$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: TN9/XJxxcPYDi4OKS42Ad3RAzlZ/a4TCYYqYyf24apw= Subject key identifier: AA:82:98:61:A8:BD:95:FB:F5:29:99:23:79:08:E3:DE:04:75:F2:4C Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 4B80B352140828941222F382FD2CEFFA073DF2CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 01C0 Signing time: Sun 19 Apr 2026 01:14:54 +0000 Manifest this update: Sun 19 Apr 2026 01:09:54 +0000 Manifest next update: Mon 20 Apr 2026 04:08:54 +0000 Files and hashes: 1: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: sR62WH97nYoLOUNF2KvRD4SdkLQcNvP4QUYn3/hjJS0=) 2: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 9uh0xuudpUcj/eGsdPKtqqEGgzTj/AFGys1pqvNQ+pE=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:80:b3:52:14:08:28:94:12:22:f3:82:fd:2c:ef:fa:07:3d:f2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Apr 19 01:09:54 2026 GMT Not After : Apr 20 04:08:54 2026 GMT Subject: CN=AA829861A8BD95FBF52999237908E3DE0475F24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:02:e6:d6:bb:f3:fd:01:f4:33:84:0a:16:35: 60:f8:e2:02:16:23:bc:91:3f:b0:ae:88:ca:b9:d3: fc:2a:7f:54:2b:bc:fe:d5:b0:3c:52:73:a2:8c:01: b5:4c:b3:63:7b:07:bf:6a:a0:3b:d4:2c:8e:db:bb: a1:bf:a5:1e:75:37:8e:3f:a9:84:c9:3f:91:75:07: 70:b7:d5:d7:de:cc:dd:34:59:62:65:63:a4:71:de: 12:59:46:e4:74:52:35:11:a9:ca:13:d7:91:d0:87: 20:fa:81:a2:8b:7a:35:6b:90:3e:e4:47:ed:a9:d8: c0:2c:01:9c:1c:1e:52:4c:f9:fb:53:44:ab:71:98: de:84:d4:ae:b4:8b:c2:12:30:8c:23:b6:06:1b:31: f5:bf:d4:b5:5b:17:06:6d:0d:ae:d5:4b:a5:fe:10: 76:cb:5c:71:82:c4:1b:64:aa:6f:cc:40:07:3e:b1: 95:c2:fc:31:95:98:3e:50:b8:b8:b1:c6:4a:cc:5d: 0a:f6:bd:2e:0f:26:3a:a8:f6:4b:56:d4:6f:ee:f5: c8:0f:7d:29:56:b3:45:19:39:b5:e1:46:5d:5e:8b: 9d:d5:a6:2f:c9:cd:fd:01:7b:51:d5:50:4c:b1:70: fe:69:1c:1e:aa:a8:09:db:41:46:1b:5d:c9:a0:09: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:98:61:A8:BD:95:FB:F5:29:99:23:79:08:E3:DE:04:75:F2:4C X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:7c:a1:48:7e:6c:4a:da:d7:86:f9:bd:fc:75:38:de:83: 14:5f:bb:b7:d9:87:55:93:6e:df:18:13:5d:f1:03:1a:e1:67: 2f:04:c6:95:f4:1b:29:dc:db:4f:dd:f8:c3:4b:1d:0c:ed:0b: 4c:b0:5e:e8:56:a1:0f:76:af:1f:17:dd:e8:b8:5d:4f:f3:f4: 5d:cc:28:97:10:e9:af:85:37:f8:72:23:f4:21:79:af:e5:a9: d7:f5:29:4b:73:a9:51:a0:0c:0d:b7:d1:5f:55:48:d6:26:ef: 1f:07:2c:ea:a4:33:29:eb:cc:eb:89:74:6f:d4:20:ef:88:a6: ea:11:d0:1d:13:f5:0c:ce:9c:75:fa:b2:59:60:61:80:c5:62: a9:b5:f1:d3:b2:04:58:85:27:0d:67:96:b3:44:57:d2:33:2e: e7:b2:3e:62:a5:bc:b6:bb:1a:7a:bd:f7:3a:cf:f6:f6:c5:ec: 5f:bd:5d:94:58:6b:b0:34:e7:af:48:50:71:bf:35:4b:42:97: f5:2d:f9:70:4a:5a:e6:e1:88:58:b9:c7:24:3b:3d:29:e4:c1: 25:9a:f9:11:94:43:a9:69:4b:f7:53:d3:70:6e:8a:95:b4:6b: b3:68:a7:de:ff:47:9c:2f:23:68:15:ea:81:b2:38:cc:f9:d8: ae:b2:48:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS4CzUhQIKJQSIvOC/Szv+gc98swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNjA0MTkwMTA5NTRaFw0yNjA0MjAwNDA4NTRaMDMxMTAvBgNV BAMTKEFBODI5ODYxQThCRDk1RkJGNTI5OTkyMzc5MDhFM0RFMDQ3NUYyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9AubWu/P9AfQzhAoWNWD44gIW I7yRP7CuiMq50/wqf1QrvP7VsDxSc6KMAbVMs2N7B79qoDvULI7bu6G/pR51N44/ qYTJP5F1B3C31dfezN00WWJlY6Rx3hJZRuR0UjURqcoT15HQhyD6gaKLejVrkD7k R+2p2MAsAZwcHlJM+ftTRKtxmN6E1K60i8ISMIwjtgYbMfW/1LVbFwZtDa7VS6X+ EHbLXHGCxBtkqm/MQAc+sZXC/DGVmD5QuLixxkrMXQr2vS4PJjqo9ktW1G/u9cgP fSlWs0UZObXhRl1ei53Vpi/Jzf0Be1HVUEyxcP5pHB6qqAnbQUYbXcmgCYWXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqoKYYai9lfv1KZkjeQjj3gR18kwwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkd8oUh+bEra14b5vfx1 ON6DFF+7t9mHVZNu3xgTXfEDGuFnLwTGlfQbKdzbT934w0sdDO0LTLBe6FahD3av Hxfd6LhdT/P0XcwolxDpr4U3+HIj9CF5r+Wp1/UpS3OpUaAMDbfRX1VI1ibvHwcs 6qQzKevM64l0b9Qg74im6hHQHRP1DM6cdfqyWWBhgMViqbXx07IEWIUnDWeWs0RX 0jMu57I+YqW8trsaer33Os/29sXsX71dlFhrsDTnr0hQcb81S0KX9S35cEpa5uGI WLnHJDs9KeTBJZr5EZRDqWlL91PTcG6KlbRrs2in3v9HnC8jaBXqgbI4zPnYrrJI jg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:57:00 2026 by rpki-client