$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: skB0zls2AmhayT7odG8+35MllI0RMbAhcJu5/ftm8fg= Subject key identifier: 6F:99:5C:5D:9E:10:7C:F9:D7:56:A4:39:F0:4E:32:5C:1B:D9:75:CC Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 06134785F31470284DAABBEDA28BECC6D77FC186 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: FA Signing time: Thu 16 Apr 2026 20:46:22 +0000 Manifest this update: Thu 16 Apr 2026 20:41:22 +0000 Manifest next update: Sat 18 Apr 2026 00:08:22 +0000 Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 2: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) 3: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: 8WJ4Vi8XLFBojyvSto1t538LzyK+gjU75BjlUeBQmqQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:13:47:85:f3:14:70:28:4d:aa:bb:ed:a2:8b:ec:c6:d7:7f:c1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Apr 16 20:41:22 2026 GMT Not After : Apr 18 00:08:22 2026 GMT Subject: CN=6F995C5D9E107CF9D756A439F04E325C1BD975CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:61:22:fe:73:17:c0:dc:2a:5b:57:63:d2: 15:78:67:dd:76:02:d9:d6:c9:ce:44:56:a4:5c:e8: 15:30:3f:74:32:f2:11:6f:5b:50:40:d7:a9:76:c5: 58:22:12:e3:0b:9f:aa:1f:42:3b:53:da:ef:e9:5d: 6e:18:13:2d:b9:17:8b:8e:2b:9f:f2:5d:32:cd:7b: 54:d2:2d:27:72:58:a0:32:41:4d:a5:0e:8f:94:d1: e6:d3:ed:7c:9a:71:c9:67:95:f8:09:6d:f7:76:02: 3d:47:93:d9:a3:79:b1:f5:e3:11:40:fc:12:ee:34: ed:4e:66:0b:b9:e8:a8:0c:14:cc:77:3f:61:72:92: 5f:76:8c:7e:0a:c1:79:77:c4:5d:eb:db:fb:d3:c8: 15:a3:9d:3a:b7:07:38:8b:05:42:05:9d:4f:5b:8c: e3:83:b5:20:6a:08:57:0c:34:99:1d:38:ee:6c:29: 19:2c:ec:0c:15:9b:c5:10:1d:ef:ad:3a:94:cf:77: 0a:2b:b0:26:9f:a1:78:05:01:36:41:c8:07:7f:f1: c0:37:42:15:ab:a5:2a:ca:a5:9f:70:ad:c1:3a:41: 4f:d3:57:13:c0:9d:d5:7e:2d:69:0e:88:a5:8b:78: 52:41:41:6f:cf:1c:3f:c8:8e:ef:0f:0d:6f:66:2b: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:99:5C:5D:9E:10:7C:F9:D7:56:A4:39:F0:4E:32:5C:1B:D9:75:CC X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:db:44:69:1e:58:4a:a6:bc:2e:2b:a3:1e:6f:51:4c:5b:8b: 5b:72:59:d9:1b:e8:04:ff:2a:5a:ee:ff:4b:9f:36:4c:56:7a: 12:ef:1a:b9:26:46:9b:c3:a8:3d:f8:b0:e6:b7:c0:f9:4b:c6: 58:f8:90:69:7b:86:29:de:bc:72:df:a1:57:87:87:fe:b5:ce: 7c:29:84:3a:c5:3c:52:9a:6d:4b:91:45:4a:65:2c:aa:7e:cd: a4:37:f0:5e:4a:d0:e8:4a:42:85:36:cf:19:77:a8:0b:c5:df: 9a:f5:97:85:ae:c2:d1:92:5e:67:52:46:20:e2:62:15:99:a9: 55:44:60:50:0b:79:37:7f:07:dd:39:ea:5c:62:04:17:14:0a: 7c:8f:72:c6:b2:b7:81:51:71:35:4d:62:bc:a9:fc:c8:c6:9c: 7c:fe:e4:aa:9d:d9:c2:1a:29:65:96:e4:c0:4f:7a:79:71:b6: e1:0a:81:4e:e7:ba:7b:80:1a:08:dc:cf:65:b5:ae:4e:a4:30: 1b:65:aa:95:91:40:ae:35:f0:12:04:23:51:4c:bc:72:f0:a5: bb:89:c5:5d:6b:60:e6:0f:6c:d6:1e:66:ea:3d:08:02:84:b2: ea:ef:71:6e:e6:07:4e:34:5d:94:a7:6b:1e:bb:15:b0:e3:6e: 4f:e1:50:85 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBhNHhfMUcChNqrvtoovsxtd/wYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNjA0MTYyMDQxMjJaFw0yNjA0MTgwMDA4MjJaMDMxMTAvBgNV BAMTKDZGOTk1QzVEOUUxMDdDRjlENzU2QTQzOUYwNEUzMjVDMUJEOTc1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8mEi/nMXwNwqW1dj0hV4Z912 AtnWyc5EVqRc6BUwP3Qy8hFvW1BA16l2xVgiEuMLn6ofQjtT2u/pXW4YEy25F4uO K5/yXTLNe1TSLSdyWKAyQU2lDo+U0ebT7XyacclnlfgJbfd2Aj1Hk9mjebH14xFA /BLuNO1OZgu56KgMFMx3P2Fykl92jH4KwXl3xF3r2/vTyBWjnTq3BziLBUIFnU9b jOODtSBqCFcMNJkdOO5sKRks7AwVm8UQHe+tOpTPdworsCafoXgFATZByAd/8cA3 QhWrpSrKpZ9wrcE6QU/TVxPAndV+LWkOiKWLeFJBQW/PHD/Iju8PDW9mK7nJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUb5lcXZ4QfPnXVqQ58E4yXBvZdcwwHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP20Rp HlhKprwuK6Meb1FMW4tbclnZG+gE/ypa7v9LnzZMVnoS7xq5Jkabw6g9+LDmt8D5 S8ZY+JBpe4Yp3rxy36FXh4f+tc58KYQ6xTxSmm1LkUVKZSyqfs2kN/BeStDoSkKF Ns8Zd6gLxd+a9ZeFrsLRkl5nUkYg4mIVmalVRGBQC3k3fwfdOepcYgQXFAp8j3LG sreBUXE1TWK8qfzIxpx8/uSqndnCGillluTAT3p5cbbhCoFO57p7gBoI3M9lta5O pDAbZaqVkUCuNfASBCNRTLxy8KW7icVda2DmD2zWHmbqPQgChLLq73Fu5gdONF2U p2seuxWw425P4VCF -----END CERTIFICATE-----Generated at Fri Apr 17 15:12:40 2026 by rpki-client