$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: mMSOyLfMreP/2yN56x67UV9X6plBaRstPEe4bvIn//M= Subject key identifier: 4F:37:3B:C6:A2:30:30:39:C7:8A:2D:AF:B9:2E:33:77:23:95:10:18 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 231C7B83334E8014956BA607CD562F46BCB5E8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0676 Signing time: Sun 01 Mar 2026 17:22:11 +0000 Manifest this update: Sun 01 Mar 2026 17:17:11 +0000 Manifest next update: Mon 02 Mar 2026 20:25:11 +0000 Files and hashes: 1: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 2: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: ko60BkU/btfst1WFDVx3goce98mQ4xuyRyhQt3W1JTg=) 3: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 4: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 5: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 6: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 7: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 8: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 9: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 10: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 11: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 12: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 13: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 14: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 15: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 16: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 17: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 19: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 20: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 21: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 22: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1c:7b:83:33:4e:80:14:95:6b:a6:07:cd:56:2f:46:bc:b5:e8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Mar 1 17:17:11 2026 GMT Not After : Mar 2 20:25:11 2026 GMT Subject: CN=4F373BC6A2303039C78A2DAFB92E337723951018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:fd:c6:34:e5:63:17:d4:78:c3:38:72:0a: 5c:42:cd:c3:ce:9f:a1:f5:c5:2e:44:9a:2a:b8:29: f4:63:68:7d:27:d2:71:af:44:ab:b2:75:a0:63:3a: 7f:07:c2:76:66:5b:f0:cc:f5:25:9e:e4:8b:0d:1b: f3:b0:e1:25:dd:73:61:01:b3:90:84:31:b6:4b:03: b9:a7:f5:f0:e0:93:15:1e:6b:fa:a5:86:fd:bc:18: 2a:71:ad:38:e7:36:37:d0:ec:88:c5:6b:1d:8b:ae: f4:8d:a8:af:9c:57:ab:5f:6b:22:e8:ac:75:01:28: fb:23:85:1a:a1:26:a5:6a:b6:f6:fa:e9:bb:b3:a6: f4:b5:17:27:c2:61:6c:b8:20:89:7c:25:93:89:8d: 22:61:29:0d:3a:8f:b0:d6:4d:d2:91:74:99:29:9b: 8e:3f:fe:cf:8a:01:16:5b:df:cb:cd:b2:aa:79:e2: 1d:a5:2a:c7:37:7d:da:cd:5d:f2:42:dd:1d:79:3e: 79:c2:63:10:50:a7:61:64:fc:0b:e6:e7:a5:40:b3: 85:c5:a3:88:85:0c:d1:f4:2b:03:8d:c2:0b:51:a1: d0:1e:6b:7c:fe:8e:25:28:f0:b1:7e:e1:5c:85:c7: f3:3e:3e:e6:df:e0:ea:43:34:16:0d:6e:a5:4d:04: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:3B:C6:A2:30:30:39:C7:8A:2D:AF:B9:2E:33:77:23:95:10:18 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9a:42:e7:f6:6f:ff:6d:fa:3f:99:1f:41:13:e1:f6:f0:77: 6a:c8:6a:5a:87:13:7d:ae:e6:b6:c1:cf:82:e0:9b:d5:13:07: b8:50:43:70:a2:29:33:ff:91:73:99:35:d8:e6:5e:8c:f9:ac: 1b:01:80:1b:c7:a5:17:ae:eb:78:9c:ab:85:99:e6:58:d9:34: 1c:99:02:fb:b8:70:c8:5a:eb:d6:b4:01:93:7d:a5:ab:8d:45: 74:35:9b:20:5b:96:9d:28:22:70:ab:a5:26:04:fe:37:89:67: 0a:90:0b:16:d7:34:f4:cf:cf:20:6b:01:7c:75:1f:14:48:00: c8:ba:87:29:54:74:5d:1f:fc:e9:5d:d6:af:7f:77:57:02:e7: 3f:3a:59:6c:3c:59:00:d0:d8:27:e4:0f:7f:fb:c2:c9:8e:d1: 07:94:30:a1:8c:93:a5:fc:78:2a:9e:12:ab:2a:8f:c0:dd:51: 45:37:71:3e:a8:8e:23:7b:f1:65:23:44:ff:cb:9b:6d:ca:3f: 27:21:9b:7a:f0:00:a6:2a:75:a4:e7:b8:b3:9e:44:68:fb:fe: d1:9e:e1:ab:c3:eb:a6:81:97:6d:ea:ff:ba:b7:46:9f:e2:76: d9:1c:08:97:6f:cf:3a:58:6c:bd:ed:32:2e:e8:db:78:5f:e7: 7f:a8:07:8d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIxx7gzNOgBSVa6YHzVYvRry16K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAzMDExNzE3MTFaFw0yNjAzMDIyMDI1MTFaMDMxMTAvBgNV BAMTKDRGMzczQkM2QTIzMDMwMzlDNzhBMkRBRkI5MkUzMzc3MjM5NTEwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9P3GNOVjF9R4wzhyClxCzcPO n6H1xS5Emiq4KfRjaH0n0nGvRKuydaBjOn8HwnZmW/DM9SWe5IsNG/Ow4SXdc2EB s5CEMbZLA7mn9fDgkxUea/qlhv28GCpxrTjnNjfQ7IjFax2LrvSNqK+cV6tfayLo rHUBKPsjhRqhJqVqtvb66buzpvS1FyfCYWy4IIl8JZOJjSJhKQ06j7DWTdKRdJkp m44//s+KARZb38vNsqp54h2lKsc3fdrNXfJC3R15PnnCYxBQp2Fk/Avm56VAs4XF o4iFDNH0KwONwgtRodAea3z+jiUo8LF+4VyFx/M+Pubf4OpDNBYNbqVNBM9LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTzc7xqIwMDnHii2vuS4zdyOVEBgwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJpC5/Zv/236P5kfQRPh 9vB3ashqWocTfa7mtsHPguCb1RMHuFBDcKIpM/+Rc5k12OZejPmsGwGAG8elF67r eJyrhZnmWNk0HJkC+7hwyFrr1rQBk32lq41FdDWbIFuWnSgicKulJgT+N4lnCpAL Ftc09M/PIGsBfHUfFEgAyLqHKVR0XR/86V3Wr393VwLnPzpZbDxZANDYJ+QPf/vC yY7RB5QwoYyTpfx4Kp4SqyqPwN1RRTdxPqiOI3vxZSNE/8ubbco/JyGbevAApip1 pOe4s55EaPv+0Z7hq8PrpoGXber/urdGn+J22RwIl2/POlhsve0yLujbeF/nf6gH jQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:09 2026 by rpki-client