$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft File: 15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft (raw, json) Hash identifier: DdgGMUOyBBkoXSig7SpFTgPA+TdMUBfVOIUEZC+R+Ss= Subject key identifier: CE:DB:C2:EF:B0:B7:A9:A6:0D:02:5B:89:6B:84:0B:85:33:98:EC:76 Authority key identifier: 15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58 Certificate issuer: /CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358 Certificate serial: 488C14EAC29FA58D2DDA24F1C5E6721BA3FD4B1E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft Manifest number: 20 Signing time: Thu 16 Apr 2026 18:01:20 +0000 Manifest this update: Thu 16 Apr 2026 17:56:20 +0000 Manifest next update: Fri 17 Apr 2026 18:09:20 +0000 Files and hashes: 1: 15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl (hash: 0TqZj7oLdotNXe1X/2m8SPzRN6J8hs6hLG32DjVT0oc=) 2: 326130613a363034373a33303a3a2f34342d3438203d3e20323031333932.roa (hash: 2mdG1P4v/LKjvD2gGuMun9o6h5ipmMGj4ZtK7zjcNNw=) 3: 326130613a363034373a31303a3a2f34342d3438203d3e20323038363934.roa (hash: l+O+NUBh2MF2w9Gr9oh96B2oYvdXivhSEwDow9u3WJs=) 4: 326130613a363034373a32303a3a2f34342d3438203d3e20323135363835.roa (hash: HxKFgIaqkt5kQ++XijdGNjwJiU02ZWb1S5e5ZZU8cWA=) 5: 3230362e3234352e3136362e302f32342d3234203d3e20323031333932.roa (hash: sW4GJC3tSqXMt7INqjU6PqY9hi8nZi/2kkXSaTLZp5o=) 6: 326130613a363034373a3a2f34382d3438203d3e20323031333932.roa (hash: Ro2QKqzgg4Vq3t5qzJYvp1IzdP4uN7u/L6YXMcpOinc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8c:14:ea:c2:9f:a5:8d:2d:da:24:f1:c5:e6:72:1b:a3:fd:4b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358 Validity Not Before: Apr 16 17:56:20 2026 GMT Not After : Apr 17 18:09:20 2026 GMT Subject: CN=CEDBC2EFB0B7A9A60D025B896B840B853398EC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:bb:49:6b:fc:78:23:3a:1a:18:d4:e6:81: 9d:93:c6:a4:bb:3d:ac:e6:12:2a:79:99:ed:31:ab: a2:a5:c3:fb:65:ed:b1:d4:1d:e5:b4:f2:96:42:c0: 15:05:f5:09:15:ab:8c:3e:7b:0d:f1:f0:e1:58:9e: 0a:0f:71:13:2d:04:29:32:e6:94:69:88:86:3b:14: 5c:51:4f:dc:c3:3e:f0:43:42:9f:c9:03:e3:ce:69: fb:5b:30:71:93:e4:72:0f:c6:dd:73:c8:22:b2:f0: 4f:2c:51:4f:a2:c5:be:23:f7:c1:26:1e:e2:3f:f8: aa:46:4a:f3:64:42:99:a1:b3:c2:30:3b:3f:be:7b: 21:c7:69:0b:d4:7f:02:2f:fa:3b:58:54:d0:48:85: 45:c6:94:7d:e8:e8:22:bf:91:fe:cf:1c:f9:14:ff: f8:1b:c9:fd:38:5c:7a:19:6f:32:f5:c3:9d:79:9f: 7e:8d:a8:e0:8d:3c:c8:5e:14:4d:9f:7e:03:18:e5: a5:a2:9e:9f:ad:6a:ee:4c:07:9d:99:95:67:fb:78: 53:d1:59:8e:e9:5b:e3:be:c2:24:56:35:06:28:54: 07:85:a4:7c:2d:83:2c:76:55:63:2d:d8:81:80:e9: 17:25:9f:67:64:57:33:a5:17:e7:af:6b:6c:66:71: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:C2:EF:B0:B7:A9:A6:0D:02:5B:89:6B:84:0B:85:33:98:EC:76 