:57 2026 GMT Not After : Apr 18 13:28:57 2026 GMT Subject: CN=8EFBFB2B5C42A12AFF7545A0E71445EA0B9D03C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:62:73:02:4e:ab:d5:04:72:b3:49:34:74: 46:c7:42:32:9c:c0:6a:60:52:ae:24:79:ba:c8:43: d5:d5:43:8c:0d:15:00:91:69:00:41:25:0a:30:c6: 46:ec:fc:90:b1:f5:ec:18:e1:30:c0:8b:38:60:3c: 1a:1b:02:d4:8d:26:57:c0:3d:36:26:fa:24:b3:f0: f0:94:8f:09:6f:ce:c6:4a:5a:77:27:f0:ae:7d:4e: 93:fa:48:a9:71:c7:c3:9d:45:f9:82:7f:fe:42:a1: c9:f6:38:15:85:11:b7:28:62:e5:48:1f:73:93:77: 4b:57:dd:0f:ad:4c:a5:f5:60:f3:0a:f9:99:1f:09: a9:9d:c8:e3:cb:71:5a:2e:6e:8e:c0:0a:d1:22:d6: e2:21:f4:74:2a:44:be:0d:75:af:49:66:f1:fe:e8: 9a:7c:46:76:77:24:3e:be:6d:c8:cc:65:ef:c2:b7: 97:fa:f9:f2:df:64:80:4d:1b:98:78:5e:b0:8a:f2: 25:26:d5:5c:96:04:40:4c:88:e2:41:b9:10:22:94: 32:ea:c0:c9:11:11:ca:93:94:94:03:50:89:24:e2: 86:82:c2:32:08:75:56:c6:ae:52:d5:1c:bc:c2:93: b4:3f:e7:91:6c:a5:42:46:5a:45:61:73:6f:9d:d9: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FB:FB:2B:5C:42:A1:2A:FF:75:45:A0:E7:14:45:EA:0B:9D:03:C0 X509v3 Authority Key Identifier: keyid:F4:D1:A7:E9:DF:F0:D9:0E:76:0F:B8:7D:56:05:45:8B:A8:70:BF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/0/F4D1A7E9DFF0D90E760FB87D5605458BA870BF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:40:7f:55:8d:ea:3e:78:7c:01:b0:3d:90:04:0a:fb:b4:4b: 83:8a:8d:63:9f:f8:de:cf:c8:2e:86:a0:1a:54:49:4d:d7:0a: ce:a8:fd:35:7e:6a:1d:a0:83:f3:6c:17:a4:9d:e4:78:6d:06: 2c:73:41:2f:dd:c1:13:c8:4d:10:7b:a9:8e:cf:99:40:28:a6: 7e:b7:0b:65:f7:a3:53:22:4f:49:5a:8a:e2:26:ab:1b:df:4e: 66:a9:90:6e:ec:dc:87:40:b3:52:ea:9f:da:16:3e:13:f8:32: d7:46:04:e4:a7:12:dd:a1:2d:8b:7d:36:a9:b9:af:de:5e:a0: 62:a7:80:e4:da:11:6c:be:12:c5:81:06:cd:68:b1:8e:e6:d5: 3f:83:b6:d3:28:f4:17:37:5d:e4:cf:5b:85:6e:4b:18:03:7e: f4:09:e0:15:a2:05:f7:36:4d:1d:33:68:70:e0:5a:dd:04:90: 97:e0:f3:b8:a8:99:7e:8c:24:e4:0f:ca:46:d1:e4:f9:01:94: f6:8e:b1:9a:b0:dd:fa:61:52:26:a5:3e:fa:42:15:a4:db:9b: 8e:05:30:cd:fb:98:48:82:dd:59:ca:2b:93:ca:6b:78:8f:af: 1b:a6:22:b9:d0:8e:11:52:03:2a:d7:48:2e:34:c1:6b:af:73: 69:ac:bd:ec -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS6o5hrqWm0o/Q45+g0SpQSikrwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJB ODcwQkYzMjAeFw0yNjA0MTcwOTU1NTdaFw0yNjA0MTgxMzI4NTdaMDMxMTAvBgNV BAMTKDhFRkJGQjJCNUM0MkExMkFGRjc1NDVBMEU3MTQ0NUVBMEI5RDAzQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUmJzAk6r1QRys0k0dEbHQjKc wGpgUq4kebrIQ9XVQ4wNFQCRaQBBJQowxkbs/JCx9ewY4TDAizhgPBobAtSNJlfA PTYm+iSz8PCUjwlvzsZKWncn8K59TpP6SKlxx8OdRfmCf/5Cocn2OBWFEbcoYuVI H3OTd0tX3Q+tTKX1YPMK+ZkfCamdyOPLcVoubo7ACtEi1uIh9HQqRL4Nda9JZvH+ 6Jp8RnZ3JD6+bcjMZe/Ct5f6+fLfZIBNG5h4XrCK8iUm1VyWBEBMiOJBuRAilDLq wMkREcqTlJQDUIkk4oaCwjIIdVbGrlLVHLzCk7Q/55FspUJGWkVhc2+d2ZqzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjvv7K1xCoSr/dUWg5xRF6gudA8AwHwYDVR0j BBgwFoAU9NGn6d/w2Q52D7h9VgVFi6hwvzIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzAvRjREMUE3RTlERkYwRDkwRTc2MEZCODdENTYwNTQ1OEJBODcwQkYzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNEQxQTdFOURGRjBEOTBFNzYwRkI4N0Q1 NjA1NDU4QkE4NzBCRjMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8wL0Y0RDFBN0U5 REZGMEQ5MEU3NjBGQjg3RDU2MDU0NThCQTg3MEJGMzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIQH9V jeo+eHwBsD2QBAr7tEuDio1jn/jez8guhqAaVElN1wrOqP01fmodoIPzbBekneR4 bQYsc0Ev3cETyE0Qe6mOz5lAKKZ+twtl96NTIk9JWoriJqsb305mqZBu7NyHQLNS 6p/aFj4T+DLXRgTkpxLdoS2LfTapua/eXqBip4Dk2hFsvhLFgQbNaLGO5tU/g7bT KPQXN13kz1uFbksYA370CeAVogX3Nk0dM2hw4FrdBJCX4PO4qJl+jCTkD8pG0eT5 AZT2jrGasN36YVImpT76QhWk25uOBTDN+5hIgt1ZyiuTymt4j68bpiK50I4RUgMq 10guNMFrr3NprL3s -----END CERTIFICATE-----Generated at Sat Apr 18 06:12:26 2026 by rpki-client