$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: ZiDQTdJSJfaRtOjY435fFhB2xDLVxRN7x6tW+exuMJ4= Subject key identifier: 56:1E:48:C5:CF:52:B6:5C:A3:A6:40:40:54:EE:F4:5E:10:04:60:F4 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 6511BCB2F01BB873AA8E70F401CEA55125449E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 06B7 Signing time: Fri 17 Apr 2026 00:02:11 +0000 Manifest this update: Thu 16 Apr 2026 23:57:11 +0000 Manifest next update: Sat 18 Apr 2026 03:38:11 +0000 Files and hashes: 1: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 2: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 3: 3138352e3234342e39352e302f32342d3234203d3e20323039313034.roa (hash: PNy8kHfErJW4J8db5MQNciyd0WzMVWGxz0WDCg6nr0Y=) 4: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 5: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 6: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 7: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 8: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 9: 3138352e3231332e3234312e302f32342d3234203d3e20383334.roa (hash: iJn0hlLJ3oFxKr+7cMnKiCBSxJOhVbhgSdip2hnkomk=) 10: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: KdpamzjNMoBH12606SSHSE8fPB2oVEwY+/Ehf6CDJmA=) 11: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 12: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) 13: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 14: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 15: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 16: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: v++1zx+y2q+OUucDB2zahBuo5M4DwRMcpHBC9HwP6RQ=) 17: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 18: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 19: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 20: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:11:bc:b2:f0:1b:b8:73:aa:8e:70:f4:01:ce:a5:51:25:44:9e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Apr 16 23:57:11 2026 GMT Not After : Apr 18 03:38:11 2026 GMT Subject: CN=561E48C5CF52B65CA3A6404054EEF45E100460F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:88:69:6b:a5:fb:4c:9a:19:e6:d7:c8:23: 26:a7:68:61:41:de:b5:bf:5d:32:34:6c:70:02:94: c5:8d:4c:ed:1e:76:b6:1f:bd:82:31:3d:0d:28:8c: 6e:92:76:ed:6a:ca:a6:c4:51:53:9e:9b:15:91:da: 3b:7f:5e:cc:59:ce:59:cf:09:f6:fd:24:58:4e:4b: 68:3d:8f:c2:97:ad:f3:3d:22:5f:e2:d6:02:b3:60: db:83:0c:cf:a0:ce:e1:02:3f:d5:e3:af:a2:64:da: 7b:c1:ae:f2:15:58:ca:40:e6:ea:48:1f:3b:b6:65: 12:f7:27:53:b0:5c:e2:03:50:f1:b7:fe:f1:a1:1d: 7d:53:8f:0e:4f:66:f2:33:66:d9:77:7e:9a:7a:0e: ee:8a:06:b8:80:f8:fe:57:15:51:16:df:38:ee:67: a5:dc:66:3c:47:97:6c:f1:32:19:75:1d:68:57:8a: 31:9d:17:64:d8:c5:76:30:b4:1a:36:51:0a:38:06: bb:44:5a:10:bf:2d:80:51:78:6b:49:3d:6b:40:ca: 37:5c:e0:98:91:9d:69:4b:28:39:05:d8:92:64:6d: 6f:a5:a7:37:35:ef:41:ba:6e:38:5f:4c:a1:66:92: 3e:99:ed:72:89:44:5a:3c:01:9d:64:46:f3:fc:fa: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:48:C5:CF:52:B6:5C:A3:A6:40:40:54:EE:F4:5E:10:04:60:F4 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ea:a1:fa:f1:56:2d:cc:6a:1f:a1:76:15:f4:a3:a8:6f:54: 4e:3e:ed:3e:03:6b:c6:f1:40:b0:08:c2:80:49:fd:a3:00:fe: 6b:c6:83:c4:3f:93:6c:e4:c9:5a:5e:11:0a:2b:45:64:64:bf: 0b:e0:b6:60:f6:ac:21:cb:e2:b7:34:f9:5b:c0:56:6c:b0:63: c7:9e:03:18:4c:21:8f:75:36:7c:5a:d4:a1:4f:56:cb:89:ba: 59:e5:98:11:f4:d4:4d:e6:9d:e6:c1:52:d5:05:62:5f:53:a7: fe:74:07:79:ee:90:e0:4d:8b:18:5d:14:b7:c7:43:ad:c6:f1: d0:8e:65:67:b7:52:ff:ca:45:d5:7d:9c:da:4a:3c:d2:c6:ff: e7:ec:8f:7b:20:ca:cb:68:11:56:76:7c:35:d0:1d:75:c4:1a: a4:23:55:b9:a6:21:2c:1e:2e:9a:0d:2b:de:1e:45:eb:b2:23: 48:44:65:e4:cd:30:64:2e:8b:fe:bb:cd:0d:45:a0:12:3c:cf: 7b:1c:5b:77:67:a1:29:97:18:b9:30:15:34:a1:f3:87:f9:6a: f1:a5:ff:76:81:af:b1:70:ce:86:05:67:16:99:74:bc:e5:da: a4:08:b2:29:3d:e5:61:f4:66:fc:d2:b5:0b:65:7e:4c:1c:a6: a4:d0:78:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZRG8svAbuHOqjnD0Ac6lUSVEnj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjA0MTYyMzU3MTFaFw0yNjA0MTgwMzM4MTFaMDMxMTAvBgNV BAMTKDU2MUU0OEM1Q0Y1MkI2NUNBM0E2NDA0MDU0RUVGNDVFMTAwNDYwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QIhpa6X7TJoZ5tfIIyanaGFB 3rW/XTI0bHAClMWNTO0edrYfvYIxPQ0ojG6Sdu1qyqbEUVOemxWR2jt/XsxZzlnP Cfb9JFhOS2g9j8KXrfM9Il/i1gKzYNuDDM+gzuECP9Xjr6Jk2nvBrvIVWMpA5upI Hzu2ZRL3J1OwXOIDUPG3/vGhHX1Tjw5PZvIzZtl3fpp6Du6KBriA+P5XFVEW3zju Z6XcZjxHl2zxMhl1HWhXijGdF2TYxXYwtBo2UQo4BrtEWhC/LYBReGtJPWtAyjdc 4JiRnWlLKDkF2JJkbW+lpzc170G6bjhfTKFmkj6Z7XKJRFo8AZ1kRvP8+sntAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVh5Ixc9StlyjpkBAVO70XhAEYPQwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuqh+vFWLcxqH6F2FfSj qG9UTj7tPgNrxvFAsAjCgEn9owD+a8aDxD+TbOTJWl4RCitFZGS/C+C2YPasIcvi tzT5W8BWbLBjx54DGEwhj3U2fFrUoU9Wy4m6WeWYEfTUTead5sFS1QViX1On/nQH ee6Q4E2LGF0Ut8dDrcbx0I5lZ7dS/8pF1X2c2ko80sb/5+yPeyDKy2gRVnZ8NdAd dcQapCNVuaYhLB4umg0r3h5F67IjSERl5M0wZC6L/rvNDUWgEjzPexxbd2ehKZcY uTAVNKHzh/lq8aX/doGvsXDOhgVnFpl0vOXapAiyKT3lYfRm/NK1C2V+TBympNB4 +g== -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:06 2026 by rpki-client