$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft File: CECA73092344CA9B6F74C1A83D6C747962186C47.mft (raw, json) Hash identifier: xxJJVxMmohSQ/8vq/S+Pd22yRFGxB6acayi9L2yJP7g= Subject key identifier: B9:DD:E5:F9:74:15:83:05:D0:20:00:6D:A9:C9:A4:52:E7:0A:B6:76 Authority key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 Certificate issuer: /CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Certificate serial: 1D006213A9ABEC3A37B87B374B0494F2EFF81CAA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft Manifest number: 7F Signing time: Thu 16 Apr 2026 19:18:52 +0000 Manifest this update: Thu 16 Apr 2026 19:13:52 +0000 Manifest next update: Fri 17 Apr 2026 22:17:52 +0000 Files and hashes: 1: CECA73092344CA9B6F74C1A83D6C747962186C47.crl (hash: Z+V+XzQqMkepIaNz8hGXZM4JmH6WXn7kqPUb2bKaUMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:00:62:13:a9:ab:ec:3a:37:b8:7b:37:4b:04:94:f2:ef:f8:1c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CECA73092344CA9B6F74C1A83D6C747962186C47 Validity Not Before: Apr 16 19:13:52 2026 GMT Not After : Apr 17 22:17:52 2026 GMT Subject: CN=B9DDE5F974158305D020006DA9C9A452E70AB676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:5c:0c:f9:3a:95:e0:5d:5b:1f:5a:7b:db: de:af:5d:7b:67:31:94:5a:bf:33:26:45:36:00:98: a8:a3:26:64:de:cd:82:62:2c:78:45:b3:1e:ff:44: b9:51:81:55:55:98:fa:63:41:d5:72:6f:2a:8b:77: 3f:4b:c5:5e:d9:c8:c9:6c:e3:d1:83:8c:ae:b0:f1: 53:bf:c4:aa:e3:95:75:24:ac:83:2f:54:86:d0:cf: 8a:0f:95:c6:74:05:79:62:86:b0:98:a7:fa:39:46: 78:35:f0:09:51:34:cc:aa:03:60:1a:53:c8:08:41: 53:9b:79:aa:bb:88:58:ca:52:62:64:60:07:ab:35: 21:2f:4a:1e:3c:55:63:52:60:bf:ac:c9:06:09:56: 12:8c:82:84:81:34:5c:d2:04:af:51:df:88:e6:2d: 49:b8:03:fb:4b:69:8b:0e:66:c7:f3:e5:8d:52:1c: b9:c6:89:dc:fa:ce:a7:51:10:8c:7a:04:3b:8c:4b: d1:64:94:d2:90:c7:70:4e:7d:72:a1:f3:99:c8:15: a1:d5:d1:3d:00:21:77:be:ab:41:83:51:cc:5b:a3: 7f:0b:bf:22:f9:ef:93:e9:61:4a:cd:5f:ca:7d:a0: 93:98:92:65:77:85:cf:b5:0e:e6:de:7f:37:08:4b: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:E5:F9:74:15:83:05:D0:20:00:6D:A9:C9:A4:52:E7:0A:B6:76 X509v3 Authority Key Identifier: keyid:CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9a:6c:6e:aa:25:c8:5b:e9:2c:1d:81:7d:a9:ab:1d:e9:c3: 5f:09:e6:b7:d3:29:c9:ca:db:3d:b6:91:db:19:46:56:5d:0e: 01:02:ab:43:67:da:e7:74:28:b3:de:c9:45:72:e7:27:c0:ed: be:f7:36:62:f8:94:47:8e:33:53:60:94:d2:b5:ad:82:44:b8: 8f:15:13:b8:f7:37:be:79:5e:bd:bc:24:e1:80:6b:78:5a:0a: bf:6c:15:56:fe:79:e2:98:64:36:6e:54:26:b4:18:16:ec:48: 29:71:c7:fe:da:c8:e1:04:bf:e6:5d:6d:c6:bf:a1:44:4e:b2: 4f:34:c7:96:b1:66:30:c1:85:c0:fe:b6:44:d1:a1:9d:c6:5a: 2e:61:63:55:87:83:42:60:46:de:99:d5:b1:0d:8c:7c:d9:92: 93:70:bd:c6:f8:a9:14:d2:70:0a:97:38:44:df:e4:9e:ae:7a: 33:50:89:07:7b:95:c3:00:cc:5e:5a:34:8d:01:b2:76:3f:67: c2:07:e3:cb:ee:58:51:5b:e5:ca:ce:e1:49:c1:08:ff:ba:08: d2:fe:40:ca:a6:ca:61:9f:85:ba:f5:f6:9f:79:45:8d:9d:6e: 70:d1:40:fb:3b:c1:97:2a:4a:cc:b4:dd:dc:48:33:62:6c:eb: e4:f3:ec:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHQBiE6mr7Do3uHs3SwSU8u/4HKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2 MjE4NkM0NzAeFw0yNjA0MTYxOTEzNTJaFw0yNjA0MTcyMjE3NTJaMDMxMTAvBgNV BAMTKEI5RERFNUY5NzQxNTgzMDVEMDIwMDA2REE5QzlBNDUyRTcwQUI2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWVwM+TqV4F1bH1p7296vXXtn MZRavzMmRTYAmKijJmTezYJiLHhFsx7/RLlRgVVVmPpjQdVybyqLdz9LxV7ZyMls 49GDjK6w8VO/xKrjlXUkrIMvVIbQz4oPlcZ0BXlihrCYp/o5Rng18AlRNMyqA2Aa U8gIQVObeaq7iFjKUmJkYAerNSEvSh48VWNSYL+syQYJVhKMgoSBNFzSBK9R34jm LUm4A/tLaYsOZsfz5Y1SHLnGidz6zqdREIx6BDuMS9FklNKQx3BOfXKh85nIFaHV 0T0AIXe+q0GDUcxbo38LvyL575PpYUrNX8p9oJOYkmV3hc+1DubefzcIS0/vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUud3l+XQVgwXQIABtqcmkUucKtnYwHwYDVR0j BBgwFoAUzspzCSNEyptvdMGoPWx0eWIYbEcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEw Mjg0LzIvQ0VDQTczMDkyMzQ0Q0E5QjZGNzRDMUE4M0Q2Qzc0Nzk2MjE4NkM0Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgz RDZDNzQ3OTYyMTg2QzQ3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyODViZTZmLTUxMTEtNGMzYy04MjU0LWQyZTQxNTUxMDI4NC8yL0NFQ0E3MzA5 MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZmmxu qiXIW+ksHYF9qasd6cNfCea30ynJyts9tpHbGUZWXQ4BAqtDZ9rndCiz3slFcucn wO2+9zZi+JRHjjNTYJTSta2CRLiPFRO49ze+eV69vCThgGt4Wgq/bBVW/nnimGQ2 blQmtBgW7Egpccf+2sjhBL/mXW3Gv6FETrJPNMeWsWYwwYXA/rZE0aGdxlouYWNV h4NCYEbemdWxDYx82ZKTcL3G+KkU0nAKlzhE3+SernozUIkHe5XDAMxeWjSNAbJ2 P2fCB+PL7lhRW+XKzuFJwQj/ugjS/kDKpsphn4W69fafeUWNnW5w0UD7O8GXKkrM tN3cSDNibOvk8+zB -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:25 2026 by rpki-client