$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft File: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json) Hash identifier: tMo4ovStLMbwZoO98H1OPPrHtsASiljYHLf+NptBvsI= Subject key identifier: DD:B0:22:BB:0B:8A:EE:4E:F4:FB:46:73:9C:8A:14:D7:EC:FB:81:3C Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD Certificate issuer: /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Certificate serial: 3DF1349918701C591A0D5B43523FF3BBF8476D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft Manifest number: 0689 Signing time: Sun 20 Sep 2026 19:23:47 +0000 Manifest this update: Sun 20 Sep 2026 19:18:47 +0000 Manifest next update: Mon 21 Sep 2026 21:11:47 +0000 Files and hashes: 1: 323030313a3637383a313161303a3a2f34382d3438203d3e203531303139.roa (hash: WTZJrpZtSK56gi8FgUd2AbaB/s6bTUvq5ttS3fRGoxU=) 2: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: 9RpAQmtSXu4KJiV7gC5gG/qfyl/FvtRWn54/IjQpKLs=) 3: AS51019.asa (hash: Oaa1EvfqOHf6DhtSUIsxpjt+74z+nkVUgLI9NR9q+Vg=) 4: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: r78q080nc2WpQhIds9rxyP241oKMiWSxyFqoCT6mBrQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 21:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f1:34:99:18:70:1c:59:1a:0d:5b:43:52:3f:f3:bb:f8:47:6d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead Validity Not Before: Sep 20 19:18:47 2026 GMT Not After : Sep 21 21:11:47 2026 GMT Subject: CN=DDB022BB0B8AEE4EF4FB46739C8A14D7ECFB813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:68:13:56:99:6d:71:99:c5:38:30:a7:6c: bf:88:15:c8:43:27:bd:32:2a:49:4c:f0:6b:5b:b6: 3f:b2:14:99:04:aa:54:59:5c:6e:e3:37:47:4a:da: 7a:5e:63:f8:38:14:3a:8b:08:29:bb:d7:1d:22:ba: 3a:e6:9a:89:47:f0:22:b3:15:50:aa:c2:3b:1e:df: e6:59:57:0b:85:10:4a:3d:8c:9b:48:11:fb:4e:0f: a1:b3:62:11:26:43:71:2b:b3:18:c0:02:68:ba:c5: 51:b1:27:89:34:19:f0:bd:04:7c:98:f2:34:26:a5: e3:8f:fa:d5:ad:ee:5a:a1:4e:14:58:8a:89:57:ea: c3:5b:71:c4:35:bd:f0:e2:9b:26:38:9b:d6:57:89: 98:2b:8e:25:02:b3:d5:cd:9f:55:7b:22:64:3e:6c: 57:84:40:c5:3c:9a:2e:4e:53:b4:a3:94:93:3c:ed: d3:d8:f0:77:bc:e8:05:ce:56:30:85:bf:93:8c:d0: 69:dc:26:c7:d7:4e:97:7b:84:9d:5d:30:0d:af:0a: eb:7a:2a:fd:8e:5d:70:36:2d:eb:45:a3:f8:d3:c9: 48:96:e6:c9:c9:d2:a9:36:61:54:12:79:b8:6b:85: 88:46:9d:09:5f:96:91:88:6d:de:57:1e:f5:28:c2: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B0:22:BB:0B:8A:EE:4E:F4:FB:46:73:9C:8A:14:D7:EC:FB:81:3C X509v3 Authority Key Identifier: keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4e:fc:ad:00:91:66:ce:5e:71:8f:cf:c1:95:b6:78:2d:a2: 90:9f:c8:a1:93:74:5f:72:d3:0c:df:e7:16:9c:e9:38:6c:b1: 25:e8:12:da:1b:8c:0c:0d:69:8b:67:f5:a0:2c:17:87:f4:64: 3b:5d:4e:bf:7b:f5:7f:9b:0b:f2:33:9f:3c:15:23:9a:88:eb: 0c:34:72:2f:bc:0b:bc:a2:ee:6f:d5:31:d3:21:b8:14:e0:8e: 43:fc:79:6f:d5:3f:4d:87:04:a5:96:c3:99:aa:71:81:69:e9: 17:c8:04:30:0e:d4:a6:20:9f:44:3a:84:92:06:2a:49:8f:ee: d9:8b:ea:d9:7f:0b:e1:cf:ac:22:93:a8:dd:df:81:83:dc:20: 50:88:11:50:62:06:86:9a:cc:92:bc:d9:0d:4b:3a:f1:1d:c9: 97:21:8c:0f:b6:64:4b:22:58:3c:3d:08:da:fa:0f:19:33:d0: 87:2f:27:77:cd:6a:af:99:aa:16:e4:08:9f:dd:a2:b8:b4:97: 41:34:c2:b1:d6:23:f2:0c:e7:1c:a7:5c:39:5d:41:9f:d2:68: 9a:9b:85:e8:11:88:19:ad:15:7c:24:ed:a4:75:92:69:b6:6a: 0f:b6:9d:65:86:85:9e:64:78:08:62:0c:a3:17:57:b2:41:e6: 13:33:3d:41 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPfE0mRhwHFkaDVtDUj/zu/hHbZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz M2UwMmVhZDAeFw0yNjA5MjAxOTE4NDdaFw0yNjA5MjEyMTExNDdaMDMxMTAvBgNV BAMTKEREQjAyMkJCMEI4QUVFNEVGNEZCNDY3MzlDOEExNEQ3RUNGQjgxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrmgTVpltcZnFODCnbL+IFchD J70yKklM8Gtbtj+yFJkEqlRZXG7jN0dK2npeY/g4FDqLCCm71x0iujrmmolH8CKz FVCqwjse3+ZZVwuFEEo9jJtIEftOD6GzYhEmQ3ErsxjAAmi6xVGxJ4k0GfC9BHyY 8jQmpeOP+tWt7lqhThRYiolX6sNbccQ1vfDimyY4m9ZXiZgrjiUCs9XNn1V7ImQ+ bFeEQMU8mi5OU7SjlJM87dPY8He86AXOVjCFv5OM0GncJsfXTpd7hJ1dMA2vCut6 Kv2OXXA2LetFo/jTyUiW5snJ0qk2YVQSebhrhYhGnQlflpGIbd5XHvUowhSXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3bAiuwuK7k70+0ZznIoU1+z7gTwwHwYDVR0j BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00 MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2 NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqk78rQCRZs5ecY/PwZW2 eC2ikJ/IoZN0X3LTDN/nFpzpOGyxJegS2huMDA1pi2f1oCwXh/RkO11Ov3v1f5sL 8jOfPBUjmojrDDRyL7wLvKLub9Ux0yG4FOCOQ/x5b9U/TYcEpZbDmapxgWnpF8gE MA7UpiCfRDqEkgYqSY/u2Yvq2X8L4c+sIpOo3d+Bg9wgUIgRUGIGhprMkrzZDUs6 8R3JlyGMD7ZkSyJYPD0I2voPGTPQhy8nd81qr5mqFuQIn92iuLSXQTTCsdYj8gzn HKdcOV1Bn9JompuF6BGIGa0VfCTtpHWSabZqD7adZYaFnmR4CGIMoxdXskHmEzM9 QQ== -----END CERTIFICATE-----Generated at Mon Sep 21 11:06:40 2026 by rpki-client