$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: vhVBW3hfYVziBT1wX3EGVKA80TxUIdF3mQO+Em/tY+w= Subject key identifier: B7:79:8E:0B:B4:08:F7:C0:60:03:D4:EA:2A:EF:8E:19:83:47:B2:27 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 6BE8B29CD966181976EB7B8707D8E053A65EEEB6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: BB Signing time: Fri 17 Apr 2026 18:07:57 +0000 Manifest this update: Fri 17 Apr 2026 18:02:57 +0000 Manifest next update: Sat 18 Apr 2026 18:27:57 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (hash: GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=) 2: 326131343a373538303a6163613a3a2f34382d3438203d3e203438323636.roa (hash: m0JZIjGPbuRcNff74X1PNepaT8iUZ69LeXHnRPJt/AQ=) 3: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: H7UvVnwDVNFpNxXEwoI36b1cuzQvQK7yyDC8c1M4jFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e8:b2:9c:d9:66:18:19:76:eb:7b:87:07:d8:e0:53:a6:5e:ee:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Apr 17 18:02:57 2026 GMT Not After : Apr 18 18:27:57 2026 GMT Subject: CN=B7798E0BB408F7C06003D4EA2AEF8E198347B227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ed:0e:85:82:21:26:28:bf:b1:0e:03:6b:b2: 36:4e:31:a0:5c:41:6a:97:64:a9:b3:c0:f8:e5:f6: 65:f2:84:72:4d:f3:34:36:db:b7:78:f4:fa:5d:db: ad:47:49:cd:73:f9:df:77:b5:5a:a4:d7:f0:32:99: a0:13:77:14:64:25:4e:57:22:61:58:12:db:25:b9: ec:2d:c4:eb:9b:4d:1a:d9:56:3c:70:54:4e:1f:8c: ec:3b:56:53:94:23:24:52:35:9b:dd:76:6d:ed:c4: 6d:19:af:95:69:4a:c6:7f:3d:20:d3:fd:b0:c8:9e: cf:b1:ac:62:7d:fa:68:2d:22:f4:53:8a:9a:99:c5: 62:8c:97:07:aa:34:4d:64:26:ba:7b:f3:f6:dc:ae: f1:d2:bf:94:87:5e:a7:78:1d:ac:a3:92:e1:4c:a4: e3:8b:bd:69:69:e9:18:cc:56:39:e1:87:34:f1:43: 16:db:93:60:1c:ac:5f:49:70:91:39:89:2d:bf:b4: 1b:09:25:68:61:92:7b:fc:c7:b3:fe:6e:30:3b:7a: 4f:dd:28:54:04:51:c7:63:53:30:bd:87:49:f1:b7: 36:d3:e5:8f:33:54:43:f1:b5:de:1f:d8:d5:4b:24: bc:a4:67:4c:f0:26:ee:f1:11:06:c0:ed:44:eb:93: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:8E:0B:B4:08:F7:C0:60:03:D4:EA:2A:EF:8E:19:83:47:B2:27 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2b:fa:21:19:79:df:38:45:75:e4:f9:0b:64:6c:08:f6:bf: 13:c2:55:09:ed:e8:63:4f:7d:10:2d:61:c7:58:54:3d:8f:38: 15:aa:96:7d:5c:b9:66:58:24:71:e6:99:57:fd:2e:08:7e:dd: 7f:9f:0e:24:86:45:65:2b:2c:09:eb:d1:b7:48:35:23:59:fb: 8c:42:41:8d:0f:aa:50:fe:15:cd:e5:7a:f3:01:b6:0c:0d:f5: 84:06:b5:84:15:3f:7a:81:4d:a5:1a:28:1f:3e:de:94:b0:d8: 1c:70:b0:06:d7:2b:e3:46:0f:7f:81:b5:bb:77:2f:9e:ad:dd: 87:d4:93:57:4f:59:f8:3c:51:7a:10:ca:7f:2e:09:ac:08:8a: 7a:41:93:d2:62:1f:5d:8a:b8:9b:0b:48:ac:fa:09:29:ad:1c: 52:85:bc:08:82:a7:c7:56:96:be:45:d3:74:e3:94:60:85:12: 4e:13:1a:09:90:8d:a2:a1:14:fa:e9:7c:ab:32:c6:4c:07:5d: c5:34:73:69:a2:d3:a4:52:b1:b0:91:58:c5:82:a1:92:39:77: fa:78:5c:33:69:0d:a7:51:f9:12:fd:b6:1c:df:ec:d5:e0:7d: e1:64:0b:34:38:da:08:d0:5e:c2:a4:f3:31:1a:62:d9:74:74: f6:52:20:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa+iynNlmGBl263uHB9jgU6Ze7rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNjA0MTcxODAyNTdaFw0yNjA0MTgxODI3NTdaMDMxMTAvBgNV BAMTKEI3Nzk4RTBCQjQwOEY3QzA2MDAzRDRFQTJBRUY4RTE5ODM0N0IyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy7Q6FgiEmKL+xDgNrsjZOMaBc QWqXZKmzwPjl9mXyhHJN8zQ227d49Ppd261HSc1z+d93tVqk1/AymaATdxRkJU5X ImFYEtsluewtxOubTRrZVjxwVE4fjOw7VlOUIyRSNZvddm3txG0Zr5VpSsZ/PSDT /bDIns+xrGJ9+mgtIvRTipqZxWKMlweqNE1kJrp78/bcrvHSv5SHXqd4HayjkuFM pOOLvWlp6RjMVjnhhzTxQxbbk2AcrF9JcJE5iS2/tBsJJWhhknv8x7P+bjA7ek/d KFQEUcdjUzC9h0nxtzbT5Y8zVEPxtd4f2NVLJLykZ0zwJu7xEQbA7UTrk0K5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt3mOC7QI98BgA9TqKu+OGYNHsicwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANK/oh GXnfOEV15PkLZGwI9r8TwlUJ7ehjT30QLWHHWFQ9jzgVqpZ9XLlmWCRx5plX/S4I ft1/nw4khkVlKywJ69G3SDUjWfuMQkGND6pQ/hXN5XrzAbYMDfWEBrWEFT96gU2l GigfPt6UsNgccLAG1yvjRg9/gbW7dy+erd2H1JNXT1n4PFF6EMp/LgmsCIp6QZPS Yh9diribC0is+gkprRxShbwIgqfHVpa+RdN045RghRJOExoJkI2ioRT66XyrMsZM B13FNHNpotOkUrGwkVjFgqGSOXf6eFwzaQ2nUfkS/bYc3+zV4H3hZAs0ONoI0F7C pPMxGmLZdHT2UiAp -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:05 2026 by rpki-client