$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft File: 27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft (raw, json) Hash identifier: OMEHVM0T9Ki8w5lJ/34UPr4B7vtxXfEbgkmxPZU28vM= Subject key identifier: 87:BB:D4:FE:FB:9D:2A:6D:39:3D:7A:0F:02:CF:96:CB:DD:1E:43:5A Authority key identifier: 27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA Certificate issuer: /CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA Certificate serial: 3A3445E814A9558A0232FBBFCDCD7A96CB201F63 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft Manifest number: 3C Signing time: Tue 22 Sep 2026 10:16:56 +0000 Manifest this update: Tue 22 Sep 2026 10:11:56 +0000 Manifest next update: Wed 23 Sep 2026 11:53:56 +0000 Files and hashes: 1: 326131343a366634343a376666663a3a2f34382d3438203d3e20323139303135.roa (hash: FbM1x/znrbbVqbkVjBIenv9gkcVG9Fj3FzDmNjj2eeE=) 2: 27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl (hash: FOzstXiX+xPc0zUDs3yomtGqLTiQsQw0WVc1hENLtMQ=) 3: 326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa (hash: ukucwgJoXYc/O0Ui6Tyy+j7s2rLNjJ/2kwcrer+8l7k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 07:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:34:45:e8:14:a9:55:8a:02:32:fb:bf:cd:cd:7a:96:cb:20:1f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA Validity Not Before: Sep 22 10:11:56 2026 GMT Not After : Sep 23 11:53:56 2026 GMT Subject: CN=87BBD4FEFB9D2A6D393D7A0F02CF96CBDD1E435A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:99:d2:d5:67:2a:e9:87:af:9f:76:fb:cd: 4f:5a:ce:3b:ff:5e:cb:ab:46:74:55:4b:2e:9d:af: 45:a6:03:18:bc:3d:f7:a4:0e:e9:b9:c1:ab:5c:e4: 46:9a:4d:8d:42:e1:33:ea:f4:8a:2f:f1:c3:96:8c: fb:51:8a:e8:01:1f:ee:e2:79:fa:4d:b3:9f:b0:e5: d0:87:23:38:c4:06:96:1d:f6:38:c4:db:5b:be:c8: 59:4b:c7:0b:bd:df:b1:43:7e:2b:dc:9e:b7:36:7e: ef:ff:70:f0:de:7b:ba:1e:70:4f:1c:b3:e7:b2:33: 91:4e:e7:8a:9b:e2:15:e3:a4:76:2f:81:76:d6:47: d2:72:03:c7:c5:92:5c:5a:2d:30:04:46:f3:fa:df: 91:6b:e9:9b:c0:7b:de:8a:5c:7f:ce:14:ed:11:70: 96:8e:22:a9:f8:4d:15:7f:db:63:37:2e:c7:36:1a: 20:c6:ee:46:40:ce:88:97:35:03:24:43:9f:6a:33: c7:cc:7a:d1:45:ee:8a:e0:7e:89:50:ef:2c:ef:88: 8f:59:82:fb:da:2d:23:a9:26:b5:5a:d3:22:f2:28: 4d:cc:4c:41:03:ea:36:72:14:bd:3b:1f:fb:b6:b6: 50:2e:77:88:9b:e3:9b:63:77:d9:38:a3:1e:84:1f: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:D4:FE:FB:9D:2A:6D:39:3D:7A:0F:02:CF:96:CB:DD:1E:43:5A X509v3 Authority Key Identifier: keyid:27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:47:0d:97:7c:63:31:ab:a3:22:9b:da:be:2e:05:d8:30: 