$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft File: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft (raw, json) Hash identifier: Cm2xUEWIwVB7+0g7hSMe6EZsW0q9Li7kzWmUD1zPOag= Subject key identifier: 0D:EF:9B:4B:B1:3E:D0:A9:C2:C0:66:2E:2F:E8:2F:8C:B9:26:A5:B5 Authority key identifier: D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A Certificate issuer: /CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Certificate serial: 214AD69A99407F20B8E196F14D066669F429A31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft Manifest number: 0121 Signing time: Tue 16 Jun 2026 23:23:53 +0000 Manifest this update: Tue 16 Jun 2026 23:18:53 +0000 Manifest next update: Thu 18 Jun 2026 02:30:53 +0000 Files and hashes: 1: 3139332e3130362e36352e302f32342d3234203d3e203630383630.roa (hash: fqNRaoLtdl8BsIrfiu4PvyRr6AhuFheEHGA8K066NQ0=) 2: 3139332e3130362e36342e302f32342d3234203d3e203630383630.roa (hash: G3H4jbMqiw5DQSMLQn1fJ6uJtDMGKpTXzheKy4E+Q/Y=) 3: 3139332e3130362e36362e302f32342d3234203d3e203630383630.roa (hash: 6C7y+fYBD1VfGU5aOUC6YEoLG1qQiLffBU7c4ztP4Ek=) 4: D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl (hash: zN2eq8+MHcFoMNDa32nY9l1mEPqDZh9J0azTK3xzJv0=) 5: 3139332e3130362e36372e302f32342d3234203d3e203630383630.roa (hash: AR/qw0HziLw8HHdQriZPc+gMCtTCe+FKN/BuvJjupJg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Jun 2026 02:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4a:d6:9a:99:40:7f:20:b8:e1:96:f1:4d:06:66:69:f4:29:a3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18f31b98ed35ec23be81c3fffefd1a354dad96a Validity Not Before: Jun 16 23:18:53 2026 GMT Not After : Jun 18 02:30:53 2026 GMT Subject: CN=0DEF9B4BB13ED0A9C2C0662E2FE82F8CB926A5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:56:83:14:f1:d0:67:73:14:b2:67:ad:b3: d3:bc:b2:78:49:90:9b:af:06:45:25:ae:20:36:29: 80:e4:bb:c4:2d:d7:f8:d6:d5:98:e5:ec:ff:27:f8: 73:70:0d:24:71:68:78:ba:68:86:62:82:6b:99:c3: ee:61:ac:77:e6:2e:66:30:db:8b:b0:c9:2c:84:a8: 8e:97:65:30:16:58:51:2e:33:16:7a:63:fe:00:2a: 85:c1:c3:f5:22:05:0a:6a:6f:53:b5:0b:70:20:4c: bf:2f:f3:ca:b6:61:70:d0:bb:1c:3c:d2:31:92:a6: 55:4a:0b:4e:81:ec:d0:97:19:8e:5c:31:34:dd:fd: 2c:dd:d4:18:b1:8a:70:ec:a0:3f:f6:37:ec:91:8f: c5:af:4b:ee:98:34:13:ce:46:e5:81:36:39:37:64: 3b:24:95:77:ad:c6:99:e3:d2:01:dd:ce:e9:ac:fe: 83:d6:7a:b3:f8:74:e0:2a:d9:cb:10:8f:b8:b2:fa: b0:c9:2c:16:1d:0f:fd:91:1e:81:39:44:ed:83:91: fa:57:33:b2:bb:33:16:0f:57:5b:96:8a:39:ab:5d: 2c:f6:a0:ec:50:0a:bf:4f:18:4e:49:06:32:9f:87: e9:61:1f:0e:5b:e6:a7:33:32:7d:b4:9c:ca:a6:5d: 51:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EF:9B:4B:B1:3E:D0:A9:C2:C0:66:2E:2F:E8:2F:8C:B9:26:A5:B5 X509v3 Authority Key Identifier: