$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json) Hash identifier: YGtMWnPUJgw8AL1PzpZDKeekf3nG1xh9fDk1X5U+9uA= Subject key identifier: AA:BE:2D:4E:32:68:D0:92:08:02:1E:D4:85:75:07:41:F5:DB:A1:46 Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Certificate serial: 5AE612D3640A0B3455E75F92D35AE3680E2967E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft Manifest number: 12 Signing time: Fri 17 Apr 2026 02:13:37 +0000 Manifest this update: Fri 17 Apr 2026 02:08:37 +0000 Manifest next update: Sat 18 Apr 2026 03:44:37 +0000 Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: 15KBoNt9cDLs1UhiMqU5PqY1o9SRwHI9rivyTOf9Xps=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e6:12:d3:64:0a:0b:34:55:e7:5f:92:d3:5a:e3:68:0e:29:67:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD Validity Not Before: Apr 17 02:08:37 2026 GMT Not After : Apr 18 03:44:37 2026 GMT Subject: CN=AABE2D4E3268D09208021ED485750741F5DBA146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4d:a5:28:41:d3:99:1c:58:3f:6c:3f:71:94: b1:03:bd:16:6a:e4:16:1e:09:78:29:dc:4e:9a:f1: 4e:93:eb:b3:57:35:ff:ea:8c:f1:7b:35:af:10:36: ee:b3:d0:64:e2:a7:e4:ad:8f:83:96:91:a5:fe:0e: d4:9d:fd:d3:76:a9:23:6b:51:86:44:de:18:52:67: d8:b5:5a:5b:91:f8:3c:80:29:fc:ff:4e:ec:ec:30: f9:e1:be:41:83:20:a9:42:03:0b:a3:c1:74:da:96: 1d:4d:15:9b:ba:e1:56:34:79:53:fc:90:7c:e7:8d: e4:71:aa:ea:81:fe:b2:80:05:73:c4:12:c6:54:a8: aa:e0:d9:29:c1:64:9b:0e:81:2f:57:2d:c7:dd:9a: ae:2b:e8:fd:53:5f:87:77:1e:d5:ef:af:96:c2:81: 4d:4f:28:48:06:d2:2d:e5:f7:8a:32:89:72:4e:b6: 92:15:2e:bd:99:fd:4b:75:cc:b7:1d:a9:41:a8:6b: 83:f8:c2:f3:cb:e5:10:88:ce:af:20:18:d1:69:86: 6d:0c:d7:c3:aa:d0:fb:e7:f1:15:bc:e6:9f:52:05: 50:81:42:e0:65:f3:81:d6:09:3f:73:3e:b7:91:5f: d0:89:ce:ba:47:67:eb:cf:20:47:71:51:f8:24:2a: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:2D:4E:32:68:D0:92:08:02:1E:D4:85:75:07:41:F5:DB:A1:46 X509v3 Authority Key Identifier: keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2e:99:87:e3:dc:a2:6f:4e:82:1e:6c:bc:04:ba:13:f7:20: b6:e9:a4:c7:90:90:20:27:8b:b3:ce:70:55:95:ab:b1:eb:5f: 54:fd:5f:3f:e6:e3:ca:d9:70:dd:f5:1a:93:fb:3b:bf:96:b6: dc:01:6f:88:3f:cf:98:54:50:a6:b8:c2:d7:4c:6f:cd:72:8b: 1a:a4:18:dd:7f:5b:ea:63:a2:26:8c:dd:4f:27:30:b0:c4:88: 06:74:bf:f1:c7:1d:e5:fd:1f:40:5e:48:f8:43:99:06:d5:c8: 4f:38:75:14:4a:91:2d:30:a2:04:60:72:0a:f8:4f:5d:f9:33: 1a:ac:bf:3c:8a:58:de:8b:c4:be:5f:7f:60:db:d9:de:0d:ee: 9d:76:bb:6e:dd:35:01:b6:de:96:02:28:98:60:e0:39:1c:85: d9:ee:e2:1d:5f:70:c6:ef:07:e6:bc:cd:4b:9d:b8:7a:a8:89: c7:01:6a:a2:03:fd:75:f8:46:e8:f6:fa:20:6e:01:83:45:13: 02:2b:1e:ae:98:76:71:74:1a:f6:06:a0:6e:55:ec:b6:5f:10: 78:50:f9:81:04:f5:7b:61:49:2b:2c:0a:3e:e4:64:0c:c5:ec: 22:35:ca:05:24:96:fe:e8:bd:da:55:75:91:74:66:6f:1b:94: 68:fd:3e:f6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWuYS02QKCzRV51+S01rjaA4pZ+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZF NjIwRkVBRDAeFw0yNjA0MTcwMjA4MzdaFw0yNjA0MTgwMzQ0MzdaMDMxMTAvBgNV BAMTKEFBQkUyRDRFMzI2OEQwOTIwODAyMUVENDg1NzUwNzQxRjVEQkExNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQTaUoQdOZHFg/bD9xlLEDvRZq 5BYeCXgp3E6a8U6T67NXNf/qjPF7Na8QNu6z0GTip+Stj4OWkaX+DtSd/dN2qSNr UYZE3hhSZ9i1WluR+DyAKfz/TuzsMPnhvkGDIKlCAwujwXTalh1NFZu64VY0eVP8 kHznjeRxquqB/rKABXPEEsZUqKrg2SnBZJsOgS9XLcfdmq4r6P1TX4d3HtXvr5bC gU1PKEgG0i3l94oyiXJOtpIVLr2Z/Ut1zLcdqUGoa4P4wvPL5RCIzq8gGNFphm0M 18Oq0Pvn8RW85p9SBVCBQuBl84HWCT9zPreRX9CJzrpHZ+vPIEdxUfgkKvaLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqr4tTjJo0JIIAh7UhXUHQfXboUYwHwYDVR0j BBgwFoAUouQchNj4z1G1ux44VoN5D+Yg/q0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4NGYyZjItNDY3My00NGU2LWFjMjMtN2ZmOTU0YTEw M2Y4LzAvQTJFNDFDODREOEY4Q0Y1MUI1QkIxRTM4NTY4Mzc5MEZFNjIwRkVBRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy9BMkU0MUM4NEQ4RjhDRjUxQjVCQjFFMzg1 NjgzNzkwRkU2MjBGRUFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODRmMmYyLTQ2NzMtNDRlNi1hYzIzLTdmZjk1NGExMDNmOC8wL0EyRTQxQzg0 RDhGOENGNTFCNUJCMUUzODU2ODM3OTBGRTYyMEZFQUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnLpmH 49yib06CHmy8BLoT9yC26aTHkJAgJ4uzznBVlaux619U/V8/5uPK2XDd9RqT+zu/ lrbcAW+IP8+YVFCmuMLXTG/NcosapBjdf1vqY6ImjN1PJzCwxIgGdL/xxx3l/R9A Xkj4Q5kG1chPOHUUSpEtMKIEYHIK+E9d+TMarL88iljei8S+X39g29neDe6ddrtu 3TUBtt6WAiiYYOA5HIXZ7uIdX3DG7wfmvM1Lnbh6qInHAWqiA/11+Ebo9vogbgGD RRMCKx6umHZxdBr2BqBuVey2XxB4UPmBBPV7YUkrLAo+5GQMxewiNcoFJJb+6L3a VXWRdGZvG5Ro/T72 -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:57 2026 by rpki-client