$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft File: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft (raw, json) Hash identifier: LSoUAqSTOOjwhGY1px7sYK4EWyR8iawVZbhg35BgCEk= Subject key identifier: 8B:83:0E:56:EA:2E:4E:6C:78:FD:55:09:EB:61:F1:5B:07:B2:A0:F1 Authority key identifier: E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE Certificate issuer: /CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Certificate serial: 3F1EB3750B516E39B08808588B5D634117B7F97D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft Manifest number: 9C Signing time: Sun 01 Mar 2026 17:52:01 +0000 Manifest this update: Sun 01 Mar 2026 17:47:01 +0000 Manifest next update: Mon 02 Mar 2026 21:09:01 +0000 Files and hashes: 1: 326131343a373538313a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: YwVA55nGhmg50Nrcm1+tsq8Rc4xtCFLwJqkp0AhkdXQ=) 2: E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl (hash: 8KZC5fbd730WMmU/aT4mcBH1GRH0onCps4IUgOVy/+4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1e:b3:75:0b:51:6e:39:b0:88:08:58:8b:5d:63:41:17:b7:f9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9D2F7329F5BA42EE0D898228DEE58B64CA813FE Validity Not Before: Mar 1 17:47:01 2026 GMT Not After : Mar 2 21:09:01 2026 GMT Subject: CN=8B830E56EA2E4E6C78FD5509EB61F15B07B2A0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:7a:9e:7c:58:ad:88:b1:37:a4:ec:7a:d6: d9:db:13:70:5f:e2:c6:f8:95:0e:3f:cf:8b:48:69: 92:6e:59:b9:20:7f:c3:30:65:d9:4c:d5:c4:5c:31: 3e:f6:2a:01:5d:19:1c:6f:5f:f4:b4:8a:44:3d:c8: 7e:25:6d:07:fd:ba:76:2c:a9:62:33:9e:e2:5f:aa: 6e:3b:57:d4:10:22:81:cd:40:be:25:79:d0:85:37: c3:bd:28:6c:55:ed:44:d0:d9:27:b4:fc:0f:36:e8: 1d:c8:5c:44:59:85:fb:93:e4:14:6b:18:8e:05:a8: 11:f1:71:b1:f6:65:4a:29:25:3c:b3:57:39:93:a4: bb:fd:90:90:ed:3b:61:58:f8:08:3e:f0:8f:8d:e5: 73:13:e8:f2:e8:d5:83:33:21:ef:5b:fe:c8:0a:9a: dc:f9:a4:e8:82:6a:47:24:48:68:84:cb:38:b0:8b: 71:d4:bc:6f:51:a7:4a:e8:b8:67:68:d8:23:1d:fd: c2:d1:7f:29:69:ba:77:f9:1f:46:26:d0:87:22:3b: 90:eb:f8:7b:b7:b4:f1:ed:bb:bb:82:23:77:eb:8f: b8:f1:83:df:47:5b:6e:e2:e4:ea:b9:e5:53:2c:7b: 22:5e:b9:37:31:35:59:9a:8f:4b:54:5f:a0:e4:75: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:83:0E:56:EA:2E:4E:6C:78:FD:55:09:EB:61:F1:5B:07:B2:A0:F1 X509v3 Authority Key Identifier: keyid:E9:D2:F7:32:9F:5B:A4:2E:E0:D8:98:22:8D:EE:58:B6:4C:A8:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/1/E9D2F7329F5BA42EE0D898228DEE58B64CA813FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:5f:be:37:ed:5c:e0:0f:77:3f:3c:4c:ad:8d:f5:5d:78: