$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft File: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft (raw, json) Hash identifier: S8KpA4gJ+woNwfgMgfieNwvg0qWJCGRR0Rrd8qy+0hI= Subject key identifier: 31:4B:54:25:FD:4B:70:C5:A1:9B:36:B9:C7:73:0A:64:F9:0E:16:15 Authority key identifier: D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D Certificate issuer: /CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Certificate serial: 040A904D1367201EA45D7495AEEB4416DDAC08BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft Manifest number: 06 Signing time: Fri 17 Apr 2026 11:29:01 +0000 Manifest this update: Fri 17 Apr 2026 11:24:01 +0000 Manifest next update: Sat 18 Apr 2026 11:29:01 +0000 Files and hashes: 1: 3138352e3131362e38382e302f32332d3233203d3e2039343537.roa (hash: UwcgnpgH5lCZpsSwlAFwu+mTf1/sL+0UfqvfLDv+iW4=) 2: 3138352e3131362e39312e302f32342d3234203d3e20323132393830.roa (hash: XeH083FL+VcMYfvZ9C2HKGeBt4yco/smeEfJMlgHoi8=) 3: D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl (hash: 84ri4mt8dgw4kxMWk2FYBozhz9cvLWUW28vurTaBQSQ=) 4: 34362e31382e39312e302f32342d3234203d3e20323032373932.roa (hash: ntblaebzWfMZkapnZj/wCZOlMJjioVqZTa39aOgNWdQ=) 5: 34362e31382e39302e302f32342d3234203d3e20323037313538.roa (hash: c3XGP2QOaAegFM0BJ/uAWNxnHJgzHzZj7rsmxO7Bggk=) 6: 34362e31382e39322e302f32322d3232203d3e2039343537.roa (hash: VVrzaeHx3AmdfT9Rn92e13lFTMXROuF+W73HnTkEymk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 11:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:90:4d:13:67:20:1e:a4:5d:74:95:ae:eb:44:16:dd:ac:08:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455dec4f1ebc2a64f5ccc2ee9292731eb82113d Validity Not Before: Apr 17 11:24:01 2026 GMT Not After : Apr 18 11:29:01 2026 GMT Subject: CN=314B5425FD4B70C5A19B36B9C7730A64F90E1615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:5d:76:68:77:86:98:d2:00:14:86:13:01: 99:2e:18:62:3e:25:ed:b3:a3:b7:38:21:60:7f:a0: c9:99:c5:d3:72:03:90:24:7d:cc:1f:d1:3e:90:c3: 3c:36:de:24:fd:06:70:ab:5b:fd:c9:a7:2f:f5:92: b2:d5:5e:f4:b3:5e:4b:b6:62:12:70:e0:6b:a4:76: 71:b9:e4:98:e8:3f:82:08:68:01:ef:ed:6b:45:a3: 65:6a:43:39:88:60:33:46:65:0e:16:cb:10:cc:25: 0f:e2:79:f1:a7:f2:6a:1e:cd:39:79:bb:b5:f2:81: 9b:fd:f2:b5:b1:0a:01:a2:d5:4c:19:70:9e:78:8c: e4:28:c0:1f:d8:a4:4f:81:8b:6a:e0:6c:56:6e:02: ab:55:0d:d2:33:01:5e:05:54:36:26:fe:58:53:b8: f6:f5:d9:17:d3:e6:da:b0:c5:7f:12:8b:00:18:57: 85:f0:30:a3:d3:84:8c:5d:ed:58:31:9c:c7:eb:fe: 67:9e:2e:58:97:f5:dd:2d:35:b4:6b:8c:39:ac:83: 59:07:fe:3d:9a:79:5d:e9:72:5d:a0:9a:c8:d5:98: f4:bc:9b:f5:d7:d5:f4:c2:da:91:9c:ae:28:4e:9b: da:b2:54:6f:4c:6c:10:12:88:d5:f1:0c:8b:c2:8f: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:54:25:FD:4B:70:C5:A1:9B:36:B9:C7:73:0A:64:F9:0E:16:15 X509v3 Authority Key Identifier: