$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: dc5HW7W5UIkcW0vKGaXRNMcV58Rzw/5YF/nMmqdNnlE= Subject key identifier: 4E:66:FB:63:63:CC:08:70:DC:A3:E9:02:4F:7F:FA:55:A5:50:49:26 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 456E71F841319A3BB95B83F9AFB9908159B5C863 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 05AA Signing time: Sun 19 Apr 2026 12:34:45 +0000 Manifest this update: Sun 19 Apr 2026 12:29:45 +0000 Manifest next update: Mon 20 Apr 2026 15:40:45 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 1Fbyu59Djn0F9E7RYOVVo3Qs0DksinLKMiE3Cvi1Wds=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6e:71:f8:41:31:9a:3b:b9:5b:83:f9:af:b9:90:81:59:b5:c8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Apr 19 12:29:45 2026 GMT Not After : Apr 20 15:40:45 2026 GMT Subject: CN=4E66FB6363CC0870DCA3E9024F7FFA55A5504926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:8f:fb:5d:c9:58:87:ae:b9:95:3a:3b:96: 19:c1:40:1a:e7:cd:2a:87:24:39:b0:28:0f:ef:5b: 58:0a:7c:a4:ea:99:b9:58:a9:04:58:b1:bb:19:d9: ca:ae:b0:b3:52:14:11:4c:5b:6b:14:31:d7:38:d4: 90:cc:f5:6b:97:8f:fe:c8:35:f4:70:cf:fc:fc:65: 61:82:b8:d2:3e:2c:dd:35:10:95:2e:89:99:60:62: 70:63:f1:19:75:c2:6a:67:c9:7e:02:76:26:19:87: 39:9c:f5:56:38:2b:bf:70:d8:a2:ca:61:34:ec:17: 9c:3e:a4:4e:f8:96:30:64:d4:5f:ec:81:85:1c:e9: 2b:37:23:8c:4d:87:be:c7:38:83:2e:4f:ec:5a:62: a2:e6:b6:fa:8c:93:8d:de:d8:9a:6a:7f:d6:85:e0: 65:b4:e7:bc:19:f8:d0:1e:89:de:b2:d8:80:04:e0: d7:be:43:bd:cd:89:69:9c:5a:bc:93:5d:3e:23:d5: 3e:b8:18:78:1a:57:11:82:c6:1c:d1:31:24:79:ec: 67:2d:07:71:2b:62:f6:61:76:2f:2f:f8:8b:0b:00: e3:60:67:6d:82:ff:fb:f5:a7:42:ad:6a:b4:df:5a: a6:b7:18:e2:e5:f5:c3:6c:3a:97:c6:36:e1:dc:69: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:FB:63:63:CC:08:70:DC:A3:E9:02:4F:7F:FA:55:A5:50:49:26 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2d:8b:86:22:80:5d:a7:4c:9f:17:9d:e7:1c:7a:a5:42:3f: 2d:88:97:75:7b:ed:5b:0e:20:31:f5:b6:07:2b:89:90:60:53: 3c:6f:32:e2:23:83:d0:f1:85:d1:1a:21:f2:ae:03:37:20:d7: 25:0c:5d:97:6b:f9:3d:2d:2c:30:c2:7e:a5:9a:e2:4b:ae:25: ed:0f:88:48:bd:d8:be:45:f1:68:d7:8e:68:33:61:a9:d2:81: 74:cb:82:b0:7f:61:0b:87:36:ff:79:9e:2a:b6:24:16:0c:b4: 8e:f6:92:55:2e:66:59:e4:5c:56:a9:a0:4b:8f:22:af:fb:c8: 69:a9:df:b9:98:3d:c2:d8:2c:8c:34:de:82:45:fc:4c:22:1e: 53:d2:2b:07:9a:c8:f1:35:f8:28:2a:eb:fe:a0:37:14:81:7a: cc:52:e6:83:03:ae:21:26:b3:36:4a:80:01:2e:32:e9:21:b1: 76:5b:28:df:91:8c:a8:26:7c:8e:55:f1:7a:0f:38:46:5d:15: 56:b1:98:1b:db:ae:33:d8:34:5e:ed:eb:e6:50:1e:94:bb:12: a4:2f:5c:23:f3:39:0f:19:9a:5a:16:94:8f:a6:83:6c:8b:a2: 20:66:a7:b0:c5:36:a6:2d:5a:90:64:17:e4:ed:7b:23:e0:60: f1:e5:6c:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURW5x+EExmju5W4P5r7mQgVm1yGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNjA0MTkxMjI5NDVaFw0yNjA0MjAxNTQwNDVaMDMxMTAvBgNV BAMTKDRFNjZGQjYzNjNDQzA4NzBEQ0EzRTkwMjRGN0ZGQTU1QTU1MDQ5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBf4/7XclYh665lTo7lhnBQBrn zSqHJDmwKA/vW1gKfKTqmblYqQRYsbsZ2cqusLNSFBFMW2sUMdc41JDM9WuXj/7I NfRwz/z8ZWGCuNI+LN01EJUuiZlgYnBj8Rl1wmpnyX4CdiYZhzmc9VY4K79w2KLK YTTsF5w+pE74ljBk1F/sgYUc6Ss3I4xNh77HOIMuT+xaYqLmtvqMk43e2Jpqf9aF 4GW057wZ+NAeid6y2IAE4Ne+Q73NiWmcWryTXT4j1T64GHgaVxGCxhzRMSR57Gct B3ErYvZhdi8v+IsLAONgZ22C//v1p0KtarTfWqa3GOLl9cNsOpfGNuHcaShlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTmb7Y2PMCHDco+kCT3/6VaVQSSYwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0LYuG IoBdp0yfF53nHHqlQj8tiJd1e+1bDiAx9bYHK4mQYFM8bzLiI4PQ8YXRGiHyrgM3 INclDF2Xa/k9LSwwwn6lmuJLriXtD4hIvdi+RfFo145oM2Gp0oF0y4Kwf2ELhzb/ eZ4qtiQWDLSO9pJVLmZZ5FxWqaBLjyKv+8hpqd+5mD3C2CyMNN6CRfxMIh5T0isH msjxNfgoKuv+oDcUgXrMUuaDA64hJrM2SoABLjLpIbF2WyjfkYyoJnyOVfF6DzhG XRVWsZgb264z2DRe7evmUB6UuxKkL1wj8zkPGZpaFpSPpoNsi6IgZqewxTamLVqQ ZBfk7Xsj4GDx5WzO -----END CERTIFICATE-----Generated at Sun Apr 19 15:30:55 2026 by rpki-client