$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft File: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft (raw, json) Hash identifier: 6+N02PCwN55XoJRCbY10v6s6JBovHo2b9a++/7mR0v8= Subject key identifier: E5:4D:17:E4:62:59:2D:BE:A7:F6:FF:AD:B4:62:93:85:ED:89:04:62 Authority key identifier: 6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 Certificate issuer: /CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Certificate serial: 79FCC56715241793CB48E201803EF3F8A5FEAD0E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft Manifest number: 4F Signing time: Mon 21 Sep 2026 14:04:20 +0000 Manifest this update: Mon 21 Sep 2026 13:59:20 +0000 Manifest next update: Wed 23 Sep 2026 04:28:20 +0000 Files and hashes: 1: 6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl (hash: s17xUCQDy/Z+eBMUBwjY0aTYvqS9zj0AB9jyuWtJIsI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fc:c5:67:15:24:17:93:cb:48:e2:01:80:3e:f3:f8:a5:fe:ad:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D120B6D851BD38C69E5D3599FD8C0FBF7314279 Validity Not Before: Sep 21 13:59:20 2026 GMT Not After : Sep 23 04:28:20 2026 GMT Subject: CN=E54D17E462592DBEA7F6FFADB4629385ED890462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:12:1a:87:c1:3d:d7:a7:3c:43:52:6b:26: 5c:af:c8:40:6d:e3:9a:ac:67:e0:04:e5:e1:d1:1e: 4f:32:cb:24:b4:2b:7c:cb:0a:ec:fc:fc:85:a7:2f: 4f:13:ef:af:d9:28:2a:78:e9:7c:b7:94:3c:29:6e: a5:40:f1:cf:c0:10:03:20:f5:01:49:de:b6:93:1e: 1e:5c:d1:aa:7d:9f:4f:61:48:71:59:aa:df:b2:34: e6:ad:e6:e6:12:7f:07:61:b9:51:43:c1:d0:da:77: 35:46:6b:b2:5d:c5:14:46:a6:37:03:84:76:36:77: 2e:b9:3b:84:02:6d:b4:0a:f3:b8:c0:13:5d:ef:08: 93:11:4a:b7:e2:04:ca:7b:14:77:14:78:97:e4:cf: 3b:0c:c6:22:7c:e3:6e:58:c9:84:35:9e:15:ad:1d: c6:ee:29:f6:a0:6e:f5:76:58:63:1a:96:2f:b9:f9: 6d:01:4a:1b:45:2b:f8:bf:af:d4:9b:37:70:6f:a9: 20:43:0a:bf:4a:3c:59:ac:b6:4b:73:6a:f6:75:a5: 66:21:7a:f4:9c:93:95:94:59:0c:38:ee:d6:1d:a4: 59:45:4e:99:34:fe:4d:e7:39:70:7a:9c:f1:25:bc: 7d:da:de:72:4e:ea:a0:23:2e:7a:22:f9:20:fd:59: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:17:E4:62:59:2D:BE:A7:F6:FF:AD:B4:62:93:85:ED:89:04:62 X509v3 Authority Key Identifier: keyid:6D:12:0B:6D:85:1B:D3:8C:69:E5:D3:59:9F:D8:C0:FB:F7:31:42:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/2/6D120B6D851BD38C69E5D3599FD8C0FBF7314279.