$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: P2o/edyEYoZ9KZuoP8jf0IBnC4muqVfOB8WwzD/zwLw= Subject key identifier: 95:D1:46:0B:85:B2:AE:4F:A9:AC:F5:33:80:73:5C:A7:B4:0E:78:B4 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 5CE57CD47947D64E765202B0B4D14C44D1A999AA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 84 Signing time: Fri 17 Apr 2026 14:17:12 +0000 Manifest this update: Fri 17 Apr 2026 14:12:12 +0000 Manifest next update: Sat 18 Apr 2026 14:56:12 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: W7bBwzooRrO9p2A4FOMqNJRy6lmBEsaNdRabYcUF/ac=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 12:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:7c:d4:79:47:d6:4e:76:52:02:b0:b4:d1:4c:44:d1:a9:99:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Apr 17 14:12:12 2026 GMT Not After : Apr 18 14:56:12 2026 GMT Subject: CN=95D1460B85B2AE4FA9ACF53380735CA7B40E78B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:78:b3:8f:9b:a4:25:54:e2:a5:76:28:42: 58:39:07:80:4a:f1:53:da:c9:09:ad:23:b2:4b:c4: f2:3e:5e:9e:8b:98:72:d3:73:64:44:30:68:98:14: f7:f5:69:45:d6:ea:f2:be:16:80:23:e3:b0:37:80: da:db:d4:7f:24:00:dc:70:87:c0:ab:d6:28:da:89: 0f:a9:ba:5e:c6:91:d6:e7:8a:53:fc:29:0e:0a:f9: 4a:1b:1b:44:d6:bd:09:ff:cb:d2:df:49:67:e2:82: f5:84:b2:a1:29:f0:a6:ff:07:32:29:b9:1c:69:f5: 6b:1e:7d:ad:9e:a3:ef:26:1c:6c:59:42:15:7c:16: 24:69:70:1c:0c:86:44:94:4d:69:c4:e3:82:43:c2: 6b:ac:ea:63:47:8b:cf:c0:ca:fe:55:3a:6b:84:f9: 71:a4:a9:cf:4e:37:3e:da:f0:99:67:2a:ed:16:57: 72:72:ba:c3:ff:c5:d0:6b:5f:af:af:3b:d8:48:20: 93:a6:2b:06:d6:92:a7:f8:88:5f:9c:42:bb:82:4c: 0b:05:7a:84:28:55:ca:77:d2:0e:e3:0e:b0:9b:f1: b6:1d:ae:7e:f7:df:3b:da:6b:4d:71:99:a6:08:5d: c1:59:e5:f8:da:20:26:b6:bf:61:7d:ad:c1:80:7a: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D1:46:0B:85:B2:AE:4F:A9:AC:F5:33:80:73:5C:A7:B4:0E:78:B4 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:86:52:d3:11:04:1d:d9:77:5d:04:3c:d3:03:58:c0:89:de: 2d:31:05:5d:95:55:ab:cc:09:a5:2f:88:ad:6d:c5:d5:f2:6a: 19:e5:d3:43:d7:8c:20:21:be:cf:60:98:81:9f:8c:4c:06:93: e1:76:fe:ba:4f:2f:9f:ec:0e:55:f3:4e:2e:a4:f3:4d:fd:d4: 0b:72:1a:9b:e7:2c:85:9b:ff:9d:71:84:8f:9d:20:08:89:dc: 9a:b9:04:e7:99:bf:de:7d:7f:31:95:b2:32:67:48:ae:ea:5f: 80:69:0b:08:26:cc:f5:15:bf:49:f9:01:e4:4c:a9:2e:28:c6: c8:e4:85:fa:f1:2a:c2:e6:d2:c5:4e:54:b4:43:f0:70:ab:fb: 9f:3c:db:57:88:ec:e6:a4:87:0d:ce:98:40:92:e5:88:c6:92: 22:99:09:57:90:6d:de:10:7f:4b:b3:58:91:66:4f:ba:b2:3a: ed:84:9f:18:c3:8e:5f:76:d7:dd:06:11:b6:68:7e:fb:bd:22: e2:e9:d4:e1:59:67:e6:5d:83:a8:75:62:5a:a0:97:27:79:b6: a1:ac:4b:15:c4:3b:f5:c4:35:ee:1b:95:b4:35:c4:b2:1a:ec: fa:06:68:4b:a3:b0:f1:92:24:f2:24:9c:08:51:3d:b7:d0:5e: 17:82:ab:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXOV81HlH1k52UgKwtNFMRNGpmaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjA0MTcxNDEyMTJaFw0yNjA0MTgxNDU2MTJaMDMxMTAvBgNV BAMTKDk1RDE0NjBCODVCMkFFNEZBOUFDRjUzMzgwNzM1Q0E3QjQwRTc4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVnizj5ukJVTipXYoQlg5B4BK 8VPayQmtI7JLxPI+Xp6LmHLTc2REMGiYFPf1aUXW6vK+FoAj47A3gNrb1H8kANxw h8Cr1ijaiQ+pul7GkdbnilP8KQ4K+UobG0TWvQn/y9LfSWfigvWEsqEp8Kb/BzIp uRxp9Wsefa2eo+8mHGxZQhV8FiRpcBwMhkSUTWnE44JDwmus6mNHi8/Ayv5VOmuE +XGkqc9ONz7a8JlnKu0WV3JyusP/xdBrX6+vO9hIIJOmKwbWkqf4iF+cQruCTAsF eoQoVcp30g7jDrCb8bYdrn733zvaa01xmaYIXcFZ5fjaICa2v2F9rcGAehsRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUldFGC4Wyrk+prPUzgHNcp7QOeLQwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGhlLT EQQd2XddBDzTA1jAid4tMQVdlVWrzAmlL4itbcXV8moZ5dND14wgIb7PYJiBn4xM BpPhdv66Ty+f7A5V804upPNN/dQLchqb5yyFm/+dcYSPnSAIidyauQTnmb/efX8x lbIyZ0iu6l+AaQsIJsz1Fb9J+QHkTKkuKMbI5IX68SrC5tLFTlS0Q/Bwq/ufPNtX iOzmpIcNzphAkuWIxpIimQlXkG3eEH9Ls1iRZk+6sjrthJ8Yw45fdtfdBhG2aH77 vSLi6dThWWfmXYOodWJaoJcnebahrEsVxDv1xDXuG5W0NcSyGuz6BmhLo7DxkiTy JJwIUT230F4Xgqt5 -----END CERTIFICATE-----Generated at Sat Apr 18 05:48:36 2026 by rpki-client