$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: mMHfBbvVB7KrnDnSskXzwbO87Rcj5snZUShYb2svlYs= Subject key identifier: B5:81:03:47:2C:00:96:1C:B9:37:6B:A8:EE:AB:50:04:71:2E:7B:49 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 1725B8435AD529C7A10A863104CAFAEF3CD614EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 017D Signing time: Sun 01 Mar 2026 07:15:46 +0000 Manifest this update: Sun 01 Mar 2026 07:10:46 +0000 Manifest next update: Mon 02 Mar 2026 08:53:46 +0000 Files and hashes: 1: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 2: 3138352e39312e3131322e302f32342d3234203d3e203230343733.roa (hash: uQR2ZEBSc/gm5nc4UWXss03+GuSFprtiONvs7ml01aQ=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: YaLPJyiAuvZ6Kh4RAwldxDl1G0OyhrkeryymfR3Z/Go=) 4: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 5: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:b8:43:5a:d5:29:c7:a1:0a:86:31:04:ca:fa:ef:3c:d6:14:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Mar 1 07:10:46 2026 GMT Not After : Mar 2 08:53:46 2026 GMT Subject: CN=B58103472C00961CB9376BA8EEAB5004712E7B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e6:09:e1:cb:cc:87:1b:d1:4a:83:e4:34:42: 69:a0:f5:5f:32:0f:54:6d:96:ec:f9:0d:0c:2d:7f: 85:9e:a4:41:42:1c:e9:05:9f:15:ae:2c:6a:67:28: fe:ae:24:31:11:8e:58:2c:0f:7c:e8:53:4b:65:f2: 5f:4d:5c:10:a3:f9:58:7a:28:ef:be:6f:5e:8a:91: d3:95:dc:24:5b:49:53:ba:3d:06:da:2f:05:a4:b6: ec:39:55:49:4e:38:5a:63:32:b5:61:c2:36:59:32: 2e:42:60:7d:06:cb:28:69:c5:9c:0a:af:ad:6f:51: 23:7d:8e:38:6f:23:3e:09:0b:39:46:b3:69:a0:0d: de:04:57:83:d2:69:89:3a:1c:65:4b:9a:5d:0a:4e: f7:54:17:b1:d1:73:31:5b:1b:e2:31:a9:06:ae:b4: ba:3b:f7:2e:f6:8a:3b:8b:d5:eb:5c:bd:8f:aa:ff: 13:a6:63:95:0e:5b:5b:8f:3b:38:0d:5c:80:ba:4a: 44:60:2f:c2:02:05:16:5e:43:63:b4:fb:5f:bd:2d: 9d:64:ec:3b:43:7b:f0:16:30:89:3a:c3:59:10:4c: 0a:6c:69:8b:0d:42:11:6d:ad:83:74:7a:a2:21:58: 4e:63:59:5a:be:87:6a:ac:8d:26:bb:4b:d9:09:2e: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:81:03:47:2C:00:96:1C:B9:37:6B:A8:EE:AB:50:04:71:2E:7B:49 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f8:f7:f8:01:a9:bb:78:37:b3:2a:e5:d7:da:59:7e:65:e2: bf:96:d3:b9:bb:ee:02:11:24:e4:69:e8:17:e8:3f:f7:f9:d1: 9f:b7:4c:bc:73:0c:3d:20:e4:c5:74:79:ea:bf:7a:91:8a:25: 35:3c:8a:cf:09:71:c4:7b:a6:76:b2:4a:a9:21:7f:d9:63:ce: de:a2:1f:ba:ed:79:80:18:38:8e:f4:da:1f:42:cf:36:58:93: a0:d4:3c:55:dd:4c:03:00:bd:86:ca:22:ef:e2:4a:8c:3c:dc: e2:6f:c5:c0:ea:06:94:41:5d:d7:99:11:09:2e:78:44:26:7d: 91:b1:ca:3e:54:43:7a:f4:54:21:6e:c7:85:73:f3:b0:53:7d: c1:fe:77:57:86:85:2b:ef:90:db:f0:5b:14:85:43:6b:ad:d8: fc:0a:c2:87:e1:f7:93:c4:b1:ae:a9:eb:ea:ce:c3:02:4d:a7: b0:31:a4:78:95:67:01:0c:91:fa:27:8a:81:d2:ec:63:14:8f: 02:2d:ab:85:0c:c0:93:a2:bf:02:d1:39:23:fb:11:69:6f:fb: e7:f1:41:d4:98:e5:97:0a:3d:42:3f:7e:6e:83:31:2a:d0:a9: e0:b9:13:4d:89:e1:3c:a6:7c:27:f0:4b:3e:e8:15:4b:b6:fe: a2:a9:e2:5c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFyW4Q1rVKcehCoYxBMr67zzWFOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNjAzMDEwNzEwNDZaFw0yNjAzMDIwODUzNDZaMDMxMTAvBgNV BAMTKEI1ODEwMzQ3MkMwMDk2MUNCOTM3NkJBOEVFQUI1MDA0NzEyRTdCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5gnhy8yHG9FKg+Q0Qmmg9V8y D1Rtluz5DQwtf4WepEFCHOkFnxWuLGpnKP6uJDERjlgsD3zoU0tl8l9NXBCj+Vh6 KO++b16KkdOV3CRbSVO6PQbaLwWktuw5VUlOOFpjMrVhwjZZMi5CYH0GyyhpxZwK r61vUSN9jjhvIz4JCzlGs2mgDd4EV4PSaYk6HGVLml0KTvdUF7HRczFbG+IxqQau tLo79y72ijuL1etcvY+q/xOmY5UOW1uPOzgNXIC6SkRgL8ICBRZeQ2O0+1+9LZ1k 7DtDe/AWMIk6w1kQTApsaYsNQhFtrYN0eqIhWE5jWVq+h2qsjSa7S9kJLkGpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtYEDRywAlhy5N2uo7qtQBHEue0kwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfj3+AGpu3g3syrl19pZ fmXiv5bTubvuAhEk5GnoF+g/9/nRn7dMvHMMPSDkxXR56r96kYolNTyKzwlxxHum drJKqSF/2WPO3qIfuu15gBg4jvTaH0LPNliToNQ8Vd1MAwC9hsoi7+JKjDzc4m/F wOoGlEFd15kRCS54RCZ9kbHKPlRDevRUIW7HhXPzsFN9wf53V4aFK++Q2/BbFIVD a63Y/ArCh+H3k8Sxrqnr6s7DAk2nsDGkeJVnAQyR+ieKgdLsYxSPAi2rhQzAk6K/ AtE5I/sRaW/75/FB1Jjllwo9Qj9+boMxKtCp4LkTTYnhPKZ8J/BLPugVS7b+oqni XA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:53:03 2026 by rpki-client