$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: 5Uqgy4LG7fPCpI1ezc40Q045qb2MR5LpAJQzFsvZ2fM= Subject key identifier: 73:9F:84:B3:8A:F3:34:CF:D8:86:CA:1E:39:C3:15:6F:F5:D2:7D:2C Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 36C5EC52907762CBB58DDA20D59C6CDA2165A0B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 54 Signing time: Fri 12 Jun 2026 22:42:19 +0000 Manifest this update: Fri 12 Jun 2026 22:37:19 +0000 Manifest next update: Sun 14 Jun 2026 01:08:19 +0000 Files and hashes: 1: 34362e31382e38392e302f32342d3234203d3e20393834.roa (hash: dTPGPFu6IshEEsy/RmP50yZu0SBzIoPmfBrrv6G1Bt0=) 2: 34362e31382e39302e302f32342d3234203d3e20323037313538.roa (hash: c3XGP2QOaAegFM0BJ/uAWNxnHJgzHzZj7rsmxO7Bggk=) 3: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (hash: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=) 4: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 5: 3138352e3131362e39302e302f32342d3234203d3e20343032323839.roa (hash: +Ui26OpR2rnRNb3YOnuRkkVtjIfm7ZTC4lRerOfEZ6k=) 6: 34362e31382e39312e302f32342d3234203d3e20323032373932.roa (hash: ntblaebzWfMZkapnZj/wCZOlMJjioVqZTa39aOgNWdQ=) 7: 34362e31382e38392e302f32342d3234203d3e203134323933.roa (hash: eaFzGlJw258kJsKfSKUPYmqK68JrgHotUuQnQX7sY90=) 8: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: 91SwPNMBy8nn7fdysG6iTlo0vNCXvWBlZugOqN3HUmM=) 9: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (hash: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c5:ec:52:90:77:62:cb:b5:8d:da:20:d5:9c:6c:da:21:65:a0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Jun 12 22:37:19 2026 GMT Not After : Jun 14 01:08:19 2026 GMT Subject: CN=739F84B38AF334CFD886CA1E39C3156FF5D27D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:1f:2d:f5:67:1b:b7:1d:56:2c:53:bd:2b: 14:69:77:96:41:04:3f:7c:c6:b0:d7:03:e1:8d:39: ab:52:85:53:29:a5:aa:05:6f:d9:d4:75:44:aa:5b: b2:b9:c5:35:06:fa:bb:6f:1e:35:39:81:67:0e:2d: 48:42:1d:b9:56:34:d5:a6:b2:77:8a:17:0f:d1:07: 81:77:03:aa:25:2e:57:07:b4:2a:86:f6:a5:2a:65: e8:1b:5a:1a:ba:0d:2b:58:15:32:77:a5:51:00:7c: 1c:3e:be:0d:55:2b:18:c0:3a:b2:51:93:84:66:80: b7:1f:25:9d:7a:70:ec:2a:cd:18:5b:bd:e5:73:03: 26:49:e3:d4:e4:5b:d4:74:8e:d6:67:9e:33:6c:15: 59:25:0a:26:5a:fe:0a:a6:fd:b3:19:84:48:d3:1e: 1e:d4:a7:71:6a:6b:29:e6:0d:44:e9:59:6d:e0:f8: 3d:2f:b7:39:39:db:3d:fb:b6:e2:d6:dc:6e:81:11: 