$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: lqEBQTRqbYKsIAYDRcb7jAnt0f3/kEPnRO2EOgPHCaA= Subject key identifier: 7C:D4:F5:B2:7A:CD:62:91:D3:3D:E1:22:1E:F8:17:31:98:61:27:2D Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 2B5A7D6EC2DF3543FCDC5B4A9ABFBCAC11F9918D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 0241 Signing time: Fri 17 Apr 2026 06:19:42 +0000 Manifest this update: Fri 17 Apr 2026 06:14:42 +0000 Manifest next update: Sat 18 Apr 2026 07:55:42 +0000 Files and hashes: 1: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: wHwcwoFIrN2jLP/C8OzdoSzmdobOAFysYNlbWgxelzw=) 2: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) 3: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 4: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 5: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 6: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: Jfl9MtCtdNw1mrRGZBgVg/U1lyi7RfYys6AXOlFxdNE=) 7: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 8: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 9: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: b86TJ/eicDu3L39UHlXUFvq/1qF9nZUOZYH3MsfWUIw=) 10: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 11: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 12: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 13: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 14: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 15: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:5a:7d:6e:c2:df:35:43:fc:dc:5b:4a:9a:bf:bc:ac:11:f9:91:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Apr 17 06:14:42 2026 GMT Not After : Apr 18 07:55:42 2026 GMT Subject: CN=7CD4F5B27ACD6291D33DE1221EF817319861272D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e8:bd:ed:f9:49:24:84:42:28:c3:53:49:c1: 07:99:78:b0:4b:48:cb:f6:df:ed:bb:a0:52:a1:34: b6:21:34:6d:a0:3c:e7:1a:3d:99:3e:77:cb:4f:28: f5:88:28:53:2d:58:54:68:95:e0:d8:62:ce:8a:ef: 17:e0:10:fd:bf:af:a5:52:dd:e6:84:08:a3:a1:98: 4d:83:ac:a5:f8:e1:37:31:7e:89:a7:86:00:ee:c5: ba:d4:91:1d:d9:12:8f:59:ad:1c:64:32:65:91:1e: 52:a4:3f:61:7a:9f:97:d9:2c:4a:24:9b:53:46:b8: 3a:d6:00:58:2d:94:a3:ac:75:98:9c:dc:35:10:21: 5a:ad:bc:c9:85:a0:d3:2c:69:85:46:17:a0:9a:b8: 3a:eb:0d:44:fe:75:5c:c0:32:97:87:68:60:d7:a8: bb:bd:9f:7c:88:d5:00:e0:15:7f:74:e7:dc:86:1b: d0:d3:51:3a:0f:77:b6:6b:8d:12:8c:cd:fd:b5:9e: 72:f3:66:d9:d0:9a:66:51:b5:d9:e6:c7:cf:3c:a1: d4:7a:4d:61:31:2a:54:63:a2:03:6c:ba:be:c9:6e: ab:3e:12:7b:3b:67:11:d3:46:04:5e:48:8d:30:71: f9:03:e3:d1:4a:e8:5b:64:83:75:e9:aa:7a:6b:d1: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D4:F5:B2:7A:CD:62:91:D3:3D:E1:22:1E:F8:17:31:98:61:27:2D X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:ff:0b:b1:d6:4e:4d:43:f7:b5:29:78:db:da:ed:d5:fe: ba:4d:ef:6c:47:60:0d:68:32:19:93:30:89:d0:22:46:ab:8d: 52:be:c6:bb:e7:97:a0:d4:20:b4:70:4c:79:16:bf:e2:40:41: f5:80:35:d1:ef:68:f8:34:75:95:f5:c7:98:4d:4e:56:3c:69: d2:15:f9:19:90:d6:6c:ed:8c:5a:7b:47:02:51:51:35:0b:93: a7:ca:95:f8:28:bb:74:b4:e9:7f:c3:9e:c7:dd:9e:cd:b0:f3: 3c:f4:51:37:e6:fa:ca:93:94:53:99:74:ed:1a:c0:f0:f9:2f: dd:11:73:f5:6b:7a:4e:94:e6:db:23:66:9a:34:01:f6:38:31: df:ce:7b:e8:f4:e2:55:64:a3:01:64:30:e9:8e:ee:e7:fa:fe: 2d:6c:f9:f3:8a:9d:e3:c6:de:5a:11:37:c0:a8:28:b2:cd:63: 5c:03:82:d8:d3:90:a0:2b:d4:91:06:b3:9e:20:36:45:d0:d0: 0c:e8:f3:84:2c:d1:00:64:30:f3:5f:a2:b4:ff:7b:d3:73:8c: 5c:6e:68:68:ea:ef:c5:c1:dd:e9:5e:d2:99:55:2e:d5:c8:89: af:27:fa:58:52:a6:a1:41:db:25:11:5e:f3:0b:34:65:f5:ea: 9c:9a:e1:95 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK1p9bsLfNUP83FtKmr+8rBH5kY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA0MTcwNjE0NDJaFw0yNjA0MTgwNzU1NDJaMDMxMTAvBgNV BAMTKDdDRDRGNUIyN0FDRDYyOTFEMzNERTEyMjFFRjgxNzMxOTg2MTI3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6L3t+UkkhEIow1NJwQeZeLBL SMv23+27oFKhNLYhNG2gPOcaPZk+d8tPKPWIKFMtWFRoleDYYs6K7xfgEP2/r6VS 3eaECKOhmE2DrKX44TcxfomnhgDuxbrUkR3ZEo9ZrRxkMmWRHlKkP2F6n5fZLEok m1NGuDrWAFgtlKOsdZic3DUQIVqtvMmFoNMsaYVGF6CauDrrDUT+dVzAMpeHaGDX qLu9n3yI1QDgFX9059yGG9DTUToPd7ZrjRKMzf21nnLzZtnQmmZRtdnmx888odR6 TWExKlRjogNsur7Jbqs+Ens7ZxHTRgReSI0wcfkD49FK6Ftkg3Xpqnpr0cw9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfNT1snrNYpHTPeEiHvgXMZhhJy0wHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYez/C7HWTk1D97UpeNva 7dX+uk3vbEdgDWgyGZMwidAiRquNUr7Gu+eXoNQgtHBMeRa/4kBB9YA10e9o+DR1 lfXHmE1OVjxp0hX5GZDWbO2MWntHAlFRNQuTp8qV+Ci7dLTpf8Oex92ezbDzPPRR N+b6ypOUU5l07RrA8Pkv3RFz9Wt6TpTm2yNmmjQB9jgx38576PTiVWSjAWQw6Y7u 5/r+LWz584qd48beWhE3wKgoss1jXAOC2NOQoCvUkQazniA2RdDQDOjzhCzRAGQw 81+itP9703OMXG5oaOrvxcHd6V7SmVUu1ciJryf6WFKmoUHbJRFe8ws0ZfXqnJrh lQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:13 2026 by rpki-client