$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: Rh7Owo1puET+2VnDndYPaGOcNXIC2DZikxnELh37sbs= Subject key identifier: EC:A4:EB:01:7D:F5:16:2F:88:B8:6E:B2:6A:03:77:62:57:E7:F1:68 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 5E49650D6BA4BB62BD41D9A419CE3CF683C2CC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 01A3 Signing time: Tue 22 Sep 2026 11:56:28 +0000 Manifest this update: Tue 22 Sep 2026 11:51:28 +0000 Manifest next update: Wed 23 Sep 2026 14:06:28 +0000 Files and hashes: 1: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 2: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: F52Wq3H/TwS51OhqgrnkrW54T+Xtl5WMDonpJ5RQT+8=) 3: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 4: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 5: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:49:65:0d:6b:a4:bb:62:bd:41:d9:a4:19:ce:3c:f6:83:c2:cc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Sep 22 11:51:28 2026 GMT Not After : Sep 23 14:06:28 2026 GMT Subject: CN=ECA4EB017DF5162F88B86EB26A03776257E7F168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:9b:b0:47:1d:0d:0d:3c:83:99:5e:9b:ef: ff:a2:06:d3:15:4b:5a:87:9a:6e:04:80:45:7d:79: 49:27:9d:76:29:02:a5:e5:71:d6:25:4a:df:41:43: 87:3d:41:96:6c:40:71:a1:c4:15:56:ff:f7:59:3b: a8:8d:00:a6:e1:85:6c:23:24:65:88:a5:86:6e:ef: ae:13:f9:b1:42:11:07:67:28:dc:93:dc:2d:50:d6: 29:e5:55:2d:5a:3d:15:b5:06:ad:f5:ba:58:86:62: a4:5c:99:f2:f5:92:92:03:43:7a:13:3a:7f:2d:74: e0:1e:21:ea:a4:70:17:c9:fd:fc:ac:53:63:d5:69: 62:f3:e7:a8:ea:54:ee:08:99:a8:2b:57:a5:5c:3a: 07:4b:3a:12:ae:32:f6:17:d5:58:f8:c2:2b:6c:b5: 98:c4:ed:33:b2:47:86:70:30:29:9b:bd:97:cb:12: fb:0f:85:81:d8:45:c5:c2:e3:51:37:88:5e:b6:23: bf:0e:cd:0e:4e:f2:be:fb:1f:13:1a:6f:d8:3e:97: 5f:9e:44:fb:11:05:3f:88:3c:57:fa:5e:d2:f3:41: 4a:ce:08:42:c8:d8:26:ab:40:d5:dc:0f:c8:56:b1: f5:dd:31:d2:59:30:d3:0b:f5:24:c2:dd:d6:1b:db: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A4:EB:01:7D:F5:16:2F:88:B8:6E:B2:6A:03:77:62:57:E7:F1:68 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cb:dd:1c:ca:68:80:61:d9:1f:5d:36:da:a8:20:f4:59:5d: ec:09:fb:a2:23:a4:3f:6e:49:65:6c:1f:77:b5:0a:e2:a9:5c: 78:f0:18:34:63:47:86:22:9b:ea:33:d0:61:ee:4a:15:59:86: da:b8:ee:cd:1b:cc:f3:86:33:5a:0e:b2:e3:95:1c:9b:ed:12: 2f:f2:7a:4d:38:97:f3:21:1f:89:f2:4c:76:a9:cc:71:3c:36: d7:30:33:34:df:c8:81:9c:01:18:11:ac:d2:73:2e:2f:ac:23: 8f:fa:62:34:01:84:af:cb:ca:86:4d:31:5b:6a:d5:22:50:03: 8a:eb:9a:cd:ce:ca:ae:ea:2b:34:89:63:06:d3:71:bc:a7:29: f7:45:1a:f2:75:2e:a5:40:40:2b:82:64:36:2f:a2:ce:b7:40: 12:71:66:b3:65:a6:ce:73:86:5b:3b:5a:d4:8e:0f:05:b8:c5: c6:fc:37:a3:1b:68:fa:32:3d:8c:4b:25:8d:cd:6a:56:73:54: fc:ea:2c:f4:62:a6:6a:0b:21:0c:bb:15:1b:78:49:cd:07:54: 24:60:7a:1c:bb:7b:c0:e0:cd:12:21:0b:44:d2:cf:96:1c:21: 2e:3a:20:1a:17:21:a3:4d:1e:72:ea:53:9e:eb:f0:50:6f:9b: 1d:30:27:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXkllDWuku2K9QdmkGc489oPCzIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA5MjIxMTUxMjhaFw0yNjA5MjMxNDA2MjhaMDMxMTAvBgNV BAMTKEVDQTRFQjAxN0RGNTE2MkY4OEI4NkVCMjZBMDM3NzYyNTdFN0YxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PZuwRx0NDTyDmV6b7/+iBtMV S1qHmm4EgEV9eUknnXYpAqXlcdYlSt9BQ4c9QZZsQHGhxBVW//dZO6iNAKbhhWwj JGWIpYZu764T+bFCEQdnKNyT3C1Q1inlVS1aPRW1Bq31uliGYqRcmfL1kpIDQ3oT On8tdOAeIeqkcBfJ/fysU2PVaWLz56jqVO4ImagrV6VcOgdLOhKuMvYX1Vj4wits tZjE7TOyR4ZwMCmbvZfLEvsPhYHYRcXC41E3iF62I78OzQ5O8r77HxMab9g+l1+e RPsRBT+IPFf6XtLzQUrOCELI2CarQNXcD8hWsfXdMdJZMNML9STC3dYb2xZ3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7KTrAX31Fi+IuG6yagN3Ylfn8WgwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8vdHMpogGHZH1022qgg 9Fld7An7oiOkP25JZWwfd7UK4qlcePAYNGNHhiKb6jPQYe5KFVmG2rjuzRvM84Yz Wg6y45Ucm+0SL/J6TTiX8yEfifJMdqnMcTw21zAzNN/IgZwBGBGs0nMuL6wjj/pi NAGEr8vKhk0xW2rVIlADiuuazc7KruorNIljBtNxvKcp90Ua8nUupUBAK4JkNi+i zrdAEnFms2WmznOGWzta1I4PBbjFxvw3oxto+jI9jEsljc1qVnNU/Oos9GKmagsh DLsVG3hJzQdUJGB6HLt7wODNEiELRNLPlhwhLjogGhcho00ecupTnuvwUG+bHTAn nA== -----END CERTIFICATE-----Generated at Tue Sep 22 15:03:05 2026 by rpki-client