$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft File: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json) Hash identifier: fV4IBLgXuAmBhHGDHcP0kdHj+CfeNsyC63W0J6pQoKI= Subject key identifier: 49:62:D0:58:F5:9D:FA:07:9D:10:34:F1:3E:E7:A9:B6:E9:05:37:34 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 014D6FD98E37A7F04DE1E23E969128849D608F04 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft Manifest number: 6E Signing time: Fri 17 Apr 2026 02:59:42 +0000 Manifest this update: Fri 17 Apr 2026 02:54:42 +0000 Manifest next update: Sat 18 Apr 2026 03:36:42 +0000 Files and hashes: 1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: YLSh/w6RJ7E9aV1AsWbD/aRS+Eo1BVhAXAL41vyRNPw=) 2: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=) 3: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=) 4: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=) 5: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=) 6: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=) 7: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=) 8: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4d:6f:d9:8e:37:a7:f0:4d:e1:e2:3e:96:91:28:84:9d:60:8f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Apr 17 02:54:42 2026 GMT Not After : Apr 18 03:36:42 2026 GMT Subject: CN=4962D058F59DFA079D1034F13EE7A9B6E9053734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:d9:df:53:01:ba:48:de:7c:91:06:df:0a: 78:cd:7a:73:e8:89:04:a0:83:09:b3:dd:33:08:df: f7:22:18:ff:63:e5:b5:00:28:52:d6:ed:95:2d:ac: 78:b0:42:e1:99:9c:d6:22:ba:32:e9:e3:35:b0:08: 32:a4:0a:be:69:ca:59:b5:15:f6:75:65:6b:e1:d3: 77:f4:38:ab:df:bb:80:7c:ba:e5:89:6f:1e:45:e5: d8:81:01:f3:92:7b:81:24:14:fa:00:91:9b:b5:b6: d7:a1:77:e4:a6:9e:90:d8:78:94:d5:b3:71:fd:56: 99:34:15:89:fc:c2:11:24:9a:56:58:60:02:bc:8f: 8a:da:7b:f1:9f:9d:3a:e0:86:20:5e:54:ab:b1:f0: de:99:a8:37:96:d6:74:ae:32:9d:1b:60:0d:81:c8: 35:ac:4b:37:eb:bb:6c:7f:da:4f:37:ea:e6:b1:21: 7a:6f:12:40:c4:4b:f2:e8:23:8b:21:81:dc:96:46: f1:cc:af:da:32:05:3b:92:3f:41:f2:4d:75:7d:4d: f2:97:91:f1:c0:3d:5e:47:05:bb:5f:d4:7c:5a:c1: be:dc:16:b0:a0:ca:3f:df:76:23:ae:93:36:c3:77: 3f:23:1d:7d:23:14:a5:8a:f0:bf:dc:48:3f:de:b4: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:D0:58:F5:9D:FA:07:9D:10:34:F1:3E:E7:A9:B6:E9:05:37:34 X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c7:89:06:eb:4d:10:f4:49:df:93:8c:71:16:47:26:97:0c: 82:3e:8f:b8:21:38:62:7a:8c:a3:29:bd:e3:ab:a3:f8:5f:25: da:42:cc:32:4e:14:52:04:78:53:31:89:bd:b9:23:c2:69:6a: 4e:b9:0e:13:3f:42:ba:89:54:ff:17:04:9d:4b:6f:c3:ae:33: 00:2f:a5:4f:f4:83:e3:12:94:6a:13:4c:50:81:04:34:cc:16: 08:64:23:09:41:b7:41:d3:2a:f7:8a:de:44:03:0a:dc:17:1b: 00:ec:f5:02:ab:bb:3b:e8:61:54:60:10:6e:00:e2:e2:25:60: c0:94:62:b0:4e:eb:90:8c:23:fe:88:46:3e:49:66:60:30:50: e7:3f:5f:ed:a8:e9:c7:c6:fa:94:c6:60:d2:14:cf:b1:59:b9: df:1b:d5:7f:fa:8b:16:45:df:d6:0d:bc:a7:96:99:56:cc:b5: 20:4d:b5:db:63:7d:8a:95:57:7b:3c:2a:6d:fd:db:9a:01:c3: 20:83:61:7a:7d:db:77:20:29:ff:2b:3b:44:6e:da:c8:48:df: 24:da:e7:23:7e:b4:ad:29:40:96:5f:3b:b3:0e:b8:83:c3:8a: 7f:d2:96:b9:a1:94:c9:9a:a1:a7:68:12:02:0c:dc:7a:f0:be: 68:a8:0c:6e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAU1v2Y43p/BN4eI+lpEohJ1gjwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjA0MTcwMjU0NDJaFw0yNjA0MTgwMzM2NDJaMDMxMTAvBgNV BAMTKDQ5NjJEMDU4RjU5REZBMDc5RDEwMzRGMTNFRTdBOUI2RTkwNTM3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/tnfUwG6SN58kQbfCnjNenPo iQSggwmz3TMI3/ciGP9j5bUAKFLW7ZUtrHiwQuGZnNYiujLp4zWwCDKkCr5pylm1 FfZ1ZWvh03f0OKvfu4B8uuWJbx5F5diBAfOSe4EkFPoAkZu1ttehd+SmnpDYeJTV s3H9Vpk0FYn8whEkmlZYYAK8j4rae/GfnTrghiBeVKux8N6ZqDeW1nSuMp0bYA2B yDWsSzfru2x/2k836uaxIXpvEkDES/LoI4shgdyWRvHMr9oyBTuSP0HyTXV9TfKX kfHAPV5HBbtf1Hxawb7cFrCgyj/fdiOukzbDdz8jHX0jFKWK8L/cSD/etMypAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSWLQWPWd+gedEDTxPueptukFNzQwHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2YwN2M5M2VkLWI4MTktNDVlOC05NDVkLTQyNjM2ZDQ3MTcxMC8wL0FFMkUxREVG QUQ4MUZGMzlFMDI4M0VENjFCQzlGOURDNkRBOUJFOTYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPx4kG 600Q9Enfk4xxFkcmlwyCPo+4IThieoyjKb3jq6P4XyXaQswyThRSBHhTMYm9uSPC aWpOuQ4TP0K6iVT/FwSdS2/DrjMAL6VP9IPjEpRqE0xQgQQ0zBYIZCMJQbdB0yr3 it5EAwrcFxsA7PUCq7s76GFUYBBuAOLiJWDAlGKwTuuQjCP+iEY+SWZgMFDnP1/t qOnHxvqUxmDSFM+xWbnfG9V/+osWRd/WDbynlplWzLUgTbXbY32KlVd7PCpt/dua AcMgg2F6fdt3ICn/KztEbtrISN8k2ucjfrStKUCWXzuzDriDw4p/0pa5oZTJmqGn aBICDNx68L5oqAxu -----END CERTIFICATE-----Generated at Fri Apr 17 18:54:50 2026 by rpki-client