$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: Ffri3VngZr01ykhzgqNS5JuV2AiyqSzxYIC0BhUJn3s= Subject key identifier: 33:8D:07:DC:66:83:17:2E:49:2B:D5:8D:E1:73:5C:EE:A4:02:19:B1 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 3D520E2276D662CE64C076E9C122719769D22A38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0664 Signing time: Fri 17 Apr 2026 02:34:42 +0000 Manifest this update: Fri 17 Apr 2026 02:29:42 +0000 Manifest next update: Sat 18 Apr 2026 05:28:42 +0000 Files and hashes: 1: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 2: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=) 3: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 4: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=) 5: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 6: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: aKJuspkUV+AJxSPvqC3047Sx3yY62cyi/BsTW2xqSko=) 7: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=) 8: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 9: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=) 10: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=) 11: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=) 12: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=) 13: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=) 14: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 15: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=) 16: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=) 17: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=) 18: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 19: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=) 20: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=) 21: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=) 22: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:52:0e:22:76:d6:62:ce:64:c0:76:e9:c1:22:71:97:69:d2:2a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Apr 17 02:29:42 2026 GMT Not After : Apr 18 05:28:42 2026 GMT Subject: CN=338D07DC6683172E492BD58DE1735CEEA40219B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:0a:df:25:f7:f0:68:af:9f:84:8b:9c:61: 15:c1:28:f9:92:86:0c:ec:24:f2:57:e2:12:90:00: 3a:75:89:cd:a4:fb:2c:81:40:ed:a0:54:5f:bb:1f: b0:43:f0:bd:2e:7e:6d:fc:3b:b4:8a:f8:c5:8c:07: 28:15:ea:d1:6e:f7:0f:2e:8d:77:57:d8:d1:42:ef: 6d:62:34:81:61:ee:ff:6f:3c:56:80:d2:98:fa:0c: a2:99:2f:2d:3a:33:f1:63:0b:9c:27:ca:c6:af:1f: 88:f1:26:42:16:33:c9:8e:a2:ee:61:07:f9:8d:fe: 24:8d:c8:45:55:7b:be:8c:8d:3c:23:0b:34:3d:6d: ee:58:aa:ad:e2:2d:e2:de:cd:26:4e:99:5a:ad:38: 5f:b1:ce:2c:4b:4c:8e:60:e7:74:41:4a:12:1a:cc: 35:40:fb:91:66:54:f1:e3:e8:b1:cb:17:87:69:13: 4f:f9:13:9b:9c:9d:a6:e0:7f:36:0a:89:54:e0:3d: 24:a0:f3:cc:de:69:48:2b:06:1d:65:24:61:ee:1b: 65:74:40:ac:9a:2d:16:b4:a5:59:4a:c1:ab:e6:60: 5c:47:24:0a:45:1e:8b:c0:cd:e7:72:23:2c:64:56: 71:55:1c:63:31:4e:88:e0:fc:66:c5:af:4e:54:60: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:07:DC:66:83:17:2E:49:2B:D5:8D:E1:73:5C:EE:A4:02:19:B1 X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:5b:b9:bb:9a:b4:2d:1c:5f:e5:28:89:ed:69:95:63:de: b6:42:01:2b:57:89:08:ab:f8:ea:1f:a7:c1:3f:6e:08:d1:9f: 26:bf:1e:46:81:08:fd:6f:47:f1:53:80:e8:75:1c:39:55:7b: a1:60:38:54:73:56:a5:6e:d4:35:a9:be:05:4b:3f:0d:b8:10: ff:ef:8d:be:19:b0:dd:50:e3:69:78:11:c3:01:af:c0:a0:e4: c7:4b:77:f8:10:2d:62:52:ba:35:7d:f8:95:99:54:05:56:31: fb:dc:f9:3e:40:c4:d4:b0:ef:26:32:19:43:4a:65:ee:03:21: 32:cf:f5:3b:ee:04:f2:ce:73:1b:4e:1f:ac:42:ce:92:90:32: 8d:dd:43:c2:4c:34:75:34:81:3f:06:1c:e2:e8:cd:e7:22:98: b5:e8:ba:ae:43:60:ee:81:7a:1e:39:cb:27:43:2e:78:a7:87: 37:25:0d:c2:97:dc:32:07:32:bb:32:59:03:e6:10:8a:85:e4: a1:35:12:30:75:10:9b:4f:24:63:bf:43:c0:b3:58:91:2c:e6: 68:0a:dc:21:cc:2b:71:ba:42:f7:d2:0c:29:3f:e4:01:5e:2a: f5:f6:40:b3:6e:16:27:84:cb:e9:8d:31:7b:0c:be:f4:f1:6f: c2:e8:a8:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPVIOInbWYs5kwHbpwSJxl2nSKjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNjA0MTcwMjI5NDJaFw0yNjA0MTgwNTI4NDJaMDMxMTAvBgNV BAMTKDMzOEQwN0RDNjY4MzE3MkU0OTJCRDU4REUxNzM1Q0VFQTQwMjE5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzygrfJffwaK+fhIucYRXBKPmS hgzsJPJX4hKQADp1ic2k+yyBQO2gVF+7H7BD8L0ufm38O7SK+MWMBygV6tFu9w8u jXdX2NFC721iNIFh7v9vPFaA0pj6DKKZLy06M/FjC5wnysavH4jxJkIWM8mOou5h B/mN/iSNyEVVe76MjTwjCzQ9be5Yqq3iLeLezSZOmVqtOF+xzixLTI5g53RBShIa zDVA+5FmVPHj6LHLF4dpE0/5E5ucnabgfzYKiVTgPSSg88zeaUgrBh1lJGHuG2V0 QKyaLRa0pVlKwavmYFxHJApFHovAzedyIyxkVnFVHGMxTojg/GbFr05UYJwtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUM40H3GaDFy5JK9WN4XNc7qQCGbEwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhxbubuatC0cX+Uoie1p lWPetkIBK1eJCKv46h+nwT9uCNGfJr8eRoEI/W9H8VOA6HUcOVV7oWA4VHNWpW7U Nam+BUs/DbgQ/++Nvhmw3VDjaXgRwwGvwKDkx0t3+BAtYlK6NX34lZlUBVYx+9z5 PkDE1LDvJjIZQ0pl7gMhMs/1O+4E8s5zG04frELOkpAyjd1Dwkw0dTSBPwYc4ujN 5yKYtei6rkNg7oF6HjnLJ0MueKeHNyUNwpfcMgcyuzJZA+YQioXkoTUSMHUQm08k Y79DwLNYkSzmaArcIcwrcbpC99IMKT/kAV4q9fZAs24WJ4TL6Y0xewy+9PFvwuio 3g== -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:27 2026 by rpki-client