1e:9f:3c:d8:da:ee:b3:1a:2c:f7:74:5b:7c:59:78: 93:7d:bc:a4:10:9f:b0:c0:70:d3:7f:18:28:be:c3: d1:48:eb:09:ee:1d:13:0d:90:c1:9b:f1:3a:4f:c4: c3:b9:57:b5:0c:6f:82:0c:4a:6a:01:42:d3:d6:84: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:84:B3:8A:F3:34:CF:D8:86:CA:1E:39:C3:15:6F:F5:D2:7D:2C X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:02:e4:2a:7e:01:6e:1e:a4:ab:85:5f:64:99:24:a2:b2:19: fd:95:c0:53:69:bd:4a:60:47:fc:57:01:e6:20:12:1f:9e:ba: 71:1c:74:1e:2c:59:84:62:fd:b6:43:e3:f1:3f:1f:5e:57:f9: 20:13:18:f0:2a:dc:ef:28:16:ce:4f:23:5c:20:49:61:5c:a5: a0:90:e1:63:46:c2:d1:a3:9c:aa:4e:91:2d:83:cd:a6:3f:4d: 08:12:33:96:2b:4b:05:9c:43:b1:3e:a8:d4:b2:ab:02:34:16: 7c:8a:dd:e7:52:a6:08:32:b2:e4:ae:b2:db:1a:1d:59:3d:53: 7e:5e:d0:0b:38:6e:a5:76:7b:ab:17:bd:11:48:ea:74:f0:0e: 1b:6e:81:ec:4f:3a:c5:a5:b2:f4:3e:24:ef:5b:50:72:43:34: 37:97:a7:78:84:68:4d:33:e9:ef:44:be:05:58:fc:39:b5:6b: 66:f2:99:23:c3:8d:a3:4c:dd:f7:2d:18:5e:eb:cb:a0:d1:62: 45:92:c8:3a:4f:69:ac:78:dd:8c:f3:97:49:2a:ad:b2:1b:95: 1e:a7:d7:98:cf:90:a7:06:9b:bd:60:19:2a:2d:94:49:de:37: 02:a6:ce:11:8d:36:92:c7:a7:d0:89:8d:5e:b8:08:08:e4:fe: 3e:7e:05:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNsXsUpB3Ysu1jdog1Zxs2iFloLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA2MTIyMjM3MTlaFw0yNjA2MTQwMTA4MTlaMDMxMTAvBgNV BAMTKDczOUY4NEIzOEFGMzM0Q0ZEODg2Q0ExRTM5QzMxNTZGRjVEMjdEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEh8t9Wcbtx1WLFO9KxRpd5ZB BD98xrDXA+GNOatShVMppaoFb9nUdUSqW7K5xTUG+rtvHjU5gWcOLUhCHblWNNWm sneKFw/RB4F3A6olLlcHtCqG9qUqZegbWhq6DStYFTJ3pVEAfBw+vg1VKxjAOrJR k4RmgLcfJZ16cOwqzRhbveVzAyZJ49TkW9R0jtZnnjNsFVklCiZa/gqm/bMZhEjT Hh7Up3FqaynmDUTpWW3g+D0vtzk52z37tuLW3G6BER6fPNja7rMaLPd0W3xZeJN9 vKQQn7DAcNN/GCi+w9FI6wnuHRMNkMGb8TpPxMO5V7UMb4IMSmoBQtPWhC/PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc5+Es4rzNM/YhsoeOcMVb/XSfSwwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwLkKn4Bbh6kq4VfZJkk orIZ/ZXAU2m9SmBH/FcB5iASH566cRx0HixZhGL9tkPj8T8fXlf5IBMY8Crc7ygW zk8jXCBJYVyloJDhY0bC0aOcqk6RLYPNpj9NCBIzlitLBZxDsT6o1LKrAjQWfIrd 51KmCDKy5K6y2xodWT1Tfl7QCzhupXZ7qxe9EUjqdPAOG26B7E86xaWy9D4k71tQ ckM0N5eneIRoTTPp70S+BVj8ObVrZvKZI8ONo0zd9y0YXuvLoNFiRZLIOk9prHjd jPOXSSqtshuVHqfXmM+QpwabvWAZKi2USd43AqbOEY02ksen0ImNXrgICOT+Pn4F Zg== -----END CERTIFICATE-----Generated at Sat Jun 13 11:39:32 2026 by rpki-client