$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: CA61NO92vvlZ5fRuVMCiuaZT0QTCZySdopFzcQE4jMs= Subject key identifier: A3:18:7C:D1:D5:AD:16:9C:D6:8A:C3:0A:33:9D:7E:D1:29:C3:F4:1C Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 7CB76C6FE1E88F3B77AB123993377C41AE8E1169 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: D2 Signing time: Sat 13 Jun 2026 01:00:36 +0000 Manifest this update: Sat 13 Jun 2026 00:55:36 +0000 Manifest next update: Sun 14 Jun 2026 01:45:36 +0000 Files and hashes: 1: 326131343a373538333a653161633a3a2f34382d3438203d3e20323135373630.roa (hash: q9BD/eBfZVAZDlvug6h3wUNWb7nk1MEeGy7a3BXTOoM=) 2: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: rqZyqLb0YOhJxde84m7CMd0FF9cJb+0+MRP5kGrliYI=) 3: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 4: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 5: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b7:6c:6f:e1:e8:8f:3b:77:ab:12:39:93:37:7c:41:ae:8e:11:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Jun 13 00:55:36 2026 GMT Not After : Jun 14 01:45:36 2026 GMT Subject: CN=A3187CD1D5AD169CD68AC30A339D7ED129C3F41C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:5f:fd:e4:fb:96:cd:d9:95:be:0a:64:89: 0a:c2:54:f9:24:f5:1e:bd:26:db:bb:0d:bf:a8:98: 8c:85:fc:6f:29:98:bf:52:a3:ca:3d:b7:b0:ef:62: 3c:79:ad:51:c2:0a:25:c6:f1:ed:18:f1:04:e6:9e: f9:04:84:cc:2c:4e:4c:1e:b1:f7:6f:15:38:6e:80: d3:5e:08:ea:18:0b:aa:bc:91:6c:39:a2:a4:10:1c: 59:3e:ae:fb:3b:99:95:b0:ff:68:a2:55:91:61:a0: c6:59:1a:80:5d:6c:bb:48:cb:51:0d:31:56:fc:29: 79:28:c7:94:0f:cd:14:6b:60:78:ce:13:97:bb:30: 6c:28:40:1d:de:e6:79:82:55:08:f8:8f:1b:b2:d1: a1:de:38:93:a7:a7:2e:de:6f:73:ff:6c:e2:b4:d1: 1c:4d:df:12:4b:df:9e:ef:26:ed:cd:35:63:90:e1: 46:80:b2:42:56:96:08:60:10:61:aa:d0:3d:09:6b: 58:bb:31:33:db:bc:6f:92:44:96:ea:2d:b3:e0:f4: 0a:f4:41:f5:a8:82:8c:b6:35:f6:90:d6:4e:b7:e1: f4:0c:8d:69:9b:24:fb:75:06:8e:65:84:a8:f9:8d: 03:5b:34:92:97:0a:e6:69:88:a2:8f:1f:a4:10:ac: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:7C:D1:D5:AD:16:9C:D6:8A:C3:0A:33:9D:7E:D1:29:C3:F4:1C X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3b:01:84:58:72:2e:d1:fa:bb:09:a4:26:c7:3f:47:c4:63: c9:35:7c:85:23:61:ee:33:25:47:fc:29:1d:3e:a1:68:9c:d1: 5c:24:50:a4:68:46:f6:66:76:33:42:12:13:da:30:b3:ca:b7: 2f:e0:27:b1:9c:4e:e6:3e:e1:2e:ba:7d:06:45:95:5e:5c:82: c0:b5:bd:99:a5:af:8b:00:f4:44:df:4a:92:64:0d:cc:c2:b5: e4:59:5a:b3:0c:f4:f0:4a:28:76:1d:7d:d4:7f:93:87:42:1e: a6:50:ae:27:f7:a2:f8:4f:0e:00:58:a1:60:49:4a:67:65:41: 50:50:3d:d4:74:3a:c3:41:a3:82:02:90:80:2d:63:85:99:14: 00:eb:ea:2d:9f:16:52:b8:0a:2f:83:19:18:f7:2b:01:b5:f6: a6:e3:9c:ec:42:2b:9b:f3:e9:ff:50:24:62:67:6b:83:03:c3: 60:cb:e7:26:4e:1e:e0:62:7a:fa:c8:6f:20:06:d1:c3:50:d8: 39:65:87:e1:14:ed:b3:ae:16:b9:28:32:93:e1:b7:58:e8:97: d3:e4:67:8e:77:0c:ce:a6:b3:e4:b8:73:5e:9b:3d:a8:db:62: a4:d5:e5:cc:a0:3f:c1:49:b4:54:1e:46:f4:0d:1e:cf:0c:da: ee:b8:84:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfLdsb+Hojzt3qxI5kzd8Qa6OEWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjA2MTMwMDU1MzZaFw0yNjA2MTQwMTQ1MzZaMDMxMTAvBgNV BAMTKEEzMTg3Q0QxRDVBRDE2OUNENjhBQzMwQTMzOUQ3RUQxMjlDM0Y0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlF/95PuWzdmVvgpkiQrCVPkk 9R69Jtu7Db+omIyF/G8pmL9So8o9t7DvYjx5rVHCCiXG8e0Y8QTmnvkEhMwsTkwe sfdvFThugNNeCOoYC6q8kWw5oqQQHFk+rvs7mZWw/2iiVZFhoMZZGoBdbLtIy1EN MVb8KXkox5QPzRRrYHjOE5e7MGwoQB3e5nmCVQj4jxuy0aHeOJOnpy7eb3P/bOK0 0RxN3xJL357vJu3NNWOQ4UaAskJWlghgEGGq0D0Ja1i7MTPbvG+SRJbqLbPg9Ar0 QfWogoy2NfaQ1k634fQMjWmbJPt1Bo5lhKj5jQNbNJKXCuZpiKKPH6QQrBpnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoxh80dWtFpzWisMKM51+0SnD9BwwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5OwGE WHIu0fq7CaQmxz9HxGPJNXyFI2HuMyVH/CkdPqFonNFcJFCkaEb2ZnYzQhIT2jCz yrcv4CexnE7mPuEuun0GRZVeXILAtb2Zpa+LAPRE30qSZA3MwrXkWVqzDPTwSih2 HX3Uf5OHQh6mUK4n96L4Tw4AWKFgSUpnZUFQUD3UdDrDQaOCApCALWOFmRQA6+ot nxZSuAovgxkY9ysBtfam45zsQiub8+n/UCRiZ2uDA8Ngy+cmTh7gYnr6yG8gBtHD UNg5ZYfhFO2zrha5KDKT4bdY6JfT5GeOdwzOprPkuHNemz2o22Kk1eXMoD/BSbRU Hkb0DR7PDNruuIRY -----END CERTIFICATE-----Generated at Sat Jun 13 15:05:37 2026 by rpki-client