$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: 6zcnMu5oGk4wg6mtqWZHBtKlPhYLqsjyxP5PLVh7vNE= Subject key identifier: 71:DD:75:5C:01:C7:34:B7:59:18:BA:4C:2E:9F:0D:2B:D5:EE:36:16 Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 4164B03081524711DD051E5CC4888F970698188E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 84 Signing time: Thu 16 Apr 2026 20:47:50 +0000 Manifest this update: Thu 16 Apr 2026 20:42:50 +0000 Manifest next update: Fri 17 Apr 2026 21:53:50 +0000 Files and hashes: 1: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 2: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: QpQyEsD6SKh99hvWqf+xP/KcV4ZGXZemSp1Ij82JbbM=) 3: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) 4: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:64:b0:30:81:52:47:11:dd:05:1e:5c:c4:88:8f:97:06:98:18:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Apr 16 20:42:50 2026 GMT Not After : Apr 17 21:53:50 2026 GMT Subject: CN=71DD755C01C734B75918BA4C2E9F0D2BD5EE3616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:9b:08:72:a9:c4:8a:92:59:fd:0f:5b:83: a0:a0:1b:96:01:35:cb:50:57:2a:be:92:bf:28:08: d7:1d:b6:8a:5f:a2:f3:3d:e8:67:29:e0:96:3d:f4: ed:4c:8a:59:bb:11:91:03:04:74:01:c0:ae:79:79: c7:0a:81:a9:39:80:ab:64:53:42:7e:74:f4:69:b5: 57:9b:9f:29:0d:0e:57:ec:b1:90:28:3f:c2:55:01: c5:86:5a:e1:5a:81:4c:2f:3b:d6:6b:6e:5d:73:35: e5:b2:1c:76:80:3e:c7:e1:b5:84:b9:94:7f:d0:a5: 42:48:f7:df:bf:2a:45:26:25:56:dc:cf:f5:5b:0b: 99:7d:c4:9a:cf:31:fd:0f:7e:f2:f9:db:0b:db:bf: 19:9f:b9:43:6d:27:c2:43:42:f0:aa:65:0f:4b:da: 70:bc:a8:3c:e4:b1:80:23:61:2a:2f:6c:3d:6c:b7: 4b:eb:0b:4c:e5:90:47:2e:ef:39:7d:54:3a:8e:ce: cd:02:77:99:70:60:9b:a1:57:fb:2e:2d:42:4a:ed: e4:f2:cc:d7:15:0d:92:78:10:b5:7a:8d:bb:e5:da: c3:b9:6e:87:cc:e0:70:b3:57:b2:1b:66:db:4f:4c: ba:85:7b:30:ab:65:76:24:9a:0b:44:d7:93:5c:1e: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DD:75:5C:01:C7:34:B7:59:18:BA:4C:2E:9F:0D:2B:D5:EE:36:16 X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7a:fc:75:a8:84:d2:33:22:0a:6f:b4:ed:13:14:e1:d9:d9: b4:1a:e8:d9:31:fe:5e:96:f7:62:d6:85:37:10:bb:9f:20:58: 6a:68:80:91:0c:86:68:8f:58:02:7e:34:19:88:75:1d:41:58: 58:32:5f:b8:bd:55:cc:06:b6:1f:b8:be:b4:46:ff:57:ca:6e: fb:7a:f9:e7:84:47:d6:86:02:72:7c:c4:37:9e:68:ee:aa:91: 56:31:03:64:01:be:4c:06:2c:50:c7:3a:d3:f6:4d:a7:3c:d2: 16:0f:cd:6c:17:95:fb:d1:6b:b6:77:d4:ae:f6:cb:08:99:8a: ec:94:35:f6:82:47:36:f3:bc:4c:83:11:42:51:4a:c3:28:b1: cf:df:92:dd:a2:fd:84:7d:87:86:b2:87:89:f5:4b:e8:1e:59: f7:73:fb:02:3e:f9:56:06:da:48:28:e0:d1:69:89:55:1e:96: 81:7e:86:7a:75:06:be:8b:02:5d:4e:72:ec:97:e3:e7:56:39: 7a:31:4f:4e:44:f4:c7:d4:e9:6a:33:a8:14:25:57:20:78:d8: e5:1c:79:3f:2f:f1:a5:8e:06:f5:c6:ca:04:05:2d:c8:0b:d2: 42:c8:2e:9c:d7:07:7e:35:d3:b9:75:55:64:b7:cc:a0:0e:62: 71:f5:2d:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQWSwMIFSRxHdBR5cxIiPlwaYGI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA0MTYyMDQyNTBaFw0yNjA0MTcyMTUzNTBaMDMxMTAvBgNV BAMTKDcxREQ3NTVDMDFDNzM0Qjc1OTE4QkE0QzJFOUYwRDJCRDVFRTM2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjZsIcqnEipJZ/Q9bg6CgG5YB NctQVyq+kr8oCNcdtopfovM96Gcp4JY99O1Milm7EZEDBHQBwK55eccKgak5gKtk U0J+dPRptVebnykNDlfssZAoP8JVAcWGWuFagUwvO9Zrbl1zNeWyHHaAPsfhtYS5 lH/QpUJI99+/KkUmJVbcz/VbC5l9xJrPMf0PfvL52wvbvxmfuUNtJ8JDQvCqZQ9L 2nC8qDzksYAjYSovbD1st0vrC0zlkEcu7zl9VDqOzs0Cd5lwYJuhV/suLUJK7eTy zNcVDZJ4ELV6jbvl2sO5bofM4HCzV7IbZttPTLqFezCrZXYkmgtE15NcHizrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcd11XAHHNLdZGLpMLp8NK9XuNhYwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoevx1 qITSMyIKb7TtExTh2dm0GujZMf5elvdi1oU3ELufIFhqaICRDIZoj1gCfjQZiHUd QVhYMl+4vVXMBrYfuL60Rv9Xym77evnnhEfWhgJyfMQ3nmjuqpFWMQNkAb5MBixQ xzrT9k2nPNIWD81sF5X70Wu2d9Su9ssImYrslDX2gkc287xMgxFCUUrDKLHP35Ld ov2EfYeGsoeJ9UvoHln3c/sCPvlWBtpIKODRaYlVHpaBfoZ6dQa+iwJdTnLsl+Pn Vjl6MU9ORPTH1OlqM6gUJVcgeNjlHHk/L/Gljgb1xsoEBS3IC9JCyC6c1wd+NdO5 dVVkt8ygDmJx9S2B -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:18 2026 by rpki-client