$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: NYdI3BPO/yRz6YrHeOm/mCkM10+KzdmCCbPemiLohsA= Subject key identifier: F8:0C:48:28:33:71:6E:93:4E:63:D2:8D:FA:03:21:4D:B6:AF:1D:85 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 3C3922D1431BC373948DA981826E8F8C49B9F4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 0137 Signing time: Sat 14 Nov 2026 17:00:00 +0000 Manifest this update: Sat 14 Nov 2026 16:55:00 +0000 Manifest next update: Sun 15 Nov 2026 20:46:00 +0000 Files and hashes: 1: 34362e31382e39322e302f32322d3234203d3e20323733393137.roa (hash: fjDR7XLLRcEnCAx6LxpCutT8iK4UeUNxvyxJ7ej6HCM=) 2: 3138352e3131362e39302e302f32342d3234203d3e20313432313436.roa (hash: ag5l3LX3LNGzjqWIKixe4SVzBhmH7Z4SjCfwtAnrwnQ=) 3: 34362e31382e38392e302f32342d3234203d3e2039333034.roa (hash: VIMT18voSTQDZeidsG2Rd4I/zCkFguTVSA8YrylW9cw=) 4: 34362e31382e39312e302f32342d3234203d3e203130373533.roa (hash: UZYZ2FIM6pk/tjGBM548FlzMKMKf2fPDqM5zZinGv1k=) 5: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 6: 34362e31382e39302e302f32342d3234203d3e20343031353630.roa (hash: zVRK1gMKqEp8cyjD1YHBOhdkMOzGjNP1hfCXW2EE9mM=) 7: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: z1ynraofFkerGtSprULFEUF2GOhKAgaU68rN1aeFMO0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:39:22:d1:43:1b:c3:73:94:8d:a9:81:82:6e:8f:8c:49:b9:f4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Nov 14 16:55:00 2026 GMT Not After : Nov 15 20:46:00 2026 GMT Subject: CN=F80C482833716E934E63D28DFA03214DB6AF1D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:36:84:39:fe:d2:94:9d:ab:0d:42:c6:88: 42:eb:21:a5:4b:16:87:d5:d1:b6:a0:ad:a1:24:2a: d5:d8:07:cc:63:72:33:5c:62:fb:22:ac:4d:98:0a: 26:7f:e6:55:e8:5c:82:e8:e5:0d:20:48:cc:21:8b: 79:b5:2b:e1:73:58:55:3f:19:44:be:a2:fc:88:f5: bf:72:66:5b:1c:b0:c0:2f:83:12:95:a0:09:39:04: 48:5f:4f:3d:f1:e0:a3:1e:44:4b:52:93:71:dc:83: 34:fa:4c:ef:00:ca:b1:a1:a8:1f:1f:38:00:08:9d: 1c:0f:1a:42:8c:b4:8d:94:14:06:22:c4:9a:b9:63: 1e:39:ea:09:9f:da:b4:0e:e9:7f:f6:9f:94:21:e8: b7:9b:65:9a:f0:01:e7:f4:1d:dd:1f:71:ed:49:b7: 93:ae:99:b0:8c:9e:38:e0:df:f3:28:eb:56:ec:6d: 7d:ca:53:ca:e2:73:80:ad:7e:27:a1:06:44:3a:b1: 54:7c:0b:8d:bc:5a:b0:62:d6:29:83:d1:cc:ad:b7: 87:07:be:90:b7:eb:65:38:54:e8:aa:b9:3e:28:17: 19:27:e6:6b:df:86:6f:e8:a5:38:8c:ee:d0:32:73: fc:10:c0:e1:73:2c:17:38:34:61:6a:6a:d2:af:fd: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0C:48:28:33:71:6E:93:4E:63:D2:8D:FA:03:21:4D:B6:AF:1D:85 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:90:4e:48:c7:18:7a:97:b7:37:44:00:a6:be:c8:83:37:ac: 08:2f:87:9c:40:72:93:4e:51:2e:f7:e6:82:64:ec:0e:8d:d2: ab:ed:87:90:b8:cd:13:6c:e0:36:4b:06:e8:ab:a4:31:e0:e3: 63:d8:3a:be:d1:d6:d8:bd:93:6c:16:d1:a5:39:43:30:88:30: 95:38:81:f6:94:9a:a7:d2:62:f9:09:a5:d1:88:99:42:df:e0: 06:d0:03:34:48:7c:05:20:de:74:08:62:ca:e4:32:25:19:94: 40:88:ba:ae:2c:a1:07:f7:b4:7a:c1:ac:67:48:5c:33:46:af: 3b:35:55:be:ac:de:e5:c9:c9:fc:46:f2:d9:9b:14:c4:41:2a: ae:54:3e:db:72:e4:7e:1b:e2:39:88:ba:ef:84:a0:63:d9:27: f8:e6:c6:7d:77:b9:e2:47:98:97:22:5e:39:43:fa:2d:bf:f1: 0f:a4:b5:7a:22:af:c8:7e:91:5d:36:62:09:4d:b7:fc:64:e7: 57:fc:34:c7:be:c2:e5:d3:e3:05:4b:48:30:33:26:c9:97:3e: 50:67:8b:12:68:97:d2:8b:12:61:d1:f4:ec:62:71:d8:0c:ce: 99:3e:e6:33:e9:0e:bb:1b:36:45:94:5d:8d:9a:e1:59:5d:33: 5d:61:ea:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPDki0UMbw3OUjamBgm6PjEm59KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjExMTQxNjU1MDBaFw0yNjExMTUyMDQ2MDBaMDMxMTAvBgNV BAMTKEY4MEM0ODI4MzM3MTZFOTM0RTYzRDI4REZBMDMyMTREQjZBRjFEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGTaEOf7SlJ2rDULGiELrIaVL FofV0bagraEkKtXYB8xjcjNcYvsirE2YCiZ/5lXoXILo5Q0gSMwhi3m1K+FzWFU/ GUS+ovyI9b9yZlscsMAvgxKVoAk5BEhfTz3x4KMeREtSk3HcgzT6TO8AyrGhqB8f OAAInRwPGkKMtI2UFAYixJq5Yx456gmf2rQO6X/2n5Qh6LebZZrwAef0Hd0fce1J t5OumbCMnjjg3/Mo61bsbX3KU8ric4CtfiehBkQ6sVR8C428WrBi1imD0cytt4cH vpC362U4VOiquT4oFxkn5mvfhm/opTiM7tAyc/wQwOFzLBc4NGFqatKv/Yh9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+AxIKDNxbpNOY9KN+gMhTbavHYUwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJBOSMcYepe3N0QApr7I gzesCC+HnEByk05RLvfmgmTsDo3Sq+2HkLjNE2zgNksG6KukMeDjY9g6vtHW2L2T bBbRpTlDMIgwlTiB9pSap9Ji+Qml0YiZQt/gBtADNEh8BSDedAhiyuQyJRmUQIi6 riyhB/e0esGsZ0hcM0avOzVVvqze5cnJ/Eby2ZsUxEEqrlQ+23LkfhviOYi674Sg Y9kn+ObGfXe54keYlyJeOUP6Lb/xD6S1eiKvyH6RXTZiCU23/GTnV/w0x77C5dPj BUtIMDMmyZc+UGeLEmiX0osSYdH07GJx2AzOmT7mM+kOuxs2RZRdjZrhWV0zXWHq Vw== -----END CERTIFICATE-----Generated at Sun Nov 15 13:41:58 2026 by rpki-client