X509v3 Authority Key Identifier: keyid:15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:32:7f:e5:02:21:87:c1:77:50:60:cf:57:bb:a3:8d:bb:18: ac:b8:f9:2a:bc:45:e8:b8:64:ac:ba:66:80:19:db:32:fd:31: 1c:50:5f:64:37:33:7c:8d:b3:69:2f:bc:e1:c6:87:67:c6:20: bd:73:f3:75:1a:c7:08:39:ce:44:65:a4:9b:fe:6e:eb:32:d4: e2:e1:d9:1b:7a:c1:2e:dc:a5:40:08:5d:03:66:a3:5f:5a:71: 8a:a9:53:e0:3e:2b:a3:4d:30:2b:68:ff:19:03:c7:bb:c4:a1: 94:84:6c:d4:da:b6:a4:fb:31:1a:a8:20:30:5d:15:e7:f8:c6: a4:94:ee:c6:55:0b:c0:f5:4f:0f:72:d9:98:d2:60:55:c9:75: 91:e5:f0:1e:5c:1a:17:dd:d1:65:d6:91:0f:3b:98:60:bd:10: 51:84:11:62:87:55:92:d2:a7:2f:03:42:ab:c3:1a:ad:04:06: 7a:ad:26:1a:64:99:74:01:27:2c:81:f1:6f:74:e4:d2:f2:c8: 9a:ed:98:34:2a:92:82:3e:13:aa:5d:2d:60:f6:1a:f3:fa:13: 54:a3:6f:23:da:f5:ad:65:4e:23:57:af:ff:b0:b8:2c:a5:40: d7:d3:99:0f:17:db:ac:e9:b0:4d:e0:b5:6c:f9:ad:98:48:09: 45:e0:63:da -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSIwU6sKfpY0t2iTxxeZyG6P9Sx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQz QzNCMjM1ODAeFw0yNjA0MTYxNzU2MjBaFw0yNjA0MTcxODA5MjBaMDMxMTAvBgNV BAMTKENFREJDMkVGQjBCN0E5QTYwRDAyNUI4OTZCODQwQjg1MzM5OEVDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYLtJa/x4IzoaGNTmgZ2TxqS7 PazmEip5me0xq6Klw/tl7bHUHeW08pZCwBUF9QkVq4w+ew3x8OFYngoPcRMtBCky 5pRpiIY7FFxRT9zDPvBDQp/JA+POaftbMHGT5HIPxt1zyCKy8E8sUU+ixb4j98Em HuI/+KpGSvNkQpmhs8IwOz++eyHHaQvUfwIv+jtYVNBIhUXGlH3o6CK/kf7PHPkU //gbyf04XHoZbzL1w515n36NqOCNPMheFE2ffgMY5aWinp+tau5MB52ZlWf7eFPR WY7pW+O+wiRWNQYoVAeFpHwtgyx2VWMt2IGA6Rcln2dkVzOlF+eva2xmcW4ZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUztvC77C3qaYNAluJa4QLhTOY7HYwHwYDVR0j BBgwFoAUFcXrbBWnMq3DGxXPep8P5Dw7I1gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjJkNjFjZTMtZTA5MS00MGYwLTkyZWQtZDlmMDFjOTRh ZmQxLzEvMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQzQzNCMjM1OC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMTVDNUVCNkMxNUE3MzJBREMzMUIxNUNGN0E5RjBGRTQzQzNC MjM1OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iMmQ2MWNlMy1l MDkxLTQwZjAtOTJlZC1kOWYwMWM5NGFmZDEvMS8xNUM1RUI2QzE1QTczMkFEQzMx QjE1Q0Y3QTlGMEZFNDNDM0IyMzU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDJ/5QIhh8F3UGDPV7uj jbsYrLj5KrxF6LhkrLpmgBnbMv0xHFBfZDczfI2zaS+84caHZ8YgvXPzdRrHCDnO RGWkm/5u6zLU4uHZG3rBLtylQAhdA2ajX1pxiqlT4D4ro00wK2j/GQPHu8ShlIRs 1Nq2pPsxGqggMF0V5/jGpJTuxlULwPVPD3LZmNJgVcl1keXwHlwaF93RZdaRDzuY YL0QUYQRYodVktKnLwNCq8MarQQGeq0mGmSZdAEnLIHxb3Tk0vLImu2YNCqSgj4T ql0tYPYa8/oTVKNvI9r1rWVOI1ev/7C4LKVA19OZDxfbrOmwTeC1bPmtmEgJReBj 2g== -----END CERTIFICATE-----Generated at Fri Apr 17 04:35:25 2026 by rpki-client