$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft File: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json) Hash identifier: MpAYi+w/j9L9cQxP7iObfUaGykE3lUXWMhfgC52uVlw= Subject key identifier: 8A:20:30:A7:56:E5:3B:6E:60:50:25:B5:A9:3C:35:AF:CF:DC:A7:A3 Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 Certificate issuer: /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Certificate serial: 2E732996DAA42A77087DD38E294336F843AAF1DF Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft Manifest number: 5E Signing time: Sat 28 Feb 2026 22:50:30 +0000 Manifest this update: Sat 28 Feb 2026 22:45:30 +0000 Manifest next update: Mon 02 Mar 2026 00:22:30 +0000 Files and hashes: 1: 326130623a346530373a6330303a3a2f33382d3438203d3e203136353039.roa (hash: pYwWKSR7kRM0KTnORj3mN0CwUdnav79KeLH8+zaHrio=) 2: 326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (hash: dqTuq88lK2siPMjsitpQHSHuFkGIuzl+tsULr9aboBE=) 3: 326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa (hash: iEYO5puyDd3JtuHWApK94siOE8CIhNdp34ccmJr583Q=) 4: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=) 5: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: N63oMUHyGdLhwd1MEUV5kRv1EyxgI9TFtWuztE5TADE=) 6: 326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa (hash: VZ809t+f84r83LSHeKOdVeXGx5vzv/VPIXYrF+SljkQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 00:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:73:29:96:da:a4:2a:77:08:7d:d3:8e:29:43:36:f8:43:aa:f1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185 Validity Not Before: Feb 28 22:45:30 2026 GMT Not After : Mar 2 00:22:30 2026 GMT Subject: CN=8A2030A756E53B6E605025B5A93C35AFCFDCA7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0a:09:f4:04:8d:b6:cb:c0:82:51:bf:c8:fa: 12:f6:72:b0:33:13:8c:69:3d:c5:c6:8e:17:00:d7: f3:08:17:c1:a3:7f:ca:b1:56:db:f0:0c:90:26:d5: 6e:71:dc:7e:24:be:4d:b8:2d:dd:28:92:37:0d:21: 71:32:bf:27:9e:df:56:00:36:82:d7:f4:1a:e2:0e: 38:b9:9e:d0:22:c8:67:7c:8a:98:95:ed:ed:b1:5d: d1:3a:94:d4:7e:37:40:5e:0b:74:57:c9:9f:b2:94: c1:49:ba:4e:96:e3:af:18:fc:ae:f4:b2:5a:33:ba: 40:11:80:74:a2:5c:c9:00:f6:21:10:af:b7:7c:a8: 0e:74:90:5d:2c:ac:10:42:d3:c6:be:12:dc:8c:40: b4:4a:f6:1f:8e:04:bd:11:4b:ce:ea:b8:4a:67:e7: 51:07:40:11:40:1b:05:bf:b1:46:34:ed:bc:5d:17: d2:04:1d:eb:0f:a6:59:1d:f0:49:9c:87:46:2e:ce: 5a:94:0e:5d:7c:9b:49:27:25:c9:d4:c8:1d:f3:0d: f7:90:16:f2:84:ca:9f:16:17:49:64:c0:5a:a2:5b: e6:3d:d0:16:84:7f:44:d4:7b:d8:d2:6b:a7:3b:df: 