$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: psJoICyN/suL7UJ8lUnx+SNAwXoROMhDVvi2k/HtE5M= Subject key identifier: B7:AF:B9:62:20:3A:26:6D:A3:FB:D4:D0:F7:C7:DB:97:02:66:AF:BC Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 0559BB571ED024C032988CE0B2A00657D2FA75AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 91 Signing time: Mon 02 Mar 2026 02:23:24 +0000 Manifest this update: Mon 02 Mar 2026 02:18:24 +0000 Manifest next update: Tue 03 Mar 2026 04:10:24 +0000 Files and hashes: 1: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: W6qGR3VluZ1GRaf4rmkQC0pOdJAlivm0Ezwd/X1zEtM=) 2: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 3: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 4: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:59:bb:57:1e:d0:24:c0:32:98:8c:e0:b2:a0:06:57:d2:fa:75:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Mar 2 02:18:24 2026 GMT Not After : Mar 3 04:10:24 2026 GMT Subject: CN=B7AFB962203A266DA3FBD4D0F7C7DB970266AFBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:b4:50:f6:fb:c3:e3:0e:db:a9:3e:53:2a: 01:ea:92:00:da:02:60:be:8b:17:de:21:01:b9:75: 34:0a:74:28:dd:cf:76:02:d2:50:da:b1:73:50:28: 12:e6:51:ab:c1:53:f6:dc:84:7d:0f:98:e9:85:fa: b7:e6:32:52:16:13:98:b7:e8:12:b2:2f:01:65:f9: c6:27:13:a9:17:6a:fb:82:54:24:f8:d4:67:e6:36: 8e:98:cf:6e:55:8b:ca:3c:e7:17:4f:88:3a:51:5e: a1:38:ce:79:e5:da:cf:31:f3:85:c8:ae:6f:f9:95: c2:c8:a9:6a:2e:ad:ac:ab:fc:8a:96:d0:49:d7:49: 9d:b8:f2:ab:85:c4:b5:89:f0:60:ff:8b:1d:55:83: 13:58:b1:fd:92:79:2d:02:d4:01:5a:43:a7:06:22: ce:72:69:36:68:35:42:c3:d9:02:c4:bc:96:65:85: 7e:db:a9:ab:e2:c7:ac:b8:9a:d1:40:ef:ae:8d:b0: 7c:77:b9:15:f1:7e:39:24:37:b1:02:4a:05:b6:29: ce:54:60:a0:0f:c1:3c:7a:9b:c9:41:dd:38:d4:bb: 13:8c:35:45:af:e4:b4:c8:29:5e:b3:30:fc:1f:7a: a4:45:7d:4f:91:9d:22:c0:00:ca:be:e4:f0:85:81: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AF:B9:62:20:3A:26:6D:A3:FB:D4:D0:F7:C7:DB:97:02:66:AF:BC X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f5:ce:61:48:b1:e6:d2:cd:f3:ce:c0:d5:eb:5a:12:5b:6d: b7:85:1e:44:88:8c:6e:0c:ac:15:2f:30:0a:e0:cf:2f:24:48: d0:10:6b:b9:de:08:14:0b:f6:c8:b2:94:83:67:85:f3:e6:ce: 01:3d:85:06:0d:96:7d:28:9e:7c:3b:ce:2a:f7:5f:60:62:9f: 92:43:60:4e:98:b1:5f:ae:24:96:18:12:3f:07:f5:39:35:65: e0:95:ff:7a:db:d8:23:c6:d6:b6:87:ea:da:2d:75:b3:65:17: 34:0f:32:92:13:4d:b4:c1:dd:82:26:7b:56:51:32:81:27:07: c4:c5:68:08:2d:f4:59:16:32:d5:a2:6d:ba:08:21:b1:f9:00: 68:50:a4:f5:96:2a:0b:84:c4:20:13:7c:e7:3a:60:af:32:6f: 42:f3:ca:ce:98:9d:38:63:94:50:46:66:3e:07:63:99:61:ab: 1f:e0:91:68:1e:6f:13:ff:d6:57:fc:e6:09:9f:7b:fa:a2:2f: 73:2f:04:44:ad:7c:b7:a6:88:f3:33:b3:10:a7:e3:5a:07:38: 3c:29:a4:53:9a:8b:b1:aa:57:e8:54:9d:2a:d0:b6:92:bc:e1: 85:eb:96:2d:f7:bd:59:b6:7e:ea:6e:a4:85:09:81:d3:cd:71: eb:fb:e5:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBVm7Vx7QJMAymIzgsqAGV9L6da8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjAzMDIwMjE4MjRaFw0yNjAzMDMwNDEwMjRaMDMxMTAvBgNV BAMTKEI3QUZCOTYyMjAzQTI2NkRBM0ZCRDREMEY3QzdEQjk3MDI2NkFGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VLRQ9vvD4w7bqT5TKgHqkgDa AmC+ixfeIQG5dTQKdCjdz3YC0lDasXNQKBLmUavBU/bchH0PmOmF+rfmMlIWE5i3 6BKyLwFl+cYnE6kXavuCVCT41GfmNo6Yz25Vi8o85xdPiDpRXqE4znnl2s8x84XI rm/5lcLIqWourayr/IqW0EnXSZ248quFxLWJ8GD/ix1VgxNYsf2SeS0C1AFaQ6cG Is5yaTZoNULD2QLEvJZlhX7bqavix6y4mtFA766NsHx3uRXxfjkkN7ECSgW2Kc5U YKAPwTx6m8lB3TjUuxOMNUWv5LTIKV6zMPwfeqRFfU+RnSLAAMq+5PCFgSirAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUt6+5YiA6Jm2j+9TQ98fblwJmr7wwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivXOYUix5tLN887A1eta Elttt4UeRIiMbgysFS8wCuDPLyRI0BBrud4IFAv2yLKUg2eF8+bOAT2FBg2WfSie fDvOKvdfYGKfkkNgTpixX64klhgSPwf1OTVl4JX/etvYI8bWtofq2i11s2UXNA8y khNNtMHdgiZ7VlEygScHxMVoCC30WRYy1aJtugghsfkAaFCk9ZYqC4TEIBN85zpg rzJvQvPKzpidOGOUUEZmPgdjmWGrH+CRaB5vE//WV/zmCZ97+qIvcy8ERK18t6aI 8zOzEKfjWgc4PCmkU5qLsapX6FSdKtC2krzhheuWLfe9WbZ+6m6khQmB081x6/vl 3w== -----END CERTIFICATE-----Generated at Mon Mar 2 20:05:51 2026 by rpki-client