$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: RS1VIgFepSjCJnpXUvi9wP9I8yc2uPVHi18IR5ccSqw= Subject key identifier: E0:93:8C:F4:FC:68:71:FA:9A:58:54:13:5C:2F:72:4B:06:3D:44:0A Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 012FE3827058650949111BE1B01F667E49D62882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 039F Signing time: Mon 21 Sep 2026 09:40:29 +0000 Manifest this update: Mon 21 Sep 2026 09:35:29 +0000 Manifest next update: Tue 22 Sep 2026 13:18:29 +0000 Files and hashes: 1: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 2: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 3: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: KCELe/4hKFl8dDK+IQmuksw66cw6AsrWryZcUzPy8VI=) 4: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 5: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2f:e3:82:70:58:65:09:49:11:1b:e1:b0:1f:66:7e:49:d6:28:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Sep 21 09:35:29 2026 GMT Not After : Sep 22 13:18:29 2026 GMT Subject: CN=E0938CF4FC6871FA9A5854135C2F724B063D440A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:0b:ec:3a:ec:51:ee:9e:ba:79:22:b5:e1: e2:40:18:df:b4:54:0d:e4:b4:6d:a7:32:fd:53:64: 6f:50:dd:a3:57:c5:5d:3c:12:19:73:f8:1b:50:28: 39:ab:4f:26:88:c1:99:91:cc:13:ac:94:e5:2b:3f: 40:47:d7:d5:a4:17:66:7e:a7:13:d8:57:85:e0:a2: 3a:bc:29:3c:cd:f7:e7:bd:48:7b:56:57:02:c7:59: e1:1f:83:43:99:86:d1:36:de:00:5b:cb:5b:c7:56: 3b:0e:a0:36:2c:ab:8a:93:59:56:13:5a:a1:c8:75: 42:c0:74:2f:f3:94:c9:db:84:6b:52:7e:20:c4:ec: 2c:8e:79:2e:51:aa:75:23:e0:f0:52:ec:39:e8:7d: 7f:58:78:13:81:1a:77:57:8f:fc:9f:27:fe:a9:65: e0:e6:bf:c8:5b:c4:7b:e2:f5:5a:09:2d:fb:8a:21: 82:52:7e:6c:17:a5:c2:04:cf:59:4d:08:9f:43:a0: 87:5a:40:e7:e7:bc:3a:6f:b9:72:67:a4:f6:f1:fb: a3:93:ef:93:58:84:dc:6f:73:40:27:69:4d:ba:20: 25:c6:36:dd:1e:de:9f:2a:51:87:16:e7:47:77:b8: 9a:7d:e6:5b:dd:2d:48:ec:f0:a6:3c:9f:7b:16:8c: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:93:8C:F4:FC:68:71:FA:9A:58:54:13:5C:2F:72:4B:06:3D:44:0A X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d7:51:09:d2:ec:9c:79:7f:da:64:e8:45:6f:e3:4f:48:a1: cb:c6:0d:8a:3f:86:5e:ef:58:0f:a5:21:c1:6e:2b:6b:57:04: c6:ce:9e:73:50:24:5f:ca:49:04:21:cc:9a:c4:de:e5:56:d4: 68:96:6a:e9:0c:45:52:b8:03:3f:1b:37:53:44:2b:93:bf:74: 27:f4:ba:b1:fe:fa:77:00:25:82:ba:b7:84:0f:7e:e7:9f:bb: 98:5d:da:11:d0:aa:fe:78:d8:92:1d:a6:af:ab:06:e6:77:47: cd:66:11:54:2b:a5:0a:1a:cb:56:d9:ba:6e:37:97:67:65:af: 97:fe:99:23:af:35:97:70:11:84:bf:ea:2d:ed:d3:ae:59:c2: 9b:e4:7f:22:2c:7e:03:98:7d:d5:82:76:88:54:06:69:aa:56: 5c:34:0c:97:d2:a1:13:67:6a:7a:f8:05:3b:f4:2c:6d:45:5d: 22:9b:7e:ee:2b:2f:ec:d3:f5:6c:7d:c7:2e:7c:78:10:bb:f7: 94:62:36:e6:68:dc:e7:4b:85:9e:a4:a8:39:9f:53:1a:a3:69: bf:5f:46:c0:1c:22:ba:97:fa:b5:bb:37:68:70:0b:5a:8a:88: 2d:ad:f7:16:66:21:47:50:c3:80:39:eb:fc:d1:35:ed:00:a7: de:4d:71:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAS/jgnBYZQlJERvhsB9mfknWKIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA5MjEwOTM1MjlaFw0yNjA5MjIxMzE4MjlaMDMxMTAvBgNV BAMTKEUwOTM4Q0Y0RkM2ODcxRkE5QTU4NTQxMzVDMkY3MjRCMDYzRDQ0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCAvsOuxR7p66eSK14eJAGN+0 VA3ktG2nMv1TZG9Q3aNXxV08Ehlz+BtQKDmrTyaIwZmRzBOslOUrP0BH19WkF2Z+ pxPYV4Xgojq8KTzN9+e9SHtWVwLHWeEfg0OZhtE23gBby1vHVjsOoDYsq4qTWVYT WqHIdULAdC/zlMnbhGtSfiDE7CyOeS5RqnUj4PBS7DnofX9YeBOBGndXj/yfJ/6p ZeDmv8hbxHvi9VoJLfuKIYJSfmwXpcIEz1lNCJ9DoIdaQOfnvDpvuXJnpPbx+6OT 75NYhNxvc0AnaU26ICXGNt0e3p8qUYcW50d3uJp95lvdLUjs8KY8n3sWjI23AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4JOM9PxocfqaWFQTXC9ySwY9RAowHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9dRCdLsnHl/2mToRW/j T0ihy8YNij+GXu9YD6UhwW4ra1cExs6ec1AkX8pJBCHMmsTe5VbUaJZq6QxFUrgD Pxs3U0Qrk790J/S6sf76dwAlgrq3hA9+55+7mF3aEdCq/njYkh2mr6sG5ndHzWYR VCulChrLVtm6bjeXZ2Wvl/6ZI681l3ARhL/qLe3TrlnCm+R/Iix+A5h91YJ2iFQG aapWXDQMl9KhE2dqevgFO/QsbUVdIpt+7isv7NP1bH3HLnx4ELv3lGI25mjc50uF nqSoOZ9TGqNpv19GwBwiupf6tbs3aHALWoqILa33FmYhR1DDgDnr/NE17QCn3k1x 8w== -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:10 2026 by rpki-client