$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: 39wBsOc4SwHA2PGL/CCEtXl7c+Me3nnCfjpq3oA4a4k= Subject key identifier: DE:B5:DD:2B:94:3C:D5:27:07:9D:9F:39:41:7E:B1:9D:6F:B2:94:B2 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 529CF22C80F034370D69B1DF3C37684AB3EB622F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 0658 Signing time: Thu 16 Apr 2026 15:47:46 +0000 Manifest this update: Thu 16 Apr 2026 15:42:46 +0000 Manifest next update: Fri 17 Apr 2026 18:03:46 +0000 Files and hashes: 1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: nIEXND3uuHkEgh48YlG6CDaPNdC9DG7vNGuwfy9gs28=) 2: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: wZK8GKavAyHxdXi2NXubIUtrqAxE1wgx7MB4jomVNVo=) 3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: Pxf4B7ZT6gV1TWVd3qoH34uVviW8HXPSyFTn+jTKS9w=) 4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: m4JDjuZJDmmChmmlFAMJ8Bw8b2ZsdAh0iDbkWo79PPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9c:f2:2c:80:f0:34:37:0d:69:b1:df:3c:37:68:4a:b3:eb:62:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Apr 16 15:42:46 2026 GMT Not After : Apr 17 18:03:46 2026 GMT Subject: CN=DEB5DD2B943CD527079D9F39417EB19D6FB294B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:f9:90:04:e9:1d:26:27:7d:68:65:cf:89: 30:8b:4f:3e:e0:84:46:bd:c0:f7:38:32:51:fb:5b: 93:3d:57:9a:c1:9a:25:33:fc:ed:e4:1b:d1:8c:c8: 0c:78:c1:6c:33:a0:b7:bd:d2:5a:bf:5b:38:47:3f: dd:9c:01:48:6c:c6:a7:3c:40:b7:8c:5f:06:a8:1f: b5:cb:b9:b2:27:a3:4d:96:61:de:db:5d:4f:06:76: 9b:0a:43:26:6b:4b:36:f2:d9:11:d0:0b:3a:26:53: 05:99:3a:43:5a:35:59:71:84:4f:76:28:fa:d2:04: 6f:71:b0:cb:f7:0f:e4:4c:d2:4c:fb:07:fd:2b:12: fe:33:5f:52:cb:33:0c:73:fb:89:74:fa:57:fc:7b: 3f:41:64:18:b5:bb:ed:74:da:e9:78:3e:fd:50:a6: d2:8c:ab:7f:3b:39:a7:ad:0d:28:80:ba:bb:db:1d: 99:ff:c6:c2:d1:cf:5b:4f:92:05:61:d9:62:2a:5b: de:45:67:aa:fb:8c:fe:c4:df:2a:d4:e6:f3:7e:5c: 79:be:1d:55:54:00:09:13:56:a5:17:bb:f1:5a:66: 6c:13:2a:ad:7e:36:21:d0:38:70:43:d3:f5:1f:90: 10:f8:ae:f9:d3:15:9e:29:cf:a7:e8:f3:53:5a:1f: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B5:DD:2B:94:3C:D5:27:07:9D:9F:39:41:7E:B1:9D:6F:B2:94:B2 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a3:32:43:cf:9d:da:d5:1e:65:6a:93:1d:44:d0:44:46:ce: e7:84:96:59:11:ec:bf:6f:8b:7b:a4:4d:d4:45:f4:ad:1c:d1: c2:b1:4e:87:32:26:af:36:63:76:bc:f3:10:f6:09:59:ba:1c: 29:9b:fa:a2:bb:6a:18:3c:f5:d8:09:f1:1d:81:c7:d7:30:be: c3:18:20:cb:4b:03:8f:60:3b:56:d3:eb:97:5a:8a:79:81:9a: f3:a9:33:d4:d2:ca:8c:c0:9a:af:35:25:98:13:d6:38:15:b1: d6:ac:5a:75:30:76:f9:ef:6d:87:78:19:80:39:ea:b4:c8:d6: e0:35:47:af:8f:55:0d:0d:eb:0d:0b:d1:b0:0c:85:5f:08:5b: ce:66:f5:34:e1:f6:f9:84:75:65:26:f5:8a:df:9a:06:40:40: 0e:d7:94:52:b5:e4:fd:0c:9c:60:b8:15:95:00:4a:3b:e5:73: bd:0a:a7:b5:10:7e:b9:be:98:69:5d:cb:24:ba:e6:8d:d8:f2: 04:0e:6f:af:bf:5e:a8:a5:96:62:68:d3:a8:67:2a:66:66:ac: 58:2a:af:59:0a:5d:22:e8:4c:5b:b3:2b:88:6b:a3:73:3a:78: ca:ee:1c:63:57:e3:7f:ac:aa:b1:3d:31:69:ab:20:b2:3a:45: 89:4b:28:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUpzyLIDwNDcNabHfPDdoSrPrYi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNjA0MTYxNTQyNDZaFw0yNjA0MTcxODAzNDZaMDMxMTAvBgNV BAMTKERFQjVERDJCOTQzQ0Q1MjcwNzlEOUYzOTQxN0VCMTlENkZCMjk0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkfmQBOkdJid9aGXPiTCLTz7g hEa9wPc4MlH7W5M9V5rBmiUz/O3kG9GMyAx4wWwzoLe90lq/WzhHP92cAUhsxqc8 QLeMXwaoH7XLubIno02WYd7bXU8GdpsKQyZrSzby2RHQCzomUwWZOkNaNVlxhE92 KPrSBG9xsMv3D+RM0kz7B/0rEv4zX1LLMwxz+4l0+lf8ez9BZBi1u+102ul4Pv1Q ptKMq387OaetDSiAurvbHZn/xsLRz1tPkgVh2WIqW95FZ6r7jP7E3yrU5vN+XHm+ HVVUAAkTVqUXu/FaZmwTKq1+NiHQOHBD0/UfkBD4rvnTFZ4pz6fo81NaH529AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3rXdK5Q81ScHnZ85QX6xnW+ylLIwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqMyQ8+d2tUeZWqTHUTQ REbO54SWWRHsv2+Le6RN1EX0rRzRwrFOhzImrzZjdrzzEPYJWbocKZv6ortqGDz1 2AnxHYHH1zC+wxggy0sDj2A7VtPrl1qKeYGa86kz1NLKjMCarzUlmBPWOBWx1qxa dTB2+e9th3gZgDnqtMjW4DVHr49VDQ3rDQvRsAyFXwhbzmb1NOH2+YR1ZSb1it+a BkBADteUUrXk/QycYLgVlQBKO+VzvQqntRB+ub6YaV3LJLrmjdjyBA5vr79eqKWW YmjTqGcqZmasWCqvWQpdIuhMW7MriGujczp4yu4cY1fjf6yqsT0xaasgsjpFiUso gw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:24:24 2026 by rpki-client