$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft File: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json) Hash identifier: YRbENmfTHumrnrQhlO1ZpUpbjy0CxIXFDe6oUxskRhI= Subject key identifier: CF:2C:38:6D:CA:A4:19:08:9F:0D:41:13:FF:57:A4:83:BC:B6:86:C7 Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A Certificate issuer: /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Certificate serial: 1D2F11706FEDD3B3D7B719A457B030BB2DCB50FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft Manifest number: CA Signing time: Sat 13 Jun 2026 01:45:13 +0000 Manifest this update: Sat 13 Jun 2026 01:40:13 +0000 Manifest next update: Sun 14 Jun 2026 04:52:13 +0000 Files and hashes: 1: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=) 2: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=) 3: 326130663a316363353a313033303a3a2f34342d3438203d3e20323136323939.roa (hash: sj4hnBEpnD4akX8jpgCsQPvr+ht2QjoESczHJBDU000=) 4: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=) 5: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: TUCuyHsEH3GKkFty20tzsfzw5f0hthKFsa+dHcNQKZc=) 6: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=) 7: 326130663a316363353a313033303a3a2f34342d3438203d3e20323031333836.roa (hash: SxyQIKRflKDfzDUyUfrdFvcREAVMOS9I7Iy4ywW3U5Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 04:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:11:70:6f:ed:d3:b3:d7:b7:19:a4:57:b0:30:bb:2d:cb:50:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A Validity Not Before: Jun 13 01:40:13 2026 GMT Not After : Jun 14 04:52:13 2026 GMT Subject: CN=CF2C386DCAA419089F0D4113FF57A483BCB686C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:d9:23:21:68:ff:63:85:24:71:04:04:77: c3:b9:83:c2:99:89:84:8f:22:2e:53:7c:cc:2a:7d: 41:2a:20:e3:cf:d5:37:e2:8f:0a:78:c1:6f:56:3f: 39:7a:22:a7:95:81:a9:c0:04:7a:ce:c9:58:e7:6c: 0d:a6:39:e3:54:a6:20:74:56:2d:02:4c:79:75:e9: 72:62:25:ab:17:43:b8:44:ed:4a:b4:c3:a2:b7:94: e8:28:a4:9a:5f:f4:b4:64:9a:52:5b:e7:b4:8e:04: d7:85:a4:77:53:c9:26:91:c3:41:08:46:20:78:55: 4d:e5:ac:e6:a8:25:28:cd:41:37:22:63:eb:c3:2d: 56:b9:f7:a8:06:0b:c9:5b:bd:21:99:9e:de:44:e0: f9:57:b2:c3:ea:a4:b1:c8:f8:bf:8d:04:d6:e6:ee: 91:1e:a5:ac:5f:1f:d4:43:0a:cc:4b:83:0b:08:60: 88:f1:e0:b0:ee:ab:b8:41:0e:47:e4:dd:05:e3:0c: 65:7f:69:4f:f2:3f:ec:7f:d9:c0:ea:94:f9:2a:7b: c1:33:38:6a:e2:25:42:f9:49:bc:77:80:63:95:34: e1:81:96:96:90:ac:51:60:f6:0d:b9:89:f5:fe:3f: 0e:04:76:33:4a:46:a2:42:31:8f:2c:3f:22:0f:2d: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2C:38:6D:CA:A4:19:08:9F:0D:41:13:FF:57:A4:83:BC:B6:86:C7 