$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: zdN4P8egFmdKPCOGkwYmE9xf3vbghnPUeIEr8FPbv1s= Subject key identifier: 7F:D1:EC:D1:E0:60:0A:C3:C1:FE:C3:65:11:29:C6:47:EC:2B:3B:A1 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 0AC9035994681C64BDD283E1E71383CA4DBB83DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 0715 Signing time: Tue 28 Jul 2026 17:04:15 +0000 Manifest this update: Tue 28 Jul 2026 16:59:15 +0000 Manifest next update: Wed 29 Jul 2026 20:29:15 +0000 Files and hashes: 1: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: v9cOQZqWofm2N83fG4D/x+xKtLxG2jr4wTOmIQ6scGA=) 2: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=) 3: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=) 4: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=) 5: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 6: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 7: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 8: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) 9: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 10: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 11: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 12: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 13: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=) 14: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: pS/eZrVME59ud2VP8KwPxGWBL24h8w3UQ9ffY1z+hqM=) 15: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 16: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 17: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=) 18: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 19: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=) 20: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 21: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=) 22: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 23: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 24: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 25: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=) 26: 34352e36362e3134382e302f32342d3234203d3e20313337383937.roa (hash: e52/ZEZkONe0FdPltQje0PDwVIXr7SAsT9P6KKB1QMg=) 27: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 28: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) 29: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=) 30: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: j6AST7eH5dTOFWE32Sd37BgdQFtqd4Au0z4GNSD60G0=) 31: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=) 32: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (hash: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=) 33: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 34: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 35: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 36: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=) 37: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 38: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: ckCO7TR7+FOS8cfzD18uh07ljhtm2G97mBL23DKu09I=) 39: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 40: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: MdfTVQ7HqQE/BTej48Bfu9Pqv6K4PX/zinQBHh0QPbw=) 41: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c9:03:59:94:68:1c:64:bd:d2:83:e1:e7:13:83:ca:4d:bb:83:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Jul 28 16:59:15 2026 GMT Not After : Jul 29 20:29:15 2026 GMT Subject: CN=7FD1ECD1E0600AC3C1FEC3651129C647EC2B3BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:d6:98:5c:80:d9:c3:d7:2d:7e:b5:44:80: 8e:67:f9:3a:64:69:fa:23:fe:da:bf:e8:ed:01:28: e0:da:96:1e:5a:4d:a1:f1:22:c9:1d:25:63:29:77: 83:a5:2c:f4:14:be:38:80:a6:56:c0:be:58:5f:7e: 2f:69:6b:3d:43:42:b4:25:1b:04:86:b5:20:86:63: 71:26:25:4d:8c:9d:58:6d:e0:1d:51:d2:1f:fa:8e: 3e:6a:a6:22:dd:c6:d2:a8:90:d3:31:79:52:36:e1: c8:11:32:ab:48:2e:43:f1:38:5c:aa:94:e7:7f:02: 4f:ff:6c:b5:7e:7e:11:9c:d4:db:6a:4f:94:7c:df: 53:26:23:f0:4b:a5:89:58:c8:d3:00:fd:60:c7:8c: c3:cd:07:76:24:d6:ed:38:a0:24:53:3f:d0:de:de: 1b:b7:66:14:45:86:6e:7a:78:9f:b6:f3:9c:22:66: bc:c5:4d:33:4e:cc:06:89:b6:aa:a4:9c:b6:ed:bf: f7:a1:cf:2d:fb:39:84:4d:0d:a0:7f:f8:0a:8a:31: 2d:85:c9:f2:19:b5:0b:94:33:0d:e7:1f:00:8a:65: a0:0d:52:05:1e:38:95:bb:35:c1:f8:39:f1:aa:d0: f4:31:8e:78:cc:33:35:51:b3:f4:e4:36:d2:39:98: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:EC:D1:E0:60:0A:C3:C1:FE:C3:65:11:29:C6:47:EC:2B:3B:A1 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:29:19:53:21:b4:c3:43:06:c3:c8:cd:7d:3e:5e:0c:88:d8: 2b:ff:47:12:1a:fe:56:66:20:f5:e1:b6:03:e8:ae:a3:f8:9d: 6e:86:77:b1:5c:38:f5:05:1e:0c:e0:9c:61:ae:9a:57:18:99: a3:28:da:7e:ff:03:7e:d4:66:b9:03:c1:53:7f:20:33:05:f1: 24:89:e5:99:28:62:4f:17:48:d8:42:90:a7:d8:1f:0d:3f:87: e0:93:27:ae:f7:86:61:a3:ec:41:d2:2c:f1:8b:c0:7b:2c:d1: 87:5a:f7:c9:7d:38:50:e4:60:a2:cf:6d:51:d9:22:22:73:c7: 95:c8:5f:fc:a1:01:c3:96:a8:35:16:b4:e8:27:f4:72:9a:c8: c6:20:ec:eb:e9:d7:c3:81:ca:9c:4b:2b:cd:3f:32:0f:6c:75: 29:02:d2:ab:0b:44:53:8a:67:b5:fe:74:16:27:78:f0:c6:6f: 89:ba:4d:00:97:75:6f:99:1a:36:24:20:97:f0:67:b3:bb:ec: a6:f3:81:70:41:c7:16:39:0c:9d:57:95:b4:97:af:54:51:48: 2b:45:0c:23:4f:bd:46:d2:16:fa:0a:63:d1:e3:97:01:67:99: ed:37:4c:ba:dc:f5:8f:18:35:16:5c:e5:9a:12:d7:53:9f:fe: cc:10:6d:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCskDWZRoHGS90oPh5xODyk27g90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjA3MjgxNjU5MTVaFw0yNjA3MjkyMDI5MTVaMDMxMTAvBgNV BAMTKDdGRDFFQ0QxRTA2MDBBQzNDMUZFQzM2NTExMjlDNjQ3RUMyQjNCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQtaYXIDZw9ctfrVEgI5n+Tpk afoj/tq/6O0BKODalh5aTaHxIskdJWMpd4OlLPQUvjiAplbAvlhffi9paz1DQrQl GwSGtSCGY3EmJU2MnVht4B1R0h/6jj5qpiLdxtKokNMxeVI24cgRMqtILkPxOFyq lOd/Ak//bLV+fhGc1NtqT5R831MmI/BLpYlYyNMA/WDHjMPNB3Yk1u04oCRTP9De 3hu3ZhRFhm56eJ+285wiZrzFTTNOzAaJtqqknLbtv/ehzy37OYRNDaB/+AqKMS2F yfIZtQuUMw3nHwCKZaANUgUeOJW7NcH4OfGq0PQxjnjMMzVRs/TkNtI5mBV1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf9Hs0eBgCsPB/sNlESnGR+wrO6EwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSkZUyG0w0MGw8jNfT5e DIjYK/9HEhr+VmYg9eG2A+iuo/idboZ3sVw49QUeDOCcYa6aVxiZoyjafv8DftRm uQPBU38gMwXxJInlmShiTxdI2EKQp9gfDT+H4JMnrveGYaPsQdIs8YvAeyzRh1r3 yX04UORgos9tUdkiInPHlchf/KEBw5aoNRa06Cf0cprIxiDs6+nXw4HKnEsrzT8y D2x1KQLSqwtEU4pntf50Fid48MZvibpNAJd1b5kaNiQgl/Bns7vspvOBcEHHFjkM nVeVtJevVFFIK0UMI0+9RtIW+gpj0eOXAWeZ7TdMutz1jxg1FlzlmhLXU5/+zBBt qw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:54 2026 by rpki-client