$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: XGv43rchBJQTo7RhYPAmraeo9ux9EoGm25FacG6woec= Subject key identifier: 89:89:68:CD:5C:BD:06:90:2B:F8:DE:0B:CC:EB:6C:48:C5:AD:A9:28 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 18A17004AB432566627A27F1486C49596E080D33 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 03EC Signing time: Thu 16 Apr 2026 14:37:13 +0000 Manifest this update: Thu 16 Apr 2026 14:32:13 +0000 Manifest next update: Fri 17 Apr 2026 17:42:13 +0000 Files and hashes: 1: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: L6360e0dpckiurx6Motc+6wugwu6Qb/aWhhHBcM//eg=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 16:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a1:70:04:ab:43:25:66:62:7a:27:f1:48:6c:49:59:6e:08:0d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Apr 16 14:32:13 2026 GMT Not After : Apr 17 17:42:13 2026 GMT Subject: CN=898968CD5CBD06902BF8DE0BCCEB6C48C5ADA928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:b0:6a:a4:5c:eb:1b:02:cc:0e:58:63:b3: 02:d6:ca:78:5e:d6:a1:0a:b5:06:55:4f:9c:51:0c: 3e:3a:86:8d:71:41:31:62:35:05:95:af:4c:0c:87: b0:cb:05:db:7c:35:ea:29:1d:3a:1a:4e:73:d9:49: a8:ef:09:24:4f:c6:16:47:28:b0:ee:8a:be:32:32: ae:95:30:a3:e8:a5:e2:a6:6b:38:75:ae:14:27:0f: 74:3f:4f:50:3a:14:14:05:93:30:ed:e2:45:6c:1b: ee:f3:98:b1:23:20:9a:de:22:9f:4e:c6:de:be:02: 4e:54:ac:9a:68:a7:76:37:63:dc:fe:53:84:e5:6f: 43:1f:e9:a1:ee:ea:54:a3:04:38:67:0d:fb:98:70: b0:bd:b7:f0:a5:3b:f0:a7:54:ae:67:6d:41:07:1b: d1:41:3b:ad:e6:10:c2:ca:20:c6:c5:5b:e3:22:c4: 2c:a7:76:44:87:5f:d6:a5:82:18:c1:23:93:eb:cd: ea:41:08:aa:70:c5:9f:f1:c8:f4:76:0d:59:9c:96: 33:31:fd:ca:d2:22:36:38:97:16:42:63:26:b9:39: b2:ce:ed:11:57:6b:03:b6:43:3f:63:02:1b:d7:77: 98:b0:04:6e:05:f4:ee:57:60:c8:29:c7:78:9c:e2: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:89:68:CD:5C:BD:06:90:2B:F8:DE:0B:CC:EB:6C:48:C5:AD:A9:28 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:cc:11:35:03:84:d0:41:d7:91:b3:57:f7:be:3d:9e:b0: 41:92:7b:9c:99:d8:4d:0a:cb:60:95:70:5d:8f:12:3d:1c:00: 10:0c:e1:8e:3d:70:92:85:79:db:ee:90:30:95:5c:79:7a:ee: 46:ca:fe:26:62:44:76:47:28:af:7f:3f:a5:d3:6b:d2:7e:87: a9:c4:6d:24:87:d9:6a:67:08:68:46:fc:5f:41:dd:f1:14:73: 28:05:36:86:81:6f:91:7f:10:75:ad:e5:7f:b9:93:c3:4d:7a: 20:f4:72:51:12:71:3c:82:bf:ac:b3:a0:1c:d3:7e:4d:c1:a5: 5c:0e:be:30:6e:aa:aa:c9:99:8c:82:26:9b:d9:ed:d6:eb:16: 92:6f:9f:c8:52:c8:8e:7b:83:26:ac:0a:07:c5:6e:75:a2:66: 14:4b:4e:54:5f:44:ca:46:17:fd:e3:bc:75:ca:5a:c9:65:8c: 40:25:91:c3:0e:95:90:25:5a:fd:44:73:b9:b5:fc:bc:a9:58: fb:d6:d0:e4:c8:4f:07:86:ee:3c:c7:93:39:a7:9b:7b:6d:03: b4:41:5b:c2:1c:a4:22:2b:48:92:9d:1c:7a:22:e2:be:01:99: 20:9f:0e:b1:b4:c0:45:d2:28:50:d4:0d:f0:d6:c3:c4:2e:f6: ee:6b:83:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGKFwBKtDJWZieifxSGxJWW4IDTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjA0MTYxNDMyMTNaFw0yNjA0MTcxNzQyMTNaMDMxMTAvBgNV BAMTKDg5ODk2OENENUNCRDA2OTAyQkY4REUwQkNDRUI2QzQ4QzVBREE5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUh7BqpFzrGwLMDlhjswLWynhe 1qEKtQZVT5xRDD46ho1xQTFiNQWVr0wMh7DLBdt8NeopHToaTnPZSajvCSRPxhZH KLDuir4yMq6VMKPopeKmazh1rhQnD3Q/T1A6FBQFkzDt4kVsG+7zmLEjIJreIp9O xt6+Ak5UrJpop3Y3Y9z+U4Tlb0Mf6aHu6lSjBDhnDfuYcLC9t/ClO/CnVK5nbUEH G9FBO63mEMLKIMbFW+MixCyndkSHX9alghjBI5PrzepBCKpwxZ/xyPR2DVmcljMx /crSIjY4lxZCYya5ObLO7RFXawO2Qz9jAhvXd5iwBG4F9O5XYMgpx3ic4nWjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiYlozVy9BpAr+N4LzOtsSMWtqSgwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDBMwR NQOE0EHXkbNX9749nrBBknucmdhNCstglXBdjxI9HAAQDOGOPXCShXnb7pAwlVx5 eu5Gyv4mYkR2Ryivfz+l02vSfoepxG0kh9lqZwhoRvxfQd3xFHMoBTaGgW+RfxB1 reV/uZPDTXog9HJREnE8gr+ss6Ac035NwaVcDr4wbqqqyZmMgiab2e3W6xaSb5/I UsiOe4MmrAoHxW51omYUS05UX0TKRhf947x1ylrJZYxAJZHDDpWQJVr9RHO5tfy8 qVj71tDkyE8Hhu48x5M5p5t7bQO0QVvCHKQiK0iSnRx6IuK+AZkgnw6xtMBF0ihQ 1A3w1sPELvbua4Oz -----END CERTIFICATE-----Generated at Fri Apr 17 04:56:40 2026 by rpki-client