$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: +n4/Fr3jEFGWdpSyHTM5r+jKM2Mak5fLc8eaAe+uWOI= Subject key identifier: 7A:14:77:A7:A4:B0:3B:76:20:DE:AD:E0:5D:56:CD:2E:E9:CC:0B:0A Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 218C4F1A3543812B7933177F751C60AD8664049B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: D3 Signing time: Fri 17 Apr 2026 15:03:22 +0000 Manifest this update: Fri 17 Apr 2026 14:58:22 +0000 Manifest next update: Sat 18 Apr 2026 18:01:22 +0000 Files and hashes: 1: 326130363a313238333a383931363a3a2f34382d3438203d3e20323133343133.roa (hash: xUGvIyx/a5N+LcKm4jRlraXDt9i9y3juhfko91grU4U=) 2: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 3: 326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (hash: q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=) 4: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 5: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) 6: 326130363a313238333a383931373a3a2f34382d3438203d3e20323035333035.roa (hash: rhL38qg/W10yIpndI3LKqIuuEEEeF98B/XXYMapKGsI=) 7: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=) 8: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=) 9: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=) 10: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=) 11: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: 4289FvOf6BYdX+nWMIyGhhfvJScEZcyAHg+x2R/0GsI=) 12: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) 13: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) 14: 326130363a313238333a383931353a3a2f34382d3438203d3e20323034343634.roa (hash: VEluBfu+UVgZrxSe1UipoTLy1fiGHxv2QDcCVFCjUkc=) 15: 326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa (hash: VcVUsrYac0pzWJK2F7lpmFfvFDL2ZKG/uypN2LdY9f4=) 16: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8c:4f:1a:35:43:81:2b:79:33:17:7f:75:1c:60:ad:86:64:04:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Apr 17 14:58:22 2026 GMT Not After : Apr 18 18:01:22 2026 GMT Subject: CN=7A1477A7A4B03B7620DEADE05D56CD2EE9CC0B0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:50:d5:dd:73:c6:cd:17:37:7d:02:1e:f1: 55:48:32:a9:2e:8d:a3:60:83:84:de:66:ff:b3:15: e1:16:8e:44:d5:a7:22:74:16:3f:68:10:6e:4a:48: e6:cd:78:ce:c2:5b:3d:90:9a:24:1c:a8:3e:2b:84: 3c:86:85:91:c0:0e:a2:6d:bb:98:7f:94:43:d1:d1: 92:70:1d:02:84:b4:1e:2e:38:30:c1:82:a8:1b:8f: 1b:cb:f7:cd:b1:4a:7f:6e:e3:33:69:fb:53:61:56: b0:85:49:53:bd:6f:f3:3c:ca:39:5c:b9:a3:1d:1b: 64:cf:c2:4a:f0:f5:86:dc:23:19:76:87:bf:23:b9: bd:6a:8b:c1:1c:3e:04:0e:6d:c4:2d:8b:c0:9c:a3: d0:1b:6f:f1:42:5a:58:74:73:4b:4a:45:64:07:b5: 59:86:9d:6f:07:0b:0e:b2:6d:25:2e:ce:9d:b7:a1: 6a:41:84:f5:ec:0d:be:a8:e1:6a:d8:fa:7a:a8:33: bd:e4:e1:0a:b0:41:68:0c:89:89:61:cd:f5:b5:39: 4e:27:57:5b:b1:c8:7e:41:90:ca:42:3e:1d:91:44: b9:fe:7d:17:72:85:ca:ab:c9:7c:d1:85:c9:e9:3f: e3:43:59:1f:24:12:df:b4:fe:6a:0d:a2:6c:26:24: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:77:A7:A4:B0:3B:76:20:DE:AD:E0:5D:56:CD:2E:E9:CC:0B:0A X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:11:b1:03:e6:95:e9:ee:31:87:bd:5e:79:50:33:0c:f4:41: 2e:5b:0c:91:71:62:30:cb:27:c7:eb:21:50:5f:4a:0c:d8:9a: 1a:a2:e8:49:38:f9:c5:2f:80:99:14:6f:e2:9f:f6:8e:5f:55: d9:55:39:97:96:14:15:79:21:3c:97:81:32:25:65:ac:60:26: 08:c7:7c:94:50:d2:01:e3:54:7c:4e:21:cb:0b:dd:98:f2:ea: ad:cb:85:c0:3f:6a:1d:7a:3b:63:12:84:98:d2:1c:a3:73:09: db:45:11:67:5f:c7:dd:b1:ae:1e:0e:59:2a:47:b2:c0:5f:64: 33:e0:5e:56:c4:3a:a3:14:b0:79:07:5a:33:4b:51:bc:50:48: 1b:90:ee:f7:f2:20:5d:18:88:75:11:28:6f:8c:8a:e9:3e:aa: 04:df:88:9d:8e:d9:01:57:ae:2f:4b:43:db:7f:78:d9:fb:83: ec:8e:ac:ba:2a:f4:0a:09:9d:dd:41:4d:d6:5c:e3:c6:c5:39: c3:28:a9:d5:26:71:c3:6a:5a:04:10:cd:d9:3a:f6:98:b0:02: 12:7f:3e:b8:22:a3:aa:1d:cd:d3:43:3e:1c:7d:0e:9c:05:df: 21:2b:73:0e:b6:b6:18:6c:49:e6:38:99:9a:d8:46:52:b8:93: c0:c7:58:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIYxPGjVDgSt5Mxd/dRxgrYZkBJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNjA0MTcxNDU4MjJaFw0yNjA0MTgxODAxMjJaMDMxMTAvBgNV BAMTKDdBMTQ3N0E3QTRCMDNCNzYyMERFQURFMDVENTZDRDJFRTlDQzBCMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NVDV3XPGzRc3fQIe8VVIMqku jaNgg4TeZv+zFeEWjkTVpyJ0Fj9oEG5KSObNeM7CWz2QmiQcqD4rhDyGhZHADqJt u5h/lEPR0ZJwHQKEtB4uODDBgqgbjxvL982xSn9u4zNp+1NhVrCFSVO9b/M8yjlc uaMdG2TPwkrw9YbcIxl2h78jub1qi8EcPgQObcQti8Cco9Abb/FCWlh0c0tKRWQH tVmGnW8HCw6ybSUuzp23oWpBhPXsDb6o4WrY+nqoM73k4QqwQWgMiYlhzfW1OU4n V1uxyH5BkMpCPh2RRLn+fRdyhcqryXzRhcnpP+NDWR8kEt+0/moNomwmJMtRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUehR3p6SwO3Yg3q3gXVbNLunMCwowHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+EbED 5pXp7jGHvV55UDMM9EEuWwyRcWIwyyfH6yFQX0oM2JoaouhJOPnFL4CZFG/in/aO X1XZVTmXlhQVeSE8l4EyJWWsYCYIx3yUUNIB41R8TiHLC92Y8uqty4XAP2odejtj EoSY0hyjcwnbRRFnX8fdsa4eDlkqR7LAX2Qz4F5WxDqjFLB5B1ozS1G8UEgbkO73 8iBdGIh1EShvjIrpPqoE34idjtkBV64vS0Pbf3jZ+4Psjqy6KvQKCZ3dQU3WXOPG xTnDKKnVJnHDaloEEM3ZOvaYsAISfz64IqOqHc3TQz4cfQ6cBd8hK3MOtrYYbEnm OJma2EZSuJPAx1iw -----END CERTIFICATE-----Generated at Fri Apr 17 18:16:02 2026 by rpki-client