$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: 9aPFpy2WQrTbigdckYkNEvMHYe2Gg30JzZ/v08zcp1Y= Subject key identifier: 95:59:CE:FD:A4:44:FB:24:E9:65:F5:0E:31:A2:ED:4F:E0:15:B7:63 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 106F4EA6FB1D485BF47BFFAD0CBC25D7506FDFF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: CF Signing time: Fri 17 Apr 2026 19:08:34 +0000 Manifest this update: Fri 17 Apr 2026 19:03:34 +0000 Manifest next update: Sat 18 Apr 2026 20:48:34 +0000 Files and hashes: 1: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: Umi5n7SvIp963gIfYddcEjRCR8w6ZmQyV8f8zSsYcBE=) 2: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 3: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) 4: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 20:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6f:4e:a6:fb:1d:48:5b:f4:7b:ff:ad:0c:bc:25:d7:50:6f:df:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Apr 17 19:03:34 2026 GMT Not After : Apr 18 20:48:34 2026 GMT Subject: CN=9559CEFDA444FB24E965F50E31A2ED4FE015B763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:cf:12:d7:fe:16:b0:b2:04:13:57:b2:45: 2a:f3:28:e0:de:ab:16:cd:2a:15:ec:d3:e3:35:02: d6:4b:e0:e3:4c:a9:6d:18:8d:99:39:59:ac:d1:3f: 6b:af:b8:38:6f:b3:ae:e2:e2:85:db:db:de:50:33: a1:bb:da:50:58:18:7b:cf:c1:0d:2d:d2:f2:d3:1e: 40:6f:68:01:39:1f:40:43:d2:a0:0b:db:95:63:bd: e9:23:48:aa:18:bf:5c:cb:eb:ad:a6:6a:76:68:1f: 2c:f7:c1:ec:08:60:fb:50:df:4f:e4:7b:87:b4:2f: 32:58:01:48:80:af:e1:2d:f1:bd:fa:0e:17:8c:83: a0:5f:d1:e9:90:84:25:89:bb:4c:2d:8f:7c:cc:74: 3e:55:c2:3c:35:dd:f1:89:6e:2d:7a:f1:f8:c0:50: 36:20:9f:b1:1d:fb:c5:4a:04:d1:14:27:db:51:d9: 24:c0:3c:08:20:7d:61:79:5d:3b:73:3f:41:3c:cd: c9:0e:13:c1:ef:63:06:6c:91:fb:d6:a4:bc:11:0e: dd:44:97:4b:a2:6f:56:df:a1:fd:95:46:b6:83:a9: 8d:71:61:65:d1:26:fc:ec:0d:4f:bb:03:df:de:62: e4:07:29:ee:ac:d6:44:42:cb:e9:ad:62:af:61:f8: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:59:CE:FD:A4:44:FB:24:E9:65:F5:0E:31:A2:ED:4F:E0:15:B7:63 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cf:0b:fc:b3:28:6a:5d:99:31:80:bc:66:f5:f8:f9:64:50: 8b:25:b6:55:6d:8d:b2:f9:ae:67:df:f8:81:af:01:a0:e9:58: fb:13:c5:e6:10:9a:b9:72:48:3c:41:17:51:ee:d8:7e:18:03: 19:01:0d:03:95:ae:d3:9c:dc:62:60:2e:59:6b:8b:ea:3c:f2: c2:1d:c9:c8:5f:54:34:1f:6c:ee:2f:a4:dd:c8:45:eb:da:79: 3f:77:be:6f:8d:9c:b9:7a:39:bd:b2:95:c7:42:fa:28:46:67: a9:cb:3e:5f:dc:48:55:06:95:f5:a3:51:2b:ad:4b:d7:28:2f: 28:09:f7:a6:26:00:53:b1:c1:bc:1d:ba:4e:9d:b7:13:a8:9b: 96:da:c8:fb:3c:36:19:97:1b:85:6f:ad:b4:38:f6:b5:8a:5a: f7:f7:2c:33:1e:14:b9:4e:18:60:c9:0e:6b:85:36:ae:ef:a3: 03:9f:4e:48:ac:7f:77:c6:0b:31:13:df:d1:d4:00:8f:16:94: ba:9d:ef:5c:62:d1:66:52:ad:51:b0:3d:00:19:1a:1a:d5:82: 4e:9b:cf:18:36:1e:2f:5e:18:da:f4:7f:81:14:98:36:27:ea: 7d:6f:cb:c8:aa:16:ae:4f:ad:fa:ec:90:0b:69:bf:d8:57:37: cd:ec:a1:0b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEG9OpvsdSFv0e/+tDLwl11Bv3/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA0MTcxOTAzMzRaFw0yNjA0MTgyMDQ4MzRaMDMxMTAvBgNV BAMTKDk1NTlDRUZEQTQ0NEZCMjRFOTY1RjUwRTMxQTJFRDRGRTAxNUI3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbM8S1/4WsLIEE1eyRSrzKODe qxbNKhXs0+M1AtZL4ONMqW0YjZk5WazRP2uvuDhvs67i4oXb295QM6G72lBYGHvP wQ0t0vLTHkBvaAE5H0BD0qAL25VjvekjSKoYv1zL662manZoHyz3wewIYPtQ30/k e4e0LzJYAUiAr+Et8b36DheMg6Bf0emQhCWJu0wtj3zMdD5Vwjw13fGJbi168fjA UDYgn7Ed+8VKBNEUJ9tR2STAPAggfWF5XTtzP0E8zckOE8HvYwZskfvWpLwRDt1E l0uib1bfof2VRraDqY1xYWXRJvzsDU+7A9/eYuQHKe6s1kRCy+mtYq9h+DvlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlVnO/aRE+yTpZfUOMaLtT+AVt2MwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX88L/LMoal2ZMYC8ZvX4 +WRQiyW2VW2NsvmuZ9/4ga8BoOlY+xPF5hCauXJIPEEXUe7YfhgDGQENA5Wu05zc YmAuWWuL6jzywh3JyF9UNB9s7i+k3chF69p5P3e+b42cuXo5vbKVx0L6KEZnqcs+ X9xIVQaV9aNRK61L1ygvKAn3piYAU7HBvB26Tp23E6ibltrI+zw2GZcbhW+ttDj2 tYpa9/csMx4UuU4YYMkOa4U2ru+jA59OSKx/d8YLMRPf0dQAjxaUup3vXGLRZlKt UbA9ABkaGtWCTpvPGDYeL14Y2vR/gRSYNifqfW/LyKoWrk+t+uyQC2m/2Fc3zeyh Cw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:17:15 2026 by rpki-client