keyid:D1:8F:31:B9:8E:D3:5E:C2:3B:E8:1C:3F:FF:EF:D1:A3:54:DA:D9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y8xuY7TXsI76Bw__-_Ro1Ta2Wo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/4/D18F31B98ED35EC23BE81C3FFFEFD1A354DAD96A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:af:2f:c0:31:ab:d7:78:cc:ab:43:33:b4:ae:4f:c4:84:5f: 29:47:b7:04:1c:33:72:47:0f:7e:6e:d1:52:ba:53:2e:76:b6: 0d:fe:65:aa:9c:2c:f1:f5:3b:6a:c7:30:9f:54:97:7b:e6:48: 70:5e:66:46:9f:89:f2:bd:5f:87:f8:36:39:5a:27:ed:f6:e3: a8:c7:5a:36:02:b0:43:de:54:c8:ed:64:bf:5d:89:c2:b7:36: 5b:89:ee:25:5c:4d:14:61:4b:0a:b9:69:a4:5b:75:cf:3b:45: 42:c6:d1:bd:06:e7:58:61:9a:53:88:e9:ad:bf:42:f1:b7:7f: ab:9b:bb:bb:c1:09:e5:99:5f:df:dc:3f:04:50:de:14:54:fc: 8a:fb:23:41:67:b1:8a:72:67:7b:dd:cb:fe:a3:aa:b9:ac:30: cc:be:7b:f8:2f:c5:e8:85:be:db:89:d5:32:45:dc:e7:7d:43: 77:83:b8:65:c9:0c:3e:26:c2:0f:bf:73:f5:4d:15:af:77:90: 7a:f1:dd:55:fa:6d:72:ca:c6:d7:3d:b8:62:b8:f7:a5:a2:ea: ce:95:3b:f1:44:94:79:a7:db:b5:1f:3f:2c:d1:05:26:25:c5: 6a:8b:b4:01:a5:9a:cf:3c:a5:8f:6f:0c:64:a1:e0:22:c8:68: e6:ed:a8:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIUrWmplAfyC44ZbxTQZmafQpox4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE4ZjMxYjk4ZWQzNWVjMjNiZTgxYzNmZmZlZmQxYTM1 NGRhZDk2YTAeFw0yNjA2MTYyMzE4NTNaFw0yNjA2MTgwMjMwNTNaMDMxMTAvBgNV BAMTKDBERUY5QjRCQjEzRUQwQTlDMkMwNjYyRTJGRTgyRjhDQjkyNkE1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vlaDFPHQZ3MUsmets9O8snhJ kJuvBkUlriA2KYDku8Qt1/jW1Zjl7P8n+HNwDSRxaHi6aIZigmuZw+5hrHfmLmYw 24uwySyEqI6XZTAWWFEuMxZ6Y/4AKoXBw/UiBQpqb1O1C3AgTL8v88q2YXDQuxw8 0jGSplVKC06B7NCXGY5cMTTd/Szd1BixinDsoD/2N+yRj8WvS+6YNBPORuWBNjk3 ZDsklXetxpnj0gHdzums/oPWerP4dOAq2csQj7iy+rDJLBYdD/2RHoE5RO2DkfpX M7K7MxYPV1uWijmrXSz2oOxQCr9PGE5JBjKfh+lhHw5b5qczMn20nMqmXVGRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDe+bS7E+0KnCwGYuL+gvjLkmpbUwHwYDVR0j BBgwFoAU0Y8xuY7TXsI76Bw//+/Ro1Ta2WowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzQvRDE4RjMxQjk4RUQzNUVDMjNCRTgxQzNGRkZFRkQxQTM1NERBRDk2QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBZOHh1WTdUWHNJNzZCd19fLV9SbzFU YTJXby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvNC9EMThGMzFCOThFRDM1RUMyM0JF ODFDM0ZGRkVGRDFBMzU0REFEOTZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlK8vwDGr13jMq0MztK5P xIRfKUe3BBwzckcPfm7RUrpTLna2Df5lqpws8fU7ascwn1SXe+ZIcF5mRp+J8r1f h/g2OVon7fbjqMdaNgKwQ95UyO1kv12Jwrc2W4nuJVxNFGFLCrlppFt1zztFQsbR vQbnWGGaU4jprb9C8bd/q5u7u8EJ5Zlf39w/BFDeFFT8ivsjQWexinJne93L/qOq uawwzL57+C/F6IW+24nVMkXc531Dd4O4ZckMPibCD79z9U0Vr3eQevHdVfptcsrG 1z24Yrj3paLqzpU78USUeafbtR8/LNEFJiXFaou0AaWazzylj28MZKHgIsho5u2o WA== -----END CERTIFICATE-----Generated at Wed Jun 17 11:01:44 2026 by rpki-client