keyid:D4:55:DE:C4:F1:EB:C2:A6:4F:5C:CC:2E:E9:29:27:31:EB:82:11:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FXexPHrwqZPXMwu6SknMeuCET0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8d08b30-64c7-404b-9873-2e04bd74c140/0/D455DEC4F1EBC2A64F5CCC2EE9292731EB82113D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b8:93:5b:8d:1d:5d:f7:c9:d6:3d:01:ea:7e:b4:64:c9:8d: 55:40:bd:d0:5c:d0:b6:ae:c3:2b:88:93:51:39:50:6c:b5:2e: a7:52:88:c2:1f:7f:1c:ec:a1:fd:19:ee:7a:ff:02:5a:84:1a: 70:4c:bc:01:1a:3b:dd:fd:ff:a8:87:ab:bf:a1:cd:34:94:6d: 56:63:56:7e:26:7f:68:84:0b:9f:ee:02:f2:2d:0e:59:4d:0d: 0e:b1:6c:bb:b5:4a:fc:4a:87:1b:cc:80:07:25:75:89:7e:0a: a6:9d:04:15:01:cc:dd:ec:a8:f8:30:b9:2e:3d:21:19:a6:06: fc:28:75:f0:33:d6:95:35:e5:a8:9d:12:eb:dd:c5:af:d8:4a: ec:72:2c:bb:dd:59:ac:6b:14:73:f7:9e:27:a8:9d:33:6e:70: 25:0c:a4:9b:38:ce:21:9e:43:70:0e:b6:bf:bf:b9:7a:fc:52: a2:a3:97:b9:bd:8a:cb:e3:28:5c:7e:71:4e:d3:4e:d4:a3:c8: 76:4c:8c:28:6a:8b:fc:1e:31:40:17:b4:48:ba:e1:19:88:0c: 3f:33:6d:c3:6b:bc:cf:bb:59:4f:38:d8:02:44:3e:9c:bd:16: cc:a4:b8:9d:14:b2:f0:27:a0:08:6c:fa:9e:6e:e3:45:8c:9f: d4:98:f6:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBAqQTRNnIB6kXXSVrutEFt2sCLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDQ1NWRlYzRmMWViYzJhNjRmNWNjYzJlZTkyOTI3MzFl YjgyMTEzZDAeFw0yNjA0MTcxMTI0MDFaFw0yNjA0MTgxMTI5MDFaMDMxMTAvBgNV BAMTKDMxNEI1NDI1RkQ0QjcwQzVBMTlCMzZCOUM3NzMwQTY0RjkwRTE2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0V12aHeGmNIAFIYTAZkuGGI+ Je2zo7c4IWB/oMmZxdNyA5Akfcwf0T6Qwzw23iT9BnCrW/3Jpy/1krLVXvSzXku2 YhJw4GukdnG55JjoP4IIaAHv7WtFo2VqQzmIYDNGZQ4WyxDMJQ/iefGn8moezTl5 u7XygZv98rWxCgGi1UwZcJ54jOQowB/YpE+Bi2rgbFZuAqtVDdIzAV4FVDYm/lhT uPb12RfT5tqwxX8SiwAYV4XwMKPThIxd7VgxnMfr/meeLliX9d0tNbRrjDmsg1kH /j2aeV3pcl2gmsjVmPS8m/XX1fTC2pGcrihOm9qyVG9MbBASiNXxDIvCj05RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMUtUJf1LcMWhmza5x3MKZPkOFhUwHwYDVR0j BBgwFoAU1FXexPHrwqZPXMwu6SknMeuCET0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzhkMDhiMzAtNjRjNy00MDRiLTk4NzMtMmUwNGJkNzRj MTQwLzAvRDQ1NURFQzRGMUVCQzJBNjRGNUNDQzJFRTkyOTI3MzFFQjgyMTEzRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFGWGV4UEhyd3FaUFhNd3U2U2tuTWV1 Q0VUMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jOGQwOGIzMC02 NGM3LTQwNGItOTg3My0yZTA0YmQ3NGMxNDAvMC9ENDU1REVDNEYxRUJDMkE2NEY1 Q0NDMkVFOTI5MjczMUVCODIxMTNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7iTW40dXffJ1j0B6n60 ZMmNVUC90FzQtq7DK4iTUTlQbLUup1KIwh9/HOyh/Rnuev8CWoQacEy8ARo73f3/ qIerv6HNNJRtVmNWfiZ/aIQLn+4C8i0OWU0NDrFsu7VK/EqHG8yAByV1iX4Kpp0E FQHM3eyo+DC5Lj0hGaYG/Ch18DPWlTXlqJ0S693Fr9hK7HIsu91ZrGsUc/eeJ6id M25wJQykmzjOIZ5DcA62v7+5evxSoqOXub2Ky+MoXH5xTtNO1KPIdkyMKGqL/B4x QBe0SLrhGYgMPzNtw2u8z7tZTzjYAkQ+nL0WzKS4nRSy8CegCGz6nm7jRYyf1Jj2 DQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:23:33 2026 by rpki-client