$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: t1DE1081iW9vu/qqW2soOIBNWEiLNv3YxjbZoW1w6lg= Subject key identifier: 2D:D3:82:A5:D0:17:FA:0E:AA:48:8F:94:D7:F4:02:41:6F:6A:FB:CE Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 76A684A9069C4C8480F5EB8CBFECDF5424F161C7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 01CE Signing time: Tue 22 Sep 2026 12:36:04 +0000 Manifest this update: Tue 22 Sep 2026 12:31:04 +0000 Manifest next update: Wed 23 Sep 2026 16:03:04 +0000 Files and hashes: 1: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: 4I6EIWrDwrtOYHgL0+kIlqvQo6eobeE8F58+3tVSimg=) 2: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: tGvt7Se01XwijlH0xJfhQXd0kFm91aUEgeT7V3OGe7U=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: JXehGAGbOBOHwTU/V09hXrcXEdlOBAJOY83kYkmYZm8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a6:84:a9:06:9c:4c:84:80:f5:eb:8c:bf:ec:df:54:24:f1:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Sep 22 12:31:04 2026 GMT Not After : Sep 23 16:03:04 2026 GMT Subject: CN=2DD382A5D017FA0EAA488F94D7F402416F6AFBCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:9f:fe:8d:50:37:1c:cc:55:e7:52:f5:bd: df:25:bc:49:6a:3e:71:90:64:d8:63:63:79:9d:cc: 39:e1:4f:da:7b:6c:db:00:3b:6b:28:8d:72:a0:a7: 71:7e:5a:af:6c:65:ed:7e:4f:2f:da:a5:cc:1e:b4: c4:60:a9:37:dd:cc:26:3d:7c:3e:95:bf:65:c3:a5: 97:1f:2a:f9:c4:41:da:c6:5b:47:70:41:67:02:58: 9b:d2:54:f8:34:86:da:01:37:94:26:28:27:d7:8d: 7d:6b:11:47:06:39:d3:5c:dd:67:b8:58:7b:da:ff: 1e:aa:0d:26:b1:0f:58:38:78:3a:3d:53:73:d1:e2: a4:c1:47:0a:00:36:9d:3d:c9:c7:8b:41:da:e0:1e: 19:88:c6:fe:22:e7:75:98:76:7a:2e:d9:c5:89:3e: 69:8e:d1:f0:12:f3:22:32:e2:48:db:8e:34:f8:f4: 7d:47:47:03:ae:43:94:25:dc:6a:1f:e3:48:dc:7b: fd:92:50:7e:8d:31:10:2f:cd:aa:e9:5d:d1:54:15: ac:38:fa:8f:4a:2c:21:f8:4d:0d:6d:d7:a0:69:07: 93:ea:35:5d:d3:78:2e:22:1a:cb:ff:78:f0:9d:17: 08:ba:d8:63:cb:b2:09:dd:35:68:2f:13:ae:8b:0b: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:82:A5:D0:17:FA:0E:AA:48:8F:94:D7:F4:02:41:6F:6A:FB:CE X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:04:63:ca:7a:53:a0:6e:2e:bd:b8:b2:21:17:6e:bd:57: c6:f5:3e:bd:7b:51:ca:6c:b5:00:66:09:c0:c5:c8:70:c4:43: 65:b3:8e:78:b6:11:83:b1:2a:65:d3:57:99:bc:68:3e:40:64: 99:96:83:a9:58:f0:ad:d0:4c:23:ca:b2:6f:2d:28:f0:74:18: 4b:45:87:71:9a:19:de:88:19:81:4d:9d:17:e5:0f:dc:36:f1: 3d:8d:82:86:8e:58:ba:7c:64:b3:b7:bd:61:79:a6:a3:56:83: dc:00:59:7c:95:f2:a2:fb:cc:3c:b4:54:3a:91:71:0c:e5:bd: a1:d1:cc:ca:96:0a:97:fc:d1:c6:8a:09:ec:30:4c:71:9a:20: a6:14:cd:9d:5f:f6:df:7b:f4:64:61:78:7f:1e:93:04:50:e3: 5c:13:08:30:78:e1:80:a0:95:9a:d5:bc:60:50:b5:4f:76:37: 35:98:47:f7:7e:9e:9c:b7:a4:a2:68:ae:0e:3d:10:71:d4:97: 57:e1:4e:68:9c:2e:e1:db:98:43:c2:0d:b2:6b:5d:d8:1a:9b: 32:2c:a4:d3:c2:44:b5:6d:9c:f8:99:bf:26:51:9d:38:0f:1b: 97:63:95:d8:45:38:dd:7c:fc:c5:6a:ea:4b:de:32:a6:ae:b9: 07:29:32:2e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdqaEqQacTISA9euMv+zfVCTxYccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA5MjIxMjMxMDRaFw0yNjA5MjMxNjAzMDRaMDMxMTAvBgNV BAMTKDJERDM4MkE1RDAxN0ZBMEVBQTQ4OEY5NEQ3RjQwMjQxNkY2QUZCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXV5/+jVA3HMxV51L1vd8lvElq PnGQZNhjY3mdzDnhT9p7bNsAO2sojXKgp3F+Wq9sZe1+Ty/apcwetMRgqTfdzCY9 fD6Vv2XDpZcfKvnEQdrGW0dwQWcCWJvSVPg0htoBN5QmKCfXjX1rEUcGOdNc3We4 WHva/x6qDSaxD1g4eDo9U3PR4qTBRwoANp09yceLQdrgHhmIxv4i53WYdnou2cWJ PmmO0fAS8yIy4kjbjjT49H1HRwOuQ5Ql3Gof40jce/2SUH6NMRAvzarpXdFUFaw4 +o9KLCH4TQ1t16BpB5PqNV3TeC4iGsv/ePCdFwi62GPLsgndNWgvE66LCxDjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULdOCpdAX+g6qSI+U1/QCQW9q+84wHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMVARj ynpToG4uvbiyIRduvVfG9T69e1HKbLUAZgnAxchwxENls454thGDsSpl01eZvGg+ QGSZloOpWPCt0EwjyrJvLSjwdBhLRYdxmhneiBmBTZ0X5Q/cNvE9jYKGjli6fGSz t71heaajVoPcAFl8lfKi+8w8tFQ6kXEM5b2h0czKlgqX/NHGignsMExxmiCmFM2d X/bfe/RkYXh/HpMEUONcEwgweOGAoJWa1bxgULVPdjc1mEf3fp6ct6SiaK4OPRBx 1JdX4U5onC7h25hDwg2ya13YGpsyLKTTwkS1bZz4mb8mUZ04DxuXY5XYRTjdfPzF aupL3jKmrrkHKTIu -----END CERTIFICATE-----Generated at Tue Sep 22 18:54:52 2026 by rpki-client