$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: 8sYETRJ3Oz72yYLS4lVU7Hz9SA9oIzkZl9FEAMT1clw= Subject key identifier: 31:09:C1:4C:6A:3C:48:4F:57:46:68:61:08:3B:40:E8:B1:EB:77:08 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 4CF1CCDDE48668375EEF38FF891744BB12DD0477 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 6E Signing time: Fri 17 Apr 2026 02:13:37 +0000 Manifest this update: Fri 17 Apr 2026 02:08:37 +0000 Manifest next update: Sat 18 Apr 2026 05:06:37 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: CV2Q2KrpNTcSd0KJ5TSNaSi5ks0lApIkuZzGWlfzT5k=) 3: 326131343a373538363a363331303a3a2f34342d3438203d3e20323039353635.roa (hash: HsNbgm9FBwJQ40ostKOzEgW08QTmjfOdpd4P4HHKnxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f1:cc:dd:e4:86:68:37:5e:ef:38:ff:89:17:44:bb:12:dd:04:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Apr 17 02:08:37 2026 GMT Not After : Apr 18 05:06:37 2026 GMT Subject: CN=3109C14C6A3C484F57466861083B40E8B1EB7708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:fa:d6:c6:6f:d3:29:5a:cf:f7:9a:ac:0a: 58:a6:91:f0:30:99:67:e1:f0:80:1e:22:43:bf:a2: 9b:d9:f5:6d:c2:38:aa:65:92:20:9c:0b:a6:6e:76: 05:38:2b:bd:08:1b:8b:f2:39:60:4a:0e:de:3e:90: 90:7a:6a:d5:8f:f7:35:ac:93:ed:a9:14:c7:91:71: c0:3c:0e:e5:12:b1:4b:14:bf:87:b1:bd:04:6b:c9: e6:fd:6e:7e:46:78:12:9d:1b:d4:ee:1f:df:d5:27: 8e:c8:01:71:57:c9:63:60:a2:63:3a:e4:05:71:ec: 26:a0:0a:0c:ac:6b:d5:f1:4d:0d:63:5d:c9:1e:aa: 65:13:f2:1e:6e:4a:bb:2d:81:3d:51:51:f3:8f:8f: 8c:c2:db:32:37:b0:31:27:f7:08:65:10:68:75:35: 33:bb:5d:8c:cc:50:b3:90:2d:04:b0:00:14:3a:34: 8d:95:6f:94:de:e4:33:7f:a4:be:99:6f:bf:27:0f: b4:b6:10:39:ea:2f:5b:80:51:76:b2:71:04:38:55: 32:5d:c8:c6:c0:cd:7c:39:8a:e6:aa:55:1b:ef:50: d8:fe:03:8c:22:41:be:2c:66:62:18:50:35:77:4b: cf:92:3e:8c:08:f4:1e:dd:a9:9e:da:4d:01:b1:d2: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:C1:4C:6A:3C:48:4F:57:46:68:61:08:3B:40:E8:B1:EB:77:08 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:e4:53:83:8b:2b:97:0a:77:1f:99:56:81:dd:d5:42:68: d9:b5:b4:ca:f4:e5:69:24:f5:96:65:7f:14:2f:9a:dc:a0:ee: 91:56:50:e4:9d:3a:dc:fc:79:dd:da:8b:c8:31:3f:c5:98:9a: 6e:ce:46:13:b2:a7:96:e8:1f:3f:75:89:e8:19:84:f1:36:13: 88:9a:02:25:56:52:bf:84:82:78:63:fa:4b:f1:35:7e:8b:fe: 25:ec:3a:2d:25:9d:12:5d:6c:7e:5c:e6:a1:c7:d8:9b:e7:be: 98:ad:32:6f:9a:3f:0a:30:4a:ba:ef:a9:42:be:9f:75:36:da: 01:95:dc:e3:c3:22:58:f7:27:76:68:9b:36:8b:8a:a6:49:89: 6d:64:fa:7a:6b:29:a0:99:d8:c2:44:2b:5c:6a:82:e6:9e:c7: 4c:a7:89:09:45:70:ee:08:63:f5:c9:19:ff:a8:1b:12:30:2e: ec:84:ba:0d:ca:04:09:59:f0:98:1e:da:5e:ee:3e:af:9a:dc: 2f:39:7a:5d:e0:1a:b4:6d:f3:19:96:b3:84:32:07:e1:84:2e: 37:f8:e4:3a:dc:6d:b9:fd:c9:f3:35:7e:fb:59:d5:0c:73:c5: 27:43:42:c8:e6:56:1b:8f:ef:17:e3:72:db:1c:26:16:a6:3b: c9:6e:54:85 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTPHM3eSGaDde7zj/iRdEuxLdBHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA0MTcwMjA4MzdaFw0yNjA0MTgwNTA2MzdaMDMxMTAvBgNV BAMTKDMxMDlDMTRDNkEzQzQ4NEY1NzQ2Njg2MTA4M0I0MEU4QjFFQjc3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgu/rWxm/TKVrP95qsClimkfAw mWfh8IAeIkO/opvZ9W3COKplkiCcC6ZudgU4K70IG4vyOWBKDt4+kJB6atWP9zWs k+2pFMeRccA8DuUSsUsUv4exvQRryeb9bn5GeBKdG9TuH9/VJ47IAXFXyWNgomM6 5AVx7CagCgysa9XxTQ1jXckeqmUT8h5uSrstgT1RUfOPj4zC2zI3sDEn9whlEGh1 NTO7XYzMULOQLQSwABQ6NI2Vb5Te5DN/pL6Zb78nD7S2EDnqL1uAUXaycQQ4VTJd yMbAzXw5iuaqVRvvUNj+A4wiQb4sZmIYUDV3S8+SPowI9B7dqZ7aTQGx0qwpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMQnBTGo8SE9XRmhhCDtA6LHrdwgwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt0uRT g4srlwp3H5lWgd3VQmjZtbTK9OVpJPWWZX8UL5rcoO6RVlDknTrc/Hnd2ovIMT/F mJpuzkYTsqeW6B8/dYnoGYTxNhOImgIlVlK/hIJ4Y/pL8TV+i/4l7DotJZ0SXWx+ XOahx9ib576YrTJvmj8KMEq676lCvp91NtoBldzjwyJY9yd2aJs2i4qmSYltZPp6 aymgmdjCRCtcaoLmnsdMp4kJRXDuCGP1yRn/qBsSMC7shLoNygQJWfCYHtpe7j6v mtwvOXpd4Bq0bfMZlrOEMgfhhC43+OQ63G25/cnzNX77WdUMc8UnQ0LI5lYbj+8X 43LbHCYWpjvJblSF -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:39 2026 by rpki-client