X509v3 Authority Key Identifier: keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fd:89:7b:01:7a:9a:4f:cf:bf:3d:34:a6:16:93:5b:5f:24: 16:f6:80:47:cd:35:ce:12:fd:41:b6:87:e2:ca:5c:c7:a6:ea: 0b:9d:6f:9b:bb:af:52:a7:cc:ce:3e:7d:c1:ae:da:b7:ae:01: e2:af:5f:3a:a9:36:22:d5:84:97:13:fd:0a:ce:73:6e:26:24: e8:9d:48:c6:00:76:8f:5e:79:68:20:bd:bf:b6:f5:92:bc:cc: 2f:09:37:5f:f6:6d:f3:31:95:ee:70:14:65:12:0c:25:ee:cb: 56:2f:22:4f:b5:75:9d:9e:06:f8:3c:05:79:d0:4a:65:d9:36: 3c:70:d3:18:14:d7:9a:3a:e0:4d:9e:a4:46:2e:33:37:85:0a: 02:97:88:8a:0a:f7:47:06:20:f4:fb:ca:0c:91:4e:8c:e6:74: 3d:3c:14:06:c1:21:cf:fa:27:64:fb:33:6c:d4:c5:84:cc:bf: 45:31:17:fe:b9:bd:78:ea:37:f3:ba:ba:ff:92:71:77:7f:d9: 65:63:ca:12:c2:7e:4a:97:35:2e:22:bc:21:39:03:79:b1:98: f5:dc:c5:26:4e:48:f7:46:06:d9:c5:56:bf:27:02:4a:d1:84: b2:dc:dc:1f:17:e2:56:6f:a1:20:5f:1b:a1:4c:03:d8:4b:fb: ab:01:fa:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHS8RcG/t07PXtxmkV7Awuy3LUP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5 MUZCQjczQTAeFw0yNjA2MTMwMTQwMTNaFw0yNjA2MTQwNDUyMTNaMDMxMTAvBgNV BAMTKENGMkMzODZEQ0FBNDE5MDg5RjBENDExM0ZGNTdBNDgzQkNCNjg2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkNkjIWj/Y4UkcQQEd8O5g8KZ iYSPIi5TfMwqfUEqIOPP1Tfijwp4wW9WPzl6IqeVganABHrOyVjnbA2mOeNUpiB0 Vi0CTHl16XJiJasXQ7hE7Uq0w6K3lOgopJpf9LRkmlJb57SOBNeFpHdTySaRw0EI RiB4VU3lrOaoJSjNQTciY+vDLVa596gGC8lbvSGZnt5E4PlXssPqpLHI+L+NBNbm 7pEepaxfH9RDCsxLgwsIYIjx4LDuq7hBDkfk3QXjDGV/aU/yP+x/2cDqlPkqe8Ez OGriJUL5Sbx3gGOVNOGBlpaQrFFg9g25ifX+Pw4EdjNKRqJCMY8sPyIPLULHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzyw4bcqkGQifDUET/1ekg7y2hscwHwYDVR0j BBgwFoAU4duHu7vSDf8mGeYUuG1LfpH7tzowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzMvRTFEQjg3QkJCQkQyMERGRjI2MTlFNjE0Qjg2RDRCN0U5MUZCQjczQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC9FMURCODdCQkJCRDIwREZGMjYxOUU2MTRC ODZENEI3RTkxRkJCNzNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUyYjg0MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8zL0UxREI4N0JC QkJEMjBERkYyNjE5RTYxNEI4NkQ0QjdFOTFGQkI3M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCs/Yl7 AXqaT8+/PTSmFpNbXyQW9oBHzTXOEv1BtofiylzHpuoLnW+bu69Sp8zOPn3Brtq3 rgHir186qTYi1YSXE/0KznNuJiTonUjGAHaPXnloIL2/tvWSvMwvCTdf9m3zMZXu cBRlEgwl7stWLyJPtXWdngb4PAV50Epl2TY8cNMYFNeaOuBNnqRGLjM3hQoCl4iK CvdHBiD0+8oMkU6M5nQ9PBQGwSHP+idk+zNs1MWEzL9FMRf+ub146jfzurr/knF3 f9llY8oSwn5KlzUuIrwhOQN5sZj13MUmTkj3RgbZxVa/JwJK0YSy3NwfF+JWb6Eg XxuhTAPYS/urAfqR -----END CERTIFICATE-----Generated at Sat Jun 13 19:32:53 2026 by rpki-client