$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: poSnrcruke/NCWwQh4xDHgMIB3oJ7QvGpLfpJLaXwtw= Subject key identifier: C7:4F:11:48:33:6E:76:01:83:F8:B9:82:0C:AB:44:CC:09:D3:85:02 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 2799D31B95DA34AEE8E9A44322F6D89813D3A3D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 34 Signing time: Mon 02 Mar 2026 13:33:20 +0000 Manifest this update: Mon 02 Mar 2026 13:28:20 +0000 Manifest next update: Tue 03 Mar 2026 13:53:20 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: OQGT8eGqhWo5tQxU8ORM929Tc6SVnyPre3MPBPD42Ok=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:99:d3:1b:95:da:34:ae:e8:e9:a4:43:22:f6:d8:98:13:d3:a3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Mar 2 13:28:20 2026 GMT Not After : Mar 3 13:53:20 2026 GMT Subject: CN=C74F1148336E760183F8B9820CAB44CC09D38502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:4a:db:08:c9:e2:ca:35:57:f0:bd:79:1f: 4d:e4:f0:62:55:e6:d3:93:3f:4a:e6:af:2f:0d:f6: f4:90:00:dc:9d:59:ff:73:6a:fe:81:0d:89:a4:b6: c2:9f:30:d9:02:8b:b2:14:93:bf:0d:4a:0b:19:2f: 3b:7a:87:2b:de:46:cf:2c:cd:e3:ac:2b:1f:ce:33: 94:de:2f:99:e7:4d:2e:a9:f2:f9:6a:47:2d:22:37: 47:3a:53:b3:75:ed:38:20:f2:d4:4a:ce:b7:71:84: e0:e1:72:6e:c6:34:5c:97:46:9f:f9:94:78:3e:10: de:d2:20:36:46:8a:27:e6:82:da:27:fe:23:c8:7d: 71:25:2e:30:56:2e:00:d0:ad:86:b9:67:a6:b7:d5: 5f:47:67:9b:31:f2:e7:d7:26:4c:6d:fc:e9:93:69: 63:52:4e:e0:13:2a:b3:a0:f4:06:bb:a5:22:72:94: 39:e4:a0:45:fc:ed:c5:39:a7:3c:2c:ad:b2:d0:ac: ff:f2:30:b7:c1:80:44:f2:f9:9d:89:fc:2b:de:82: c0:5b:bd:f1:16:50:ec:4e:5e:38:93:cf:5f:98:53: 48:f0:71:13:00:0f:e4:e1:73:29:e2:38:8f:59:45: c2:26:40:a4:a8:d2:f9:ab:9c:20:3f:02:ec:36:b5: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:11:48:33:6E:76:01:83:F8:B9:82:0C:AB:44:CC:09:D3:85:02 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6e:c6:61:19:1e:4f:6d:08:83:01:25:9c:69:68:55:0e:94: 47:69:52:77:4d:b2:26:9a:f9:9a:25:44:63:a6:b6:83:fb:25: dd:94:f6:81:6e:6d:6c:91:2e:a8:39:c3:b0:ca:45:05:f4:25: 03:2d:77:80:af:a6:00:ae:1d:91:07:03:0a:91:0e:e9:b8:0e: 23:06:1a:85:e9:88:92:9e:36:f2:3a:f7:1f:7c:7a:29:be:5b: 91:fc:ba:08:58:a2:46:26:0a:bd:3a:d1:37:fc:73:53:59:1a: 16:de:10:de:6d:8d:3a:55:93:4f:0b:ae:db:8d:a7:ba:47:24: 5e:1d:a6:a7:ba:5a:04:10:98:e8:d4:c6:d8:f1:99:85:37:0d: d4:9b:2a:f4:05:54:42:91:54:c0:bf:90:67:ee:5e:89:8c:98: c7:f8:c4:68:82:02:84:18:e4:0a:cf:f2:3c:33:0b:e1:12:71: 5b:71:1a:23:67:83:62:55:45:92:bd:83:f5:53:a7:f9:9e:a4: bb:4f:84:d1:50:30:e9:32:0d:f6:86:83:ca:60:27:d1:6b:79: e9:a6:e9:82:74:41:26:a2:a7:4f:6a:fb:65:2d:42:7a:99:2a: 98:05:70:ba:ab:6e:87:12:11:97:1e:16:13:f8:76:3c:43:02: 84:2f:a3:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ5nTG5XaNK7o6aRDIvbYmBPTo9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjAzMDIxMzI4MjBaFw0yNjAzMDMxMzUzMjBaMDMxMTAvBgNV BAMTKEM3NEYxMTQ4MzM2RTc2MDE4M0Y4Qjk4MjBDQUI0NENDMDlEMzg1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWl0rbCMniyjVX8L15H03k8GJV 5tOTP0rmry8N9vSQANydWf9zav6BDYmktsKfMNkCi7IUk78NSgsZLzt6hyveRs8s zeOsKx/OM5TeL5nnTS6p8vlqRy0iN0c6U7N17Tgg8tRKzrdxhODhcm7GNFyXRp/5 lHg+EN7SIDZGiifmgton/iPIfXElLjBWLgDQrYa5Z6a31V9HZ5sx8ufXJkxt/OmT aWNSTuATKrOg9Aa7pSJylDnkoEX87cU5pzwsrbLQrP/yMLfBgETy+Z2J/CvegsBb vfEWUOxOXjiTz1+YU0jwcRMAD+ThcyniOI9ZRcImQKSo0vmrnCA/Auw2tTcTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUx08RSDNudgGD+LmCDKtEzAnThQIwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUbsZh GR5PbQiDASWcaWhVDpRHaVJ3TbImmvmaJURjpraD+yXdlPaBbm1skS6oOcOwykUF 9CUDLXeAr6YArh2RBwMKkQ7puA4jBhqF6YiSnjbyOvcffHopvluR/