$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: lk+HTgPHL5c6KepxL8fF5yzsnOfKzLJVHY7QfayKelA= Subject key identifier: 98:D8:BB:6F:07:3C:17:C8:72:7C:6C:31:10:13:05:13:60:3F:EB:07 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 3A6B7BD3D115BAE8687B8B6F9F078334CD36F3A4 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 038F Signing time: Tue 22 Sep 2026 12:55:30 +0000 Manifest this update: Tue 22 Sep 2026 12:50:30 +0000 Manifest next update: Thu 24 Sep 2026 04:31:30 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34312d3431203d3e20323134373031.roa (hash: vN6rKIfkljSAHrRu8/1nJyMDGglyFOpzorhaf/f1lec=) 2: 326130623a346530373a363066653a3a2f34382d3438203d3e20323134373031.roa (hash: ZjAy3ueqwfxe+TIw9tRv0Ih89d9rnBxrCaEKYAUyhLY=) 3: 326130623a346530373a363066663a3a2f34382d3438203d3e20323134373031.roa (hash: XOFCxuQN+vhzQVb5Y0uC3xuX3xbxagWcYKQkNlr04J8=) 4: 326130623a346530373a363031323a3a2f34382d3438203d3e20323134373031.roa (hash: qYmLIOuq4MSZIAPCZzhamdrYsk7jK51Ss8GhdRr+NDQ=) 5: 326130623a346530373a363031313a3a2f34382d3438203d3e20323134373031.roa (hash: V0fyeoZDncMW2eQzGPlyWD7Ns6F5V5KNaswuepRtGFo=) 6: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: Mj9jAx23ZawxGxVtvnTChglnKf+OB0UPdZ8gEUop7yg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:7b:d3:d1:15:ba:e8:68:7b:8b:6f:9f:07:83:34:cd:36:f3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Sep 22 12:50:30 2026 GMT Not After : Sep 24 04:31:30 2026 GMT Subject: CN=98D8BB6F073C17C8727C6C3110130513603FEB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:a9:d2:25:f8:51:92:5e:e9:e6:e7:fa:1d: e7:8a:ed:17:9e:79:79:85:c1:22:40:60:56:46:03: 16:1f:83:f0:58:4e:c3:f6:0a:70:63:f7:c2:7b:5d: 8f:03:ac:cc:80:69:48:05:d1:76:38:71:9b:c1:37: 1d:80:47:3d:25:bd:f5:71:94:b5:b2:f2:82:85:b2: b2:e8:28:96:8f:33:32:bc:5b:c1:1e:59:d5:2a:7b: 11:04:2d:5e:89:ce:9d:b8:25:4b:91:7c:e2:5f:d6: 17:2d:f0:2e:ad:70:8b:3f:7d:b4:b3:b1:90:9a:2b: 8d:5d:75:4b:ec:4f:24:a5:ab:7b:1b:c0:8b:35:77: 55:81:3d:e0:44:e1:7a:21:aa:9b:bc:15:3f:d9:f4: c4:55:b1:2c:a0:a0:1a:a5:7a:d7:b7:bc:ac:22:a7: da:64:f1:9d:c5:b3:6c:ed:b1:e6:28:08:3e:3f:85: 0b:0c:10:db:c1:a6:ad:e3:28:40:9f:96:5e:ff:fa: 31:99:ba:d0:64:b0:62:28:45:ce:40:73:b1:42:cb: ae:a6:fd:1d:98:4f:1e:a8:ce:bb:9d:61:a9:2f:e2: d0:26:7f:46:1d:b1:3c:21:c4:cb:1c:d8:96:8d:be: 67:46:25:fc:11:d5:3b:03:6c:81:48:93:47:e8:11: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:BB:6F:07:3C:17:C8:72:7C:6C:31:10:13:05:13:60:3F:EB:07 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:31:95:fd:9c:3f:aa:0e:db:1d:94:5e:f3:63:46:bf:e2: 9c:d3:e3:74:82:e7:a7:68:af:04:33:59:84:2b:d8:b1:b2:63: a4:ad:b1:a6:f0:fa:dc:96:f4:8e:e6:6e:1c:68:d3:cb:9c:84: 6e:c3:32:a4:a9:d2:db:90:56:17:f4:7a:85:bd:80:92:00:5d: d4:bd:14:ab:51:77:c0:2d:bd:0f:ee:3a:23:3f:fe:05:72:b6: cf:76:df:fc:bc:fd:d3:c5:36:c1:40:4d:97:7f:66:cc:39:86: cb:ba:84:90:b6:05:e8:f0:68:cd:3d:01:fb:c5:1a:46:03:dc: 0a:f7:2d:49:27:b5:08:be:87:9b:db:b9:b4:65:ca:f4:82:b9: c5:5e:63:48:c7:48:f7:5c:11:c2:1d:b8:9b:5a:33:52:8e:34: 51:c7:60:15:80:45:f8:17:03:59:54:ea:3f:3d:b4:9b:e0:0c: 07:ad:0f:bb:4d:95:5a:91:49:0b:37:d3:e0:2a:1a:fa:37:6d: f9:37:5d:1f:a6:e7:af:a3:3b:35:1d:ef:a7:f5:f8:6d:6f:e1: 5e:c1:43:29:8f:4a:52:e7:1f:39:0e:16:97:7c:ce:7f:6f:74: 49:18:0d:f6:76:7e:af:48:e5:c6:70:db:6c:fd:02:aa:dd:7e: f5:43:8e:47 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUOmt709EVuuhoe4tvnweDNM0286QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNjA5MjIxMjUwMzBaFw0yNjA5MjQwNDMxMzBaMDMxMTAvBgNV BAMTKDk4RDhCQjZGMDczQzE3Qzg3MjdDNkMzMTEwMTMwNTEzNjAzRkVCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnanSJfhRkl7p5uf6HeeK7Ree eXmFwSJAYFZGAxYfg/BYTsP2CnBj98J7XY8DrMyAaUgF0XY4cZvBNx2ARz0lvfVx lLWy8oKFsrLoKJaPMzK8W8EeWdUqexEELV6Jzp24JUuRfOJf1hct8C6tcIs/fbSz sZCaK41ddUvsTySlq3sbwIs1d1WBPeBE4Xohqpu8FT/Z9MRVsSygoBqlete3vKwi p9pk8Z3Fs2ztseYoCD4/hQsMENvBpq3jKECfll7/+jGZutBksGIoRc5Ac7FCy66m /R2YTx6ozrudYakv4tAmf0YdsTwhxMsc2JaNvmdGJfwR1TsDbIFIk0foEdeLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUmNi7bwc8F8hyfGwxEBMFE2A/6wcwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2Ixlf2cP6oO2x2UXvNj Rr/inNPjdILnp2ivBDNZhCvYsbJjpK2xpvD63Jb0juZuHGjTy5yEbsMypKnS25BW F/R6hb2AkgBd1L0Uq1F3wC29D+46Iz/+BXK2z3bf/Lz908U2wUBNl39mzDmGy7qE kLYF6PBozT0B+8UaRgPcCvctSSe1CL6Hm9u5tGXK9IK5xV5jSMdI91wRwh24m1oz Uo40UcdgFYBF+BcDWVTqPz20m+AMB60Pu02VWpFJCzfT4Coa+jdt+TddH6bnr6M7 NR3vp/X4bW/hXsFDKY9KUucfOQ4Wl3zOf290SRgN9nZ+r0jlxnDbbP0Cqt1+9UOO Rw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:42:10 2026 by rpki-client