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8d:8c:06:4e:72:1f:75:9e:56:f8:d9:9c:60:92:67:ce:ca: 49:e0:32:11:64:58:93:c9:51:87:5a:3c:f3:4d:1e:0f:7e:40: dd:06:c1:f5:5a:6b:c4:75:bf:0e:b3:84:9d:49:4c:8b:c9:f0: 89:b9:89:10:11:cf:90:74:7c:a3:12:7e:b3:d4:ae:40:ec:93: 74:da:f1:33:46:98:f4:41:aa:30:72:3b:f8:48:9d:15:ba:d5: b9:1c:bb:37:0d:e0:21:bc:9e:6b:0c:dc:67:bb:00:7e:b3:b6: 85:ba:a7:33:7d:ae:7e:e4:16:cb:23:57:ed:5b:66:17:b5:6b: 1b:47:e4:90:ab:fd:13:63:e4:20:b7:aa:df:65:9a:f6:c7:b9: 23:ec:c2:33:d3:5d:50:eb:93:9c:5a:c2:b9:d7:8b:13:4d:3c: 23:7a:0a:2e:7d:31:ef:df:78:98:81:a4:f9:f3:e2:e4:25:b4: be:c7:a1:b9:95:53:3f:88:c5:87:3a:82:8d:ad:24:e9:d6:2a: e9:a3:f0:70:3e:a6:f9:74:33:8b:4a:c9:a6:02:f6:a2:29:f5: 08:09:df:95:25:50:02:c3:4b:26:e4:64:76:ec:63:7d:d3:3c: 85:8b:b2:60:87:06:3d:24:ae:be:ae:da:00:66:a1:9f:a4:97: a6:23:57:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUefzFZxUkF5PLSOIBgD7z+KX+rQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJG NzMxNDI3OTAeFw0yNjA5MjExMzU5MjBaFw0yNjA5MjMwNDI4MjBaMDMxMTAvBgNV BAMTKEU1NEQxN0U0NjI1OTJEQkVBN0Y2RkZBREI0NjI5Mzg1RUQ4OTA0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPxIah8E916c8Q1JrJlyvyEBt 45qsZ+AE5eHRHk8yyyS0K3zLCuz8/IWnL08T76/ZKCp46Xy3lDwpbqVA8c/AEAMg 9QFJ3raTHh5c0ap9n09hSHFZqt+yNOat5uYSfwdhuVFDwdDadzVGa7JdxRRGpjcD hHY2dy65O4QCbbQK87jAE13vCJMRSrfiBMp7FHcUeJfkzzsMxiJ8425YyYQ1nhWt HcbuKfagbvV2WGMali+5+W0BShtFK/i/r9SbN3BvqSBDCr9KPFmstktzavZ1pWYh evSck5WUWQw47tYdpFlFTpk0/k3nOXB6nPElvH3a3nJO6qAjLnoi+SD9WaCZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5U0X5GJZLb6n9v+ttGKThe2JBGIwHwYDVR0j BBgwFoAUbRILbYUb04xp5dNZn9jA+/cxQnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTJlMjU3ZGYtOTkzMC00NGU2LTg2NmUtNDFhNDg5ODY1 MjMyLzIvNkQxMjBCNkQ4NTFCRDM4QzY5RTVEMzU5OUZEOEMwRkJGNzMxNDI3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82RDEyMEI2RDg1MUJEMzhDNjlFNUQzNTk5 RkQ4QzBGQkY3MzE0Mjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2EyZTI1N2RmLTk5MzAtNDRlNi04NjZlLTQxYTQ4OTg2NTIzMi8yLzZEMTIwQjZE ODUxQkQzOEM2OUU1RDM1OTlGRDhDMEZCRjczMTQyNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCejYwG TnIfdZ5W+NmcYJJnzspJ4DIRZFiTyVGHWjzzTR4PfkDdBsH1WmvEdb8Os4SdSUyL yfCJuYkQEc+QdHyjEn6z1K5A7JN02vEzRpj0Qaowcjv4SJ0VutW5HLs3DeAhvJ5r DNxnuwB+s7aFuqczfa5+5BbLI1ftW2YXtWsbR+SQq/0TY+Qgt6rfZZr2x7kj7MIz 011Q65OcWsK514sTTTwjegoufTHv33iYgaT58+LkJbS+x6G5lVM/iMWHOoKNrSTp 1irpo/BwPqb5dDOLSsmmAvaiKfUICd+VJVACw0sm5GR27GN90zyFi7JghwY9JK6+ rtoAZqGfpJemI1fv -----END CERTIFICATE-----Generated at Tue Sep 22 04:17:25 2026 by rpki-client