$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: DOHBFmaX2NGsmTeIZKInPBy+ZY8KjVFFFSJPt7GToLw= Subject key identifier: 9E:2F:CC:F7:5E:24:9B:6D:12:12:1D:7E:0E:D4:DB:60:06:18:07:3E Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 08687192704E7275855509A8DF3258693BB8D926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 01D1 Signing time: Mon 02 Mar 2026 00:37:46 +0000 Manifest this update: Mon 02 Mar 2026 00:32:46 +0000 Manifest next update: Tue 03 Mar 2026 01:03:46 +0000 Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e203134363138.roa (hash: jmldibQztUu/uE9gn0LxmihLjuBeh91SIaguqVgH56w=) 2: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: LZdhd8babbehfkgcaQ2p0QEt4TultBt5ttf3MMRXRbI=) 3: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: NZmbB1AD2okfoNYoNRF6VSo9hkwhlpFlsxSprSq+6Jk=) 4: 3139342e3132342e3233342e302f32342d3234203d3e20323031393037.roa (hash: P1rNrNq0Lsy4Pv36ykUIleWOvoAEcFUYAHvT3IiKS84=) 5: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 5a6hxeYMdfOcxxbJlWIs2NOLLliWpQd9c0JofwX0Ryc=) 6: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: AFVeOnsvdfn5zr4jds6KNtr7n93z5bGnJNsS8Ufaz0U=) 7: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: ABkHDQKjEeANharZO1hp0RDKdEsWdRf0F4prEwfZnFs=) 8: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: vlI3tYFCLzWNGXLpIFZR5AHPwN6r5z5t+7vGqUPF4to=) 9: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: hJUy+WAsteHuyZTTylubys83kZZc4LE0LX6QYeU4v/U=) 10: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: 7RbGKTX0T75GWL+U9cYx0V2iGn8DIPgdGtE6PSL/e9k=) 11: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: DZU46gedNFYz2v7yvGIXeVWs+yworgKzdoKm6wBF9RY=) 12: 3139342e3132342e3233342e302f32342d3234203d3e203136353039.roa (hash: yz5dw8t6yWoO2T3DnzEAtHSSXtxqaxMtoTJQ4OPxYFQ=) 13: 326130663a336363333a343030303a3a2f34342d3434203d3e20323032333036.roa (hash: fxbR5GcPyoWqODdA3f1yyd4v8P4uCsBii+08ii9bg1w=) 14: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: HzAN9ywzH3R4tgGHlz5ec2Bib9+nQQlSPhjXFH+uvKQ=) 15: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: b5xBss8x50/mTCwdi3YpTgkBRxgxQIEDRJCrw4DZBZw=) 16: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: ys4GcQr92xf16wQYlCYeGPMDsfyEnGKsrz3bvGtNWC8=) 17: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: wDL3d4A1d+S+hyAjhYBLt0XksiIY4fLz7lOilgNj2Q4=) 18: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: unIb/pLoJEr1pBLYhSY4VQ/RprOtasUPRROCGuOA9r4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:68:71:92:70:4e:72:75:85:55:09:a8:df:32:58:69:3b:b8:d9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Mar 2 00:32:46 2026 GMT Not After : Mar 3 01:03:46 2026 GMT Subject: CN=9E2FCCF75E249B6D12121D7E0ED4DB600618073E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:a4:3a:db:96:43:6d:48:8c:ed:65:08:5c: 10:98:ad:cc:0c:6f:3a:9d:66:b8:f6:03:38:f7:6d: 