dc:47:04:87:6c:7e:90:f8:37:f1:39:c8:c8:11:7c:fc:fa:fb: ce:ea:d2:84:33:a3:ee:ec:4e:f5:cd:16:64:98:5e:d1:ac:0f: d5:d7:15:86:1b:e9:84:40:02:f3:59:71:7a:04:74:1e:82:fe: ab:5c:35:12:35:63:af:d0:5b:3e:46:3a:64:4c:fe:df:8d:a9: 64:46:37:55:43:84:52:fd:db:96:81:55:a4:59:18:0a:c4:df: 3a:9c:48:fb:5b:a5:6a:5e:03:d5:c5:4c:60:3d:50:01:7b:c2: 24:fe:15:08:14:9a:bb:16:cb:2d:59:f6:9d:c6:db:b5:b7:da: ef:fa:1c:f2:31:b9:bd:dd:17:c1:10:4b:27:1f:87:e3:40:40: 90:5b:04:2a:1d:07:c1:92:6e:99:a5:43:d3:c1:3d:e6:66:17: 1c:ee:f0:82:84:c5:ce:0d:7f:c4:4a:d3:b4:16:bc:87:46:94: db:64:f3:33:02:dd:b3:e2:8d:d6:d0:ef:d5:95:54:d6:58:89: 1c:d5:27:31:0e:dd:89:a3:59:a4:16:45:61:ce:6b:e7:f9:4a: 55:ae:11:c0:2c:11:f5:d7:eb:84:e5:cb:17:52:17:c4:85:6b: 2e:a8:35:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPx6zdQtRbjmwiAhYi11jQRe3+X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0 Q0E4MTNGRTAeFw0yNjAzMDExNzQ3MDFaFw0yNjAzMDIyMTA5MDFaMDMxMTAvBgNV BAMTKDhCODMwRTU2RUEyRTRFNkM3OEZENTUwOUVCNjFGMTVCMDdCMkEwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhR3qefFitiLE3pOx61tnbE3Bf 4sb4lQ4/z4tIaZJuWbkgf8MwZdlM1cRcMT72KgFdGRxvX/S0ikQ9yH4lbQf9unYs qWIznuJfqm47V9QQIoHNQL4ledCFN8O9KGxV7UTQ2Se0/A826B3IXERZhfuT5BRr GI4FqBHxcbH2ZUopJTyzVzmTpLv9kJDtO2FY+Ag+8I+N5XMT6PLo1YMzIe9b/sgK mtz5pOiCakckSGiEyziwi3HUvG9Rp0rouGdo2CMd/cLRfylpunf5H0Ym0IciO5Dr +Hu3tPHtu7uCI3frj7jxg99HW27i5Oq55VMseyJeuTcxNVmaj0tUX6Dkda1DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi4MOVuouTmx4/VUJ62HxWweyoPEwHwYDVR0j BBgwFoAU6dL3Mp9bpC7g2Jgije5YtkyoE/4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4 OWMzLzEvRTlEMkY3MzI5RjVCQTQyRUUwRDg5ODIyOERFRTU4QjY0Q0E4MTNGRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FOUQyRjczMjlGNUJBNDJFRTBEODk4MjI4 REVFNThCNjRDQTgxM0ZFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRjOWFjZWNlLWQwNWItNGY3My05YzZlLWQ4Nzg1ZDE3ODljMy8xL0U5RDJGNzMy OUY1QkE0MkVFMEQ4OTgyMjhERUU1OEI2NENBODEzRkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmZl++ N+1c4A93PzxMrY31XXjcRwSHbH6Q+DfxOcjIEXz8+vvO6tKEM6Pu7E71zRZkmF7R rA/V1xWGG+mEQALzWXF6BHQegv6rXDUSNWOv0Fs+RjpkTP7fjalkRjdVQ4RS/duW gVWkWRgKxN86nEj7W6VqXgPVxUxgPVABe8Ik/hUIFJq7FsstWfadxtu1t9rv+hzy Mbm93RfBEEsnH4fjQECQWwQqHQfBkm6ZpUPTwT3mZhcc7vCChMXODX/EStO0FryH RpTbZPMzAt2z4o3W0O/VlVTWWIkc1ScxDt2Jo1mkFkVhzmvn+UpVrhHALBH11+uE 5csXUhfEhWsuqDVd -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:09 2026 by rpki-client