$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 1+89miIrnB+Hbj/GAZyDWhtzrxDF4wzimFTUJF6FH6A= Subject key identifier: A5:77:3C:5D:4D:EE:4E:0C:3F:33:DE:42:7C:FC:0C:47:44:BE:EB:19 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 464F0AF3278DDB8C06165A68FD1E69D6FC2D1552 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 12:02:27 +0000 Manifest this update: Fri 17 Apr 2026 11:57:27 +0000 Manifest next update: Sun 19 Apr 2026 02:50:27 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: Ebk7logKF3+xh22RksLhZsyZm28SDpqL1vz/Jz/JQzc=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4f:0a:f3:27:8d:db:8c:06:16:5a:68:fd:1e:69:d6:fc:2d:15:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Apr 17 11:57:27 2026 GMT Not After : Apr 19 02:50:27 2026 GMT Subject: CN=A5773C5D4DEE4E0C3F33DE427CFC0C4744BEEB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:da:20:65:d3:b6:55:b4:5b:e6:ba:ca:cf: 5e:7a:5a:2f:3f:e1:81:b8:0f:78:42:ca:b3:1f:51: 1b:9d:e3:90:e9:82:ce:0d:43:7d:27:c0:1b:85:b2: e6:51:55:28:75:ef:36:0c:ee:a2:6a:96:5d:10:17: 83:61:bc:f0:5b:a2:f8:39:75:c8:ea:1c:f0:e3:71: 79:d2:51:ca:29:13:cb:41:49:61:b6:88:a9:9d:e7: 50:e4:76:d7:76:19:21:5c:40:62:65:61:37:70:4c: a5:1b:4c:0b:68:fa:5a:95:30:47:98:03:db:21:b1: c0:8c:ed:48:9c:38:5f:57:11:80:09:30:bc:96:b1: 19:36:58:e9:bb:62:54:b5:1d:18:7c:da:de:36:4e: 66:e3:a8:ec:ba:3e:5b:f4:26:3a:2e:b1:68:ec:bb: 23:3d:d5:28:18:de:38:35:ee:90:7e:00:81:1c:c5: c0:0f:bb:e2:94:0a:b3:fd:48:ac:60:be:bb:88:ea: f0:a4:07:3a:00:5d:93:4b:ab:6a:e4:b4:61:a0:28: 5e:47:f8:01:57:ef:3e:55:e8:4f:12:18:25:3a:60: 4d:06:24:29:e3:0f:29:0c:dd:fa:6c:66:e0:36:bb: 4b:f3:dd:55:fe:5a:ba:41:6b:4e:1d:1f:84:6c:aa: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:3C:5D:4D:EE:4E:0C:3F:33:DE:42:7C:FC:0C:47:44:BE:EB:19 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:54:6b:41:a3:e4:d0:65:19:bd:6e:97:4f:fa:e8:fb:95: 78:14:45:48:c0:63:1f:1d:7e:f9:3f:38:9e:a8:9d:1c:0c:cf: b4:65:68:74:fa:df:2c:89:34:1c:d8:16:04:74:11:57:4b:ba: f2:ba:0b:1f:6d:6c:77:d7:43:61:97:0b:01:1f:61:a4:d8:e4: f3:83:94:66:88:ff:58:08:f0:32:f6:4c:79:86:3d:ff:df:d3: 59:2f:04:d2:3e:62:6a:82:dd:30:1c:07:5d:34:cd:7b:40:c8: fe:e2:cd:89:e5:25:2e:6e:37:2b:13:0a:d8:26:d2:ab:75:d8: 61:c5:05:84:ff:fc:02:0e:d5:78:ae:32:57:aa:c4:c0:78:a8: 8e:83:9e:70:cd:39:05:e5:8f:23:fe:63:2f:d2:68:04:fe:0d: ef:ae:cc:f0:9d:79:05:09:c9:50:2a:ef:ca:eb:6a:74:53:ad: be:df:b9:96:6a:f6:70:23:b9:af:ef:dc:6e:9d:9c:f4:bb:26: c9:41:a4:5c:64:fd:1c:99:df:98:a2:f8:43:af:14:5a:37:62: 80:45:91:4a:67:a9:53:dc:8e:bb:b4:5c:ec:6c:84:81:8a:12: 7d:e5:ab:2d:e2:14:7f:fd:3c:04:cd:f5:a7:75:87:93:fa:ba: 7d:11:3d:bb -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURk8K8yeN24wGFlpo/R5p1vwtFVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA0MTcxMTU3MjdaFw0yNjA0MTkwMjUwMjdaMDMxMTAvBgNV BAMTKEE1NzczQzVENERFRTRFMEMzRjMzREU0MjdDRkMwQzQ3NDRCRUVCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIrNogZdO2VbRb5rrKz156Wi8/ 4YG4D3hCyrMfURud45Dpgs4NQ30nwBuFsuZRVSh17zYM7qJqll0QF4NhvPBbovg5 dcjqHPDjcXnSUcopE8tBSWG2iKmd51Dkdtd2GSFcQGJlYTdwTKUbTAto+lqVMEeY A9shscCM7UicOF9XEYAJMLyWsRk2WOm7YlS1HRh82t42TmbjqOy6Plv0JjousWjs uyM91SgY3jg17pB+AIEcxcAPu+KUCrP9SKxgvruI6vCkBzoAXZNLq2rktGGgKF5H +AFX7z5V6E8SGCU6YE0GJCnjDykM3fpsZuA2u0vz3VX+WrpBa04dH4RsqtmfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpXc8XU3uTgw/M95CfPwMR0S+6xkwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6tUa0Gj5NBlGb1ul0/6 6PuVeBRFSMBjHx1++T84nqidHAzPtGVodPrfLIk0HNgWBHQRV0u68roLH21sd9dD YZcLAR9hpNjk84OUZoj/WAjwMvZMeYY9/9/TWS8E0j5iaoLdMBwHXTTNe0DI/uLN ieUlLm43KxMK2CbSq3XYYcUFhP/8Ag7VeK4yV6rEwHiojoOecM05BeWPI/5jL9Jo BP4N767M8J15BQnJUCrvyutqdFOtvt+5lmr2cCO5r+/cbp2c9LsmyUGkXGT9HJnf mKL4Q68UWjdigEWRSmepU9yOu7Rc7GyEgYoSfeWrLeIUf/08BM31p3WHk/q6fRE9 uw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:40:40 2026 by rpki-client