$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: apiSERhXlnx6syesb2HgXaEaUw5OyaNcIvNRgbOe5eQ= Subject key identifier: 72:87:47:C3:FC:53:A6:6B:66:38:6D:51:62:58:61:15:DF:4C:D7:09 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 6CB1AFE73C7D01A32DC1FBEEE82FE668FA418F6A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 01DD Signing time: Fri 17 Apr 2026 06:31:11 +0000 Manifest this update: Fri 17 Apr 2026 06:26:11 +0000 Manifest next update: Sat 18 Apr 2026 06:36:11 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: BPJPmnLcyaAkQE8Zsb2ngQ0kIrEjPAq/r13c6QqSD/Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b1:af:e7:3c:7d:01:a3:2d:c1:fb:ee:e8:2f:e6:68:fa:41:8f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Apr 17 06:26:11 2026 GMT Not After : Apr 18 06:36:11 2026 GMT Subject: CN=728747C3FC53A66B66386D5162586115DF4CD709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:3c:0c:33:4b:f0:46:ff:63:d9:31:14:89: 67:ed:0f:73:25:d6:2a:10:66:63:cc:0b:d6:61:8a: 92:08:6d:16:4e:8c:9c:6f:96:91:7f:e8:96:a5:d2: 19:b2:93:54:62:6c:5c:ec:3d:8b:37:70:4e:2a:a5: e7:1d:f7:18:6a:32:8e:2e:0b:41:ff:09:fe:3f:37: 75:75:8c:57:ff:b2:4d:6b:43:d3:7b:9a:6a:32:4c: 67:bf:78:1b:38:67:1a:82:00:2d:7e:c7:1f:da:be: d7:34:24:ab:44:a3:f4:b6:6e:9b:0d:e2:0f:16:71: 30:29:f3:96:25:98:ae:3b:ec:13:40:97:a1:eb:7e: 10:de:02:fb:88:5f:f0:f1:04:6a:b2:f0:ce:20:3b: 3d:7a:86:49:d7:c1:41:36:8e:8f:64:40:b9:0e:e6: 13:fd:76:8f:76:ad:e4:e4:d7:87:70:a8:28:a5:79: 2d:37:a7:13:ae:54:22:90:c4:c2:6a:a9:1f:14:f8: 5f:69:0d:06:f3:c5:46:15:ef:e7:e0:7e:3a:53:4f: 6b:62:3d:a5:d5:6b:97:c4:ee:76:27:ae:24:63:8f: 7e:a3:01:80:0c:59:b3:5a:fc:67:34:77:17:6a:ed: 7b:9a:d1:19:35:dc:45:dc:06:54:e4:cd:bb:df:5e: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:47:C3:FC:53:A6:6B:66:38:6D:51:62:58:61:15:DF:4C:D7:09 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f7:19:09:1e:a6:dc:57:d5:d9:a9:41:c8:03:85:ec:a1:e8: 23:20:3d:d4:e5:43:05:26:e8:2d:63:2f:b1:1a:d2:78:cb:0e: ad:ad:e6:ae:69:58:fc:eb:1c:eb:b9:4b:f4:ef:66:ed:f5:ce: c0:11:d1:24:81:e9:be:84:a5:b8:a2:b3:4a:e5:3b:de:ab:60: 02:ce:37:10:48:99:a4:4e:c1:73:59:e9:cf:e1:63:bf:63:31: 7e:76:75:5d:a7:1b:57:bb:8e:a1:9c:f7:e4:e7:28:18:7b:d0: af:7c:20:bf:ff:d9:79:4c:fd:4b:8e:5f:8c:d8:a4:35:3b:25: 98:f8:17:6f:b6:9b:d5:a5:ab:46:de:04:d4:5b:33:ab:3f:2d: 12:7e:8e:46:60:bc:18:48:3f:f4:cd:d7:0c:83:0d:04:57:23: 90:fa:e1:c8:0b:09:63:b1:5a:a9:9f:e4:6d:30:57:1a:d5:b5: 68:01:fd:3b:76:07:e8:67:67:11:30:0a:42:72:21:f3:14:bc: 5e:35:5c:a6:f4:d9:bc:19:2f:bd:cb:a0:3d:8a:e7:e5:e2:be: e6:90:6c:0e:4a:40:48:e1:5b:e2:3e:c6:f0:f8:5b:69:af:f9: 46:c8:42:d6:18:8e:7e:3c:5a:e3:48:a6:9a:8e:c1:69:a9:bc: ce:98:83:eb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbLGv5zx9AaMtwfvu6C/maPpBj2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNjA0MTcwNjI2MTFaFw0yNjA0MTgwNjM2MTFaMDMxMTAvBgNV BAMTKDcyODc0N0MzRkM1M0E2NkI2NjM4NkQ1MTYyNTg2MTE1REY0Q0Q3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqjwMM0vwRv9j2TEUiWftD3Ml 1ioQZmPMC9ZhipIIbRZOjJxvlpF/6Jal0hmyk1RibFzsPYs3cE4qpecd9xhqMo4u C0H/Cf4/N3V1jFf/sk1rQ9N7mmoyTGe/eBs4ZxqCAC1+xx/avtc0JKtEo/S2bpsN 4g8WcTAp85YlmK477BNAl6HrfhDeAvuIX/DxBGqy8M4gOz16hknXwUE2jo9kQLkO 5hP9do92reTk14dwqCileS03pxOuVCKQxMJqqR8U+F9pDQbzxUYV7+fgfjpTT2ti PaXVa5fE7nYnriRjj36jAYAMWbNa/Gc0dxdq7Xua0Rk13EXcBlTkzbvfXnlVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcodHw/xTpmtmOG1RYlhhFd9M1wkwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn9xkJ HqbcV9XZqUHIA4XsoegjID3U5UMFJugtYy+xGtJ4yw6treauaVj86xzruUv072bt 9c7AEdEkgem+hKW4orNK5Tveq2ACzjcQSJmkTsFzWenP4WO/YzF+dnVdpxtXu46h nPfk5ygYe9CvfCC//9l5TP1Ljl+M2KQ1OyWY+BdvtpvVpatG3gTUWzOrPy0Sfo5G YLwYSD/0zdcMgw0EVyOQ+uHICwljsVqpn+RtMFca1bVoAf07dgfoZ2cRMApCciHz FLxeNVym9Nm8GS+9y6A9iufl4r7mkGwOSkBI4VviPsbw+Ftpr/lGyELWGI5+PFrj SKaajsFpqbzOmIPr -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:42 2026 by rpki-client