$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft File: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft (raw, json) Hash identifier: xxz/tDqDRk0vjIi1wUV011ht1h3+ALbpaXRFwX8s504= Subject key identifier: 05:4C:14:66:4D:25:6E:22:C4:E6:BA:A6:EB:73:8E:34:86:75:B6:CC Authority key identifier: FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 Certificate issuer: /CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Certificate serial: 0F122BC70F7030999967C6EF0D0C7C952F60A82D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft Manifest number: 3B Signing time: Sun 01 Mar 2026 19:20:30 +0000 Manifest this update: Sun 01 Mar 2026 19:15:30 +0000 Manifest next update: Mon 02 Mar 2026 21:14:30 +0000 Files and hashes: 1: FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl (hash: O6jYh/pzQYehASZb4B7qNelUTB/tTABjbNN0ZXYrY4Y=) 2: 326131343a373538333a653130303a3a2f34302d3438203d3e20323135373630.roa (hash: r5SF/IAqPnaNOGhyHYvdkt7SQYVpGblYVakiPdSBcUI=) 3: 326131343a373538333a653131313a3a2f34382d3438203d3e20323034303835.roa (hash: c3kPPYnSQV80aMrr47eONKPd5ax5+aswl4vdJH2ZP/E=) 4: 326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (hash: DtH6ggeM+QpcLTSnypx16kTF/whmDCaM1D1kKsa6LfQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:12:2b:c7:0f:70:30:99:99:67:c6:ef:0d:0c:7c:95:2f:60:a8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5 Validity Not Before: Mar 1 19:15:30 2026 GMT Not After : Mar 2 21:14:30 2026 GMT Subject: CN=054C14664D256E22C4E6BAA6EB738E348675B6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:24:04:7e:02:af:95:88:eb:46:dd:0a:66: 68:d9:0f:60:26:30:f5:46:a4:76:28:a1:8a:63:09: 27:3d:1e:e4:48:fe:87:0d:d2:8f:c3:ff:ed:ee:bf: 5a:e5:01:e4:ef:52:69:32:ef:7f:19:88:e7:e8:82: ef:08:fd:96:80:75:65:99:77:7d:da:0d:70:a0:3f: 1a:93:13:b4:52:2c:f3:cb:82:6c:a2:1d:6e:c0:9c: 7e:72:8c:91:eb:69:1b:01:6e:d1:6e:bb:d2:4c:d3: 1d:e2:74:51:89:d8:77:d7:6f:fc:5f:0b:45:5f:a6: a4:d7:91:99:2e:cd:7b:b8:77:bc:62:50:e0:22:25: 15:9c:e3:bd:d5:32:02:ce:f7:55:d0:c3:22:b0:aa: 88:24:9c:0c:01:8f:0c:fd:f6:dc:17:7e:99:70:ba: af:cd:71:fc:dd:7e:e7:4a:58:81:ce:83:a3:f5:39: d1:99:6c:9d:d4:31:64:72:18:54:c4:6a:1e:4b:09: aa:bb:d6:40:34:97:7a:ee:fc:bb:0e:28:d1:98:cb: cc:17:63:c9:e5:b8:f7:68:1c:50:93:e3:b9:72:3c: 79:5f:c6:18:ca:24:5f:de:14:ca:6a:98:41:18:e2: 16:09:6e:aa:4c:3e:8a:c7:2e:81:ce:ad:93:ee:71: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4C:14:66:4D:25:6E:22:C4:E6:BA:A6:EB:73:8E:34:86:75:B6:CC X509v3 Authority Key Identifier: keyid:FF:FD:2C:A3:C4:6B:64:07:94:6F:63:A1:A0:13:F7:DF:D6:CF:B5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/2/FFFD2CA3C46B6407946F63A1A013F7DFD6CFB5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:90:52:80:12:d1:d7:b9:39:c5:38:bd:6a:f0:76:13:c8:27: 0a:78:ee:35:3e:38:eb:41:26:53:b1:f8:c9:d6:7e:e3:d7:56: 79:6b:33:41:a4:89:3f:a0:26:09:2f:2f:0e:ae:a5:07:7c:a7: 60:f3:83:17:a3:28:47:e2:60:4f:d0:4d:82:43:fb:7c:8a:4c: 21:ae:10:d6:08:58:10:a9:62:8d:80:a4:17:16:e4:7f:e8:2e: 6f:49:3c:1e:68:b0:82:34:4a:c0:9f:f5:d5:c2:29:9b:bf:14: da:e4:c3:c4:20:50:33:6d:9d:af:b9:92:df:ce:e6:1f:4a:6b: 91:d3:db:e7:82:b7:38:3f:15:38:a6:5c:bf:24:a0:d1:94:8c: f5:b4:90:94:ee:ea:25:4f:f6:22:e9:fa:ff:33:88:da:a2:6b: 6c:31:8b:10:f8:36:a0:a5:c8:fd:56:39:25:a8:a8:72:7c:81: 26:9c:d0:b6:ac:28:cd:f1:43:98:48:90:ea:44:55:83:da:3a: c4:27:db:0b:24:40:b6:3b:88:92:1d:db:6e:5a:02:70:52:b3: 37:b1:0e:18:7b:33:4b:af:88:79:4c:c5:af:19:b0:69:70:81: 29:d3:37:41:d0:75:92:19:ac:9e:a7:7e:1a:4e:ad:18:01:e9: be:fc:a8:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDxIrxw9wMJmZZ8bvDQx8lS9gqC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZE NkNGQjVENTAeFw0yNjAzMDExOTE1MzBaFw0yNjAzMDIyMTE0MzBaMDMxMTAvBgNV BAMTKDA1NEMxNDY2NEQyNTZFMjJDNEU2QkFBNkVCNzM4RTM0ODY3NUI2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpSQEfgKvlYjrRt0KZmjZD2Am MPVGpHYooYpjCSc9HuRI/ocN0o/D/+3uv1rlAeTvUmky738ZiOfogu8I/ZaAdWWZ d33aDXCgPxqTE7RSLPPLgmyiHW7AnH5yjJHraRsBbtFuu9JM0x3idFGJ2HfXb/xf C0VfpqTXkZkuzXu4d7xiUOAiJRWc473VMgLO91XQwyKwqogknAwBjwz99twXfplw uq/NcfzdfudKWIHOg6P1OdGZbJ3UMWRyGFTEah5LCaq71kA0l3ru/LsOKNGYy8wX Y8nluPdoHFCT47lyPHlfxhjKJF/eFMpqmEEY4hYJbqpMPorHLoHOrZPuccFhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBUwUZk0lbiLE5rqm63OONIZ1tswwHwYDVR0j BBgwFoAU//0so8RrZAeUb2OhoBP339bPtdUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjdkOTI1NTgtMjU4ZS00YjQ0LWFkMTYtOGMxMDIyYzQ2 ZDAzLzIvRkZGRDJDQTNDNDZCNjQwNzk0NkY2M0ExQTAxM0Y3REZENkNGQjVENS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GRkZEMkNBM0M0NkI2NDA3OTQ2RjYzQTFB MDEzRjdERkQ2Q0ZCNUQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y3ZDkyNTU4LTI1OGUtNGI0NC1hZDE2LThjMTAyMmM0NmQwMy8yL0ZGRkQyQ0Ez QzQ2QjY0MDc5NDZGNjNBMUEwMTNGN0RGRDZDRkI1RDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDSkFKA EtHXuTnFOL1q8HYTyCcKeO41PjjrQSZTsfjJ1n7j11Z5azNBpIk/oCYJLy8OrqUH fKdg84MXoyhH4mBP0E2CQ/t8ikwhrhDWCFgQqWKNgKQXFuR/6C5vSTweaLCCNErA n/XVwimbvxTa5MPEIFAzbZ2vuZLfzuYfSmuR09vngrc4PxU4ply/JKDRlIz1tJCU 7uolT/Yi6fr/M4jaomtsMYsQ+Dagpcj9VjklqKhyfIEmnNC2rCjN8UOYSJDqRFWD 2jrEJ9sLJEC2O4iSHdtuWgJwUrM3sQ4YezNLr4h5TMWvGbBpcIEp0zdB0HWSGaye p34aTq0YAem+/Kh0 -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:21 2026 by rpki-client