23:f2:49:0c:36:7c:b2:50:0f:6f:e3:e4:6f:dd:95: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:20:30:A7:56:E5:3B:6E:60:50:25:B5:A9:3C:35:AF:CF:DC:A7:A3 X509v3 Authority Key Identifier: keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:da:33:ed:a6:82:86:6f:fa:a9:7a:75:ca:42:ec:bd:49: 6d:a9:28:20:55:a0:4c:42:a4:2c:5a:51:bc:e7:8b:3d:58:1f: bc:87:92:9c:a7:99:fe:3e:61:fa:3b:dc:ae:d1:89:97:bb:d3: b9:0a:79:79:a9:91:1c:a7:ee:ad:5f:da:88:66:68:bb:d6:37: c8:97:79:ae:92:4a:c0:51:75:7c:9c:0e:b2:54:e7:af:de:55: a6:2d:ab:7c:02:6e:d6:a0:3a:99:fa:57:f6:ac:a8:66:e8:60: b6:31:07:75:21:dd:50:31:02:72:9f:20:30:ba:5e:4c:ec:db: a2:11:1e:e1:e0:83:11:43:e1:fc:45:82:a3:a7:69:86:98:2d: 1d:08:c8:ab:a1:b6:7e:5d:c6:1d:4b:48:09:76:9b:ca:fb:3a: 82:0a:42:1c:9a:30:57:09:2c:d1:10:9c:db:a2:52:16:c1:7a: 14:78:e0:61:1c:d3:28:92:62:f9:58:ff:42:18:38:00:46:8b: a6:12:cb:5d:6f:cd:55:e4:55:fd:c2:5b:38:ea:e2:2a:00:39: 8d:50:b2:73:ec:ca:15:fa:ee:69:89:5d:d5:b8:00:a7:e8:4b: 35:32:9f:b3:8d:2f:f8:63:9c:ba:e6:44:8b:57:ce:3a:ff:57: 94:cf:b9:a9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIULnMpltqkKncIfdOOKUM2+EOq8d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNF MzgyMzE4NTAeFw0yNjAyMjgyMjQ1MzBaFw0yNjAzMDIwMDIyMzBaMDMxMTAvBgNV BAMTKDhBMjAzMEE3NTZFNTNCNkU2MDUwMjVCNUE5M0MzNUFGQ0ZEQ0E3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtCgn0BI22y8CCUb/I+hL2crAz E4xpPcXGjhcA1/MIF8Gjf8qxVtvwDJAm1W5x3H4kvk24Ld0okjcNIXEyvyee31YA NoLX9BriDji5ntAiyGd8ipiV7e2xXdE6lNR+N0BeC3RXyZ+ylMFJuk6W468Y/K70 slozukARgHSiXMkA9iEQr7d8qA50kF0srBBC08a+EtyMQLRK9h+OBL0RS87quEpn 51EHQBFAGwW/sUY07bxdF9IEHesPplkd8Emch0YuzlqUDl18m0knJcnUyB3zDfeQ FvKEyp8WF0lkwFqiW+Y90BaEf0TUe9jSa6c73yPySQw2fLJQD2/j5G/dlXxfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUiiAwp1blO25gUCW1qTw1r8/cp6MwHwYDVR0j BBgwFoAUh5KAp9nm3d3Msp6ad4GdXOOCMYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgyMzE4NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvODc5MjgwQTdEOUU2RERERENDQjI5RTlBNzc4MTlENUNFMzgy MzE4NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mN2Q5MjU1OC0y NThlLTRiNDQtYWQxNi04YzEwMjJjNDZkMDMvMS84NzkyODBBN0Q5RTZEREREQ0NC MjlFOUE3NzgxOUQ1Q0UzODIzMTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZczaM+2mgoZv+ql6dcpC 7L1JbakoIFWgTEKkLFpRvOeLPVgfvIeSnKeZ/j5h+jvcrtGJl7vTuQp5eamRHKfu rV/aiGZou9Y3yJd5rpJKwFF1fJwOslTnr95Vpi2rfAJu1qA6mfpX9qyoZuhgtjEH dSHdUDECcp8gMLpeTOzbohEe4eCDEUPh/EWCo6dphpgtHQjIq6G2fl3GHUtICXab yvs6ggpCHJowVwks0RCc26JSFsF6FHjgYRzTKJJi+Vj/Qhg4AEaLphLLXW/NVeRV /cJbOOriKgA5jVCyc+zKFfruaYld1bgAp+hLNTKfs40v+GOcuuZEi1fOOv9XlM+5 qQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:19:10 2026 by rpki-client