$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: y/1TlgxlBun95GD0FlJmG/oEEfNdClLuQ7qvRT5lCrs= Subject key identifier: A1:9E:F6:28:28:09:C5:93:E0:A1:CE:78:CB:BA:41:58:96:DB:D3:F2 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 462678C6ED3CC2F93FE876ED6145A1A1981ECADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 02FC Signing time: Mon 21 Sep 2026 07:19:12 +0000 Manifest this update: Mon 21 Sep 2026 07:14:12 +0000 Manifest next update: Tue 22 Sep 2026 08:11:12 +0000 Files and hashes: 1: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 2: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 3: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 4: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 5: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: zBck4nOfVGigqbE1M8GwahkpZT+TSOG3sW4XnkW/DN0=) 6: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 7: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 4VMWXKcIo6/p9ijIu9IEM7e/uFISrba097G5zVjTr4E=) 8: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) 9: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 10: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: HL7mFBDKDU+iYfATsU33A3w0WGjK39TBLxCkLSeJlhE=) 11: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: 8OyQzXTX8GIUlTIH4+hs529CdWJ+uPA0ehQkNyeoORI=) 12: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 13: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 14: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 15: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:26:78:c6:ed:3c:c2:f9:3f:e8:76:ed:61:45:a1:a1:98:1e:ca:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Sep 21 07:14:12 2026 GMT Not After : Sep 22 08:11:12 2026 GMT Subject: CN=A19EF6282809C593E0A1CE78CBBA415896DBD3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:58:e4:00:a1:c8:a0:a2:de:34:1a:8d:5c: 46:31:64:91:9a:b2:c3:81:ba:73:16:82:61:f3:49: 81:02:41:3f:d2:2c:d6:57:e0:bd:fd:85:d8:24:8c: 47:d3:18:7e:41:ad:dc:bb:6a:93:99:b2:94:72:ad: 0f:e2:c8:3b:9b:32:0c:79:f0:8c:43:c0:5e:61:2d: fd:99:c6:1d:36:be:62:44:f9:2d:63:7a:ac:09:e3: 49:be:48:4b:f4:48:e5:7b:fc:9c:21:a7:c6:a8:1d: ad:00:84:d0:4a:5d:b5:a6:14:41:cc:16:fa:03:99: 7a:bf:4a:ef:ee:7c:22:18:5a:0f:e6:0d:c6:b8:4a: 89:af:15:ce:a3:fe:4f:b7:e9:cc:06:31:24:6f:dd: 01:4f:44:f1:01:8f:fe:c2:1f:51:fd:ad:c6:3e:4b: 0f:55:e8:ec:19:8f:9d:f5:50:b5:d2:ea:68:1c:b5: 09:3a:33:ac:0d:d6:2b:9e:83:aa:17:42:b8:05:e9: 0b:63:2f:57:6c:74:bc:28:6f:1c:4d:6b:c9:6e:25: 92:47:6b:35:b9:2d:72:43:7b:ec:fa:83:0c:48:fe: 95:39:3e:0b:e1:21:6f:86:50:ee:b9:6c:32:70:c1: 44:e5:5f:e2:31:96:07:e6:9d:07:09:e1:a0:74:2d: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:F6:28:28:09:C5:93:E0:A1:CE:78:CB:BA:41:58:96:DB:D3:F2 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9c:de:d0:d8:b7:f5:fa:cd:4f:b4:30:ac:1e:f1:7c:b5:74: 8c:b3:a6:5b:c8:ac:d8:77:4b:e2:dd:e0:5a:30:eb:d4:aa:e2: ab:6a:33:5f:05:ec:a9:16:8c:e6:04:23:d7:7e:97:5c:92:21: f3:f8:62:78:9d:10:53:24:8a:48:be:d3:e9:8c:98:69:ac:ef: 55:f3:30:80:6b:a5:9f:36:91:98:ce:12:f0:a8:aa:e1:97:61: 87:48:22:a5:6b:be:42:bf:41:83:67:61:e8:e1:28:c3:3c:c7: 9e:8b:48:f5:59:4a:f0:64:f6:28:f1:ba:18:31:23:6d:72:b5: 53:76:fa:d9:84:04:30:d3:a0:86:9d:fe:e9:1c:a8:87:f1:b7: 63:37:8c:88:5f:1c:35:e1:d9:43:ad:04:7b:6e:d9:89:ea:d4: 9a:79:f2:66:91:75:0d:f1:d5:90:50:95:c7:87:1f:7e:17:5e: a4:8c:0b:46:f0:11:6d:bc:9d:a6:74:f8:e7:1e:e9:82:46:2a: 4a:d6:76:87:b8:a1:dd:64:bd:bc:4c:21:50:3e:65:e2:d7:97: b5:16:e3:3b:02:12:a0:cc:c6:22:61:2b:68:b3:a5:00:58:c7: 9e:58:72:81:d3:ad:33:2e:b8:f6:e1:c1:d6:f7:fe:5a:3a:f6: d7:a3:f1:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURiZ4xu08wvk/6HbtYUWhoZgeytowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA5MjEwNzE0MTJaFw0yNjA5MjIwODExMTJaMDMxMTAvBgNV BAMTKEExOUVGNjI4MjgwOUM1OTNFMEExQ0U3OENCQkE0MTU4OTZEQkQzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh51jkAKHIoKLeNBqNXEYxZJGa ssOBunMWgmHzSYECQT/SLNZX4L39hdgkjEfTGH5Brdy7apOZspRyrQ/iyDubMgx5 8IxDwF5hLf2Zxh02vmJE+S1jeqwJ40m+SEv0SOV7/Jwhp8aoHa0AhNBKXbWmFEHM FvoDmXq/Su/ufCIYWg/mDca4SomvFc6j/k+36cwGMSRv3QFPRPEBj/7CH1H9rcY+ Sw9V6OwZj531ULXS6mgctQk6M6wN1iueg6oXQrgF6QtjL1dsdLwobxxNa8luJZJH azW5LXJDe+z6gwxI/pU5PgvhIW+GUO65bDJwwUTlX+IxlgfmnQcJ4aB0LXXzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoZ72KCgJxZPgoc54y7pBWJbb0/IwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpze0Ni39frNT7QwrB7x fLV0jLOmW8is2HdL4t3gWjDr1Kriq2ozXwXsqRaM5gQj136XXJIh8/hieJ0QUySK SL7T6YyYaazvVfMwgGulnzaRmM4S8Kiq4Zdhh0gipWu+Qr9Bg2dh6OEowzzHnotI 9VlK8GT2KPG6GDEjbXK1U3b62YQEMNOghp3+6Ryoh/G3YzeMiF8cNeHZQ60Ee27Z ierUmnnyZpF1DfHVkFCVx4cffhdepIwLRvARbbydpnT45x7pgkYqStZ2h7ih3WS9 vEwhUD5l4teXtRbjOwISoMzGImEraLOlAFjHnlhygdOtMy649uHB1vf+Wjr216Px dQ== -----END CERTIFICATE-----Generated at Mon Sep 21 15:37:49 2026 by rpki-client