3a:91:5f:aa:12:07:94:7b:95:8c:44:fc:06:bc:a3:8f:15:38: f4:7e:de:45:4b:9c:cc:e7:c0:da:40:bf:cf:11:fd:9d:92:4d: 41:ad:06:cc:33:b7:25:0d:55:1f:ef:27:ff:93:c0:68:b6:2d: 2a:e8:4d:9b:ed:fc:fd:a6:ff:5d:0a:f0:b5:15:4f:59:c7:29: 2f:37:0d:d1:d8:d1:e3:34:26:bf:b5:38:e8:c2:f7:31:bc:dc: ce:64:0f:84:72:35:f5:77:ea:e6:2e:19:4f:55:a2:21:c4:aa: 8c:0c:ac:cc:c0:d9:54:23:d7:e9:7a:22:88:d2:7f:b6:01:de: ef:20:26:af:79:c8:8a:82:45:a7:3c:dc:ec:7e:4e:c1:dd:f1: 27:28:3d:62:91:be:9a:5f:2f:42:a2:5f:f8:71:ba:e2:f5:4c: 09:f6:4b:8a:45:d4:3c:6a:12:89:16:90:fe:26:b1:0a:bb:70: 75:d4:88:9d:95:a9:7b:f5:7f:5c:ab:5f:cb:cd:ed:c1:00:43: 12:2e:ac:56:e3:84:c4:a0:19:f9:9b:90:b7:4b:f2:03:83:40: b4:f2:50:06:bc:ee:0f:4f:82:bc:44:e1:61:b2:12:68:f7:e4: e6:27:e0:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOjRF6BSpVYoCMvu/zc16lssgH2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFQjc1RkE3RTk1MjcyQkJDRjFGQTQzMUI3NzA2QjAw RDAyRDFCQTAeFw0yNjA5MjIxMDExNTZaFw0yNjA5MjMxMTUzNTZaMDMxMTAvBgNV BAMTKDg3QkJENEZFRkI5RDJBNkQzOTNEN0EwRjAyQ0Y5NkNCREQxRTQzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fpnS1Wcq6Yevn3b7zU9azjv/ XsurRnRVSy6dr0WmAxi8PfekDum5watc5EaaTY1C4TPq9Iov8cOWjPtRiugBH+7i efpNs5+w5dCHIzjEBpYd9jjE21u+yFlLxwu937FDfivcnrc2fu//cPDee7oecE8c s+eyM5FO54qb4hXjpHYvgXbWR9JyA8fFklxaLTAERvP635Fr6ZvAe96KXH/OFO0R cJaOIqn4TRV/22M3Lsc2GiDG7kZAzoiXNQMkQ59qM8fMetFF7orgfolQ7yzviI9Z gvvaLSOpJrVa0yLyKE3MTEED6jZyFL07H/u2tlAud4ib45tjd9k4ox6EH7vPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUh7vU/vudKm05PXoPAs+Wy90eQ1owHwYDVR0j BBgwFoAUJ+t1+n6VJyu88fpDG3cGsA0C0bowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjA3YzA2YWMtMTlkYi00YzQwLThiOGQtOTVkNGYyZjUz NTI0LzEvMjdFQjc1RkE3RTk1MjcyQkJDRjFGQTQzMUI3NzA2QjAwRDAyRDFCQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8yN0VCNzVGQTdFOTUyNzJCQkNGMUZBNDMx Qjc3MDZCMDBEMDJEMUJBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IwN2MwNmFjLTE5ZGItNGM0MC04YjhkLTk1ZDRmMmY1MzUyNC8xLzI3RUI3NUZB N0U5NTI3MkJCQ0YxRkE0MzFCNzcwNkIwMEQwMkQxQkEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA63EcN l3xjMaujIpvavi4F2DA6kV+qEgeUe5WMRPwGvKOPFTj0ft5FS5zM58DaQL/PEf2d kk1BrQbMM7clDVUf7yf/k8Boti0q6E2b7fz9pv9dCvC1FU9ZxykvNw3R2NHjNCa/ tTjowvcxvNzOZA+EcjX1d+rmLhlPVaIhxKqMDKzMwNlUI9fpeiKI0n+2Ad7vICav eciKgkWnPNzsfk7B3fEnKD1ikb6aXy9Col/4cbri9UwJ9kuKRdQ8ahKJFpD+JrEK u3B11Iidlal79X9cq1/Lze3BAEMSLqxW44TEoBn5m5C3S/IDg0C08lAGvO4PT4K8 ROFhshJo9+TmJ+Br -----END CERTIFICATE-----Generated at Tue Sep 22 19:54:18 2026 by rpki-client