30:e7:dd:e8:cb:e9:56:49:a2:9a:2c:10:fa:4e:56: 6c:13:40:c4:7a:81:db:f6:8c:5f:0e:02:42:03:b6: ad:fe:03:2f:04:a3:d0:15:f3:90:7d:5d:3b:52:16: 33:51:3c:26:97:fd:61:29:af:a7:37:0e:88:af:4f: 71:f5:13:19:79:a5:e9:c3:06:d7:8b:6c:41:f4:98: ad:8c:23:0c:5d:4a:68:2d:90:d0:0b:f1:92:cd:8a: 7f:89:6e:5b:97:68:47:81:06:e1:89:95:5c:21:cd: ee:64:64:b6:5b:21:af:9d:1f:82:c5:7f:c5:9d:c8: 95:2c:96:57:38:fa:27:0f:51:68:6d:c5:12:69:c2: 81:c6:97:77:ed:9b:f2:d1:42:51:c1:fe:74:db:e2: 82:d2:de:15:bc:4a:e1:e5:62:eb:ca:79:dc:15:3b: ea:ea:d9:96:97:7b:65:3d:72:26:08:99:26:82:74: 5d:5b:ef:66:fd:a5:29:66:de:19:9b:5a:bd:59:73: 5c:61:23:93:17:f1:22:65:dd:05:d2:04:d7:c5:fc: 59:e0:11:30:1d:96:19:3f:93:3a:0a:f2:20:d9:25: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2F:CC:F7:5E:24:9B:6D:12:12:1D:7E:0E:D4:DB:60:06:18:07:3E X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6e:45:eb:7e:e4:5b:99:b7:67:e6:7b:b2:a1:43:e9:43:60: 6a:6d:06:cb:e2:56:cb:09:42:34:c9:ba:85:0a:aa:56:54:09: aa:99:11:40:92:d0:14:0b:59:27:8d:34:29:9c:95:67:af:f8: d2:45:84:b1:2b:1d:93:0e:ee:23:49:aa:cb:61:b0:e9:35:ad: f7:76:1d:de:56:6f:3b:07:c3:76:34:b2:1d:43:16:60:e7:f4: dc:ba:98:27:29:bb:fc:55:36:67:d1:07:d1:1f:1c:f8:9f:7b: b3:1a:a4:1a:c1:8b:8c:d0:41:95:69:e1:9a:f6:02:a2:c3:3f: 3c:03:23:9b:bf:28:35:f3:3c:23:89:26:f9:cb:8f:0a:f9:98: 80:ba:73:c7:9f:35:80:93:2d:5d:0c:ab:fd:4b:da:a5:f9:33: 32:98:fe:7c:7f:9b:d1:28:00:03:4a:5e:d4:0b:9b:a5:62:7b: dd:6f:49:31:98:eb:14:a9:e5:e2:b0:fa:85:80:ee:75:01:f6: c9:e7:6c:5e:c5:24:aa:ac:07:88:28:ad:ca:f7:a6:fc:22:ef: c6:5b:f6:e4:79:69:63:8d:55:22:4c:5f:de:f3:01:45:fc:0d: 40:9a:e2:00:3f:b5:33:54:9c:c5:9f:5c:8a:28:05:b7:f7:50: 94:08:d0:4e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCGhxknBOcnWFVQmo3zJYaTu42SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNjAzMDIwMDMyNDZaFw0yNjAzMDMwMTAzNDZaMDMxMTAvBgNV BAMTKDlFMkZDQ0Y3NUUyNDlCNkQxMjEyMUQ3RTBFRDREQjYwMDYxODA3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmKQ625ZDbUiM7WUIXBCYrcwM bzqdZrj2Azj3bTDn3ejL6VZJoposEPpOVmwTQMR6gdv2jF8OAkIDtq3+Ay8Eo9AV 85B9XTtSFjNRPCaX/WEpr6c3DoivT3H1Exl5penDBteLbEH0mK2MIwxdSmgtkNAL 8ZLNin+JbluXaEeBBuGJlVwhze5kZLZbIa+dH4LFf8WdyJUsllc4+icPUWhtxRJp woHGl3ftm/LRQlHB/nTb4oLS3hW8SuHlYuvKedwVO+rq2ZaXe2U9ciYImSaCdF1b 72b9pSlm3hmbWr1Zc1xhI5MX8SJl3QXSBNfF/FngETAdlhk/kzoK8iDZJcG7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUni/M914km20SEh1+DtTbYAYYBz4wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm5F637kW5m3Z+Z7sqFD 6UNgam0Gy+JWywlCNMm6hQqqVlQJqpkRQJLQFAtZJ400KZyVZ6/40kWEsSsdkw7u I0mqy2Gw6TWt93Yd3lZvOwfDdjSyHUMWYOf03LqYJym7/FU2Z9EH0R8c+J97sxqk GsGLjNBBlWnhmvYCosM/PAMjm78oNfM8I4km+cuPCvmYgLpzx581gJMtXQyr/Uva pfkzMpj+fH+b0SgAA0pe1AubpWJ73W9JMZjrFKnl4rD6hYDudQH2yedsXsUkqqwH iCityvem/CLvxlv25HlpY41VIkxf3vMBRfwNQJriAD+1M1ScxZ9ciigFt/dQlAjQ Tg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:38 2026 by rpki-client