$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft File: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft (raw, json) Hash identifier: JyWDA0LQZjuAedseo+NgMRFNqnj5NM/+2zK2R6iTVpo= Subject key identifier: 81:AE:BE:93:F4:88:FD:24:29:31:DA:6B:3F:FF:7F:DE:FE:E6:17:29 Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5 Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5 Certificate serial: 7E3CD1DF6C8C9E9F91B76DB18A2513FE2F5D8AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft Manifest number: 29 Signing time: Sun 01 Mar 2026 18:17:18 +0000 Manifest this update: Sun 01 Mar 2026 18:12:18 +0000 Manifest next update: Mon 02 Mar 2026 20:23:18 +0000 Files and hashes: 1: 35312e3134362e31362e302f32302d3234203d3e203439393135.roa (hash: TS2xXKCJjTJMM7MbMW5PTMgFMJiW1lKpkaKNNwf0Wt4=) 2: 35312e3134362e34342e302f32322d3234203d3e2032383536.roa (hash: Fm0VGPMT7OyVH49nbGy50G/k+GnUmbeL0jUau3oSyZU=) 3: 35312e3134362e35322e302f32322d3234203d3e20383334.roa (hash: gKgw0ieSnSKGZDGei+xo9/AjjLmOmoiXS1EPSGjOr2k=) 4: 35312e3134362e34302e302f32322d3234203d3e2032383536.roa (hash: Jppmg/bdiN25OvyihMbxBslMNG6unEkym9fKbL37gCU=) 5: 35312e3134362e302e302f32302d3234203d3e203439393135.roa (hash: OjEGFZQmbBAN3cHHsCsOKc8nmkG0JW4/vQpwz8dCtk8=) 6: 35312e3134362e3136302e302f31392d3234203d3e20383334.roa (hash: UrvBzAsOmpyA7zI1nGsCuhKGn7xlajcmk9utxnxL10U=) 7: 35312e3134362e3133362e302f32322d3234203d3e2032383536.roa (hash: w7Qumk13OqTGSz/JOE1TFdrIJ1FhztxHUwBZLt5Mkaw=) 8: 35312e3134362e36342e302f31382d3234203d3e20323135393335.roa (hash: B7EwR7GIEg4Sqvhr+7ez1PNatWtvwrkk0y4j5GjDIRw=) 9: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl (hash: h6Elkpw11mb1/vNDOXieqRorRnzyI9vd+AnFG4KAtVg=) 10: 35312e3134362e3139322e302f31382d3234203d3e20383334.roa (hash: J+RBCXar17//4RORCdvEk46wkGS6mSEbntY/NamDUx4=) 11: 35312e3134362e3132382e302f32322d3234203d3e2032383536.roa (hash: S4WyTuyU4+lKLsPjwGOnjPaHDx2xMIOOWLHuQuLor9c=) 12: 35312e3134362e3133322e302f32322d3234203d3e2032383536.roa (hash: PeO/7jWJzGhKZA9LIOwjF66yoGOoK88f3o8IqYDpg08=) 13: 35312e3134362e3134342e302f32302d3234203d3e20383334.roa (hash: pDQ3WR0jdLVstWBdKuQC4tyC3+04PI+4PjbzRvZdwNs=) 14: 35312e3134362e33362e302f32322d3234203d3e20383334.roa (hash: EdE6niYL2CAkD0ZWI6TeifgrdWOjWD6HOymbOtQ5sNE=) 15: 35312e3134362e3134302e302f32322d3234203d3e2032383536.roa (hash: Yb0HUrsXjACJboIEJxolEwQYMNUkR1sKrCTM+fj1/3k=) 16: 35312e3134362e36302e302f32322d3234203d3e2032383536.roa (hash: 8lv6Et0/N5O+2O7BYdJ/au9Py+C/PlV93AMgHlxH6o8=) 17: 35312e3134362e33322e302f32322d3232203d3e2035363530.roa (hash: EopTa59mEo3XjhjDzxi8lx3r4ivjlhsqLPVLMSPtel4=) 18: 35312e3134362e35362e302f32322d3234203d3e2032383536.roa (hash: ymWdKV48+k/3teW3fXiZiwqHV6TDZkNPL0x6bNg5op8=) 19: 35312e3134362e34382e302f32322d3232203d3e2035363530.roa (hash: yCYnj0CdZKu1L3em7LegUOQirjQsAXri/WyGskxx+3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3c:d1:df:6c:8c:9e:9f:91:b7:6d:b1:8a:25:13:fe:2f:5d:8a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5 Validity Not Before: Mar 1 18:12:18 2026 GMT Not After : Mar 2 20:23:18 2026 GMT Subject: CN=81AEBE93F488FD242931DA6B3FFF7FDEFEE61729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:d1:00:93:f7:36:91:e5:26:82:7d:29:fe: bf:66:57:15:e1:83:2c:58:a4:2f:12:53:cc:8b:26: 89:f8:23:3e:02:0c:71:00:19:b9:74:33:00:9d:9c: f6:47:fe:c9:6e:7b:8f:37:7b:fe:c0:7f:7c:c7:7a: b2:13:18:90:4a:71:6c:52:83:32:34:4e:70:2d:12: e7:7c:43:70:c4:df:ea:f0:a0:0b:d2:5c:5f:37:07: 09:27:8c:42:67:43:4f:43:11:34:8b:9f:07:67:d4: 3d:92:07:1e:2e:0b:74:a6:cc:14:c6:74:4e:e5:83: ab:a1:76:e5:5a:c1:30:eb:d2:70:aa:d9:04:2f:67: 30:1a:61:f6:3a:11:e0:7e:42:9c:22:f9:d3:06:fe: c5:80:62:d7:e6:61:d3:66:70:b0:ff:e2:16:45:76: f6:4e:c7:81:e2:32:67:19:ab:05:2e:02:9a:3e:30: e9:e4:0d:26:40:4e:70:b0:57:c1:c6:01:ac:2b:ad: b7:d1:8c:58:d2:df:53:28:b7:bb:5c:75:ee:37:86: 1c:22:78:1a:fe:b3:2d:ab:eb:b6:22:69:4f:6a:70: f3:21:f7:fa:07:27:87:47:ec:6d:5c:7a:ff:1d:56: 03:fc:a8:aa:65:92:73:30:0f:ae:d0:28:77:63:43: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:BE:93:F4:88:FD:24:29:31:DA:6B:3F:FF:7F:DE:FE:E6:17:29 X509v3 Authority Key Identifier: keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:82:6c:93:65:9d:6d:d2:cd:57:1f:c2:ed:32:45:5b:ee:95: 6c:63:93:63:f2:c6:b5:58:15:a6:d5:c1:2c:6d:f3:51:17:8a: 3f:98:96:50:65:0d:c4:ee:91:fc:d5:20:d3:3f:4e:4c:f3:bd: b1:62:1f:60:e4:e7:2a:20:bd:b0:47:27:7a:73:9f:1f:ed:bd: d7:64:1d:b6:a5:d8:e1:79:c2:5f:28:22:2b:cd:0e:35:be:51: c0:6b:9c:0e:b1:fb:76:1a:d4:8d:e9:60:51:b0:22:0b:ec:2c: 82:73:32:82:58:fa:b7:01:5e:3c:0c:82:e2:a9:e3:ad:e2:67: 05:16:5a:64:ec:f4:e3:f6:fd:7a:b9:c6:3a:ab:12:d9:7a:82: 66:12:91:f4:12:fd:0c:2f:67:7e:a0:2d:8a:9c:21:24:e7:1f: 56:ef:6d:f3:fa:0f:88:c8:2b:78:8d:7f:ef:af:26:3a:fe:ad: 72:5f:63:db:df:d2:8b:d1:2b:75:a4:26:3b:74:30:2d:b7:a2: 4f:1e:08:fd:d1:4d:ce:9b:36:dc:c1:a4:bf:07:2c:ea:3c:88: 7b:5c:2a:44:11:bc:16:8a:83:10:de:8a:c6:0b:78:94:05:af: e8:7a:51:88:12:8e:30:90:af:a4:a4:4e:59:3b:14:82:bf:8b: 76:5a:2f:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfjzR32yMnp+Rt22xiiUT/i9div0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk NjJiM2RhNTAeFw0yNjAzMDExODEyMThaFw0yNjAzMDIyMDIzMThaMDMxMTAvBgNV BAMTKDgxQUVCRTkzRjQ4OEZEMjQyOTMxREE2QjNGRkY3RkRFRkVFNjE3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiUtEAk/c2keUmgn0p/r9mVxXh gyxYpC8SU8yLJon4Iz4CDHEAGbl0MwCdnPZH/slue483e/7Af3zHerITGJBKcWxS gzI0TnAtEud8Q3DE3+rwoAvSXF83BwknjEJnQ09DETSLnwdn1D2SBx4uC3SmzBTG dE7lg6uhduVawTDr0nCq2QQvZzAaYfY6EeB+Qpwi+dMG/sWAYtfmYdNmcLD/4hZF dvZOx4HiMmcZqwUuApo+MOnkDSZATnCwV8HGAawrrbfRjFjS31Mot7tcde43hhwi eBr+sy2r67YiaU9qcPMh9/oHJ4dH7G1cev8dVgP8qKplknMwD67QKHdjQ5S1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUga6+k/SI/SQpMdprP/9/3v7mFykwHwYDVR0j BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ clBhVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NmU0YWM4Ni0x ODAzLTQ5NGQtOGE3Yi1jMDUxYTYzMTA3NTIvMC8wRTIwQ0NGNTA4M0E2M0I5RjU4 ODdFM0VBMzlEMDRFMkQ2MkIzREE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYJsk2WdbdLNVx/C7TJF W+6VbGOTY/LGtVgVptXBLG3zUReKP5iWUGUNxO6R/NUg0z9OTPO9sWIfYOTnKiC9 sEcnenOfH+2912QdtqXY4XnCXygiK80ONb5RwGucDrH7dhrUjelgUbAiC+wsgnMy glj6twFePAyC4qnjreJnBRZaZOz04/b9ernGOqsS2XqCZhKR9BL9DC9nfqAtipwh JOcfVu9t8/oPiMgreI1/768mOv6tcl9j29/Si9ErdaQmO3QwLbeiTx4I/dFNzps2 3MGkvwcs6jyIe1wqRBG8FoqDEN6Kxgt4lAWv6HpRiBKOMJCvpKROWTsUgr+Ldlov tw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:29:24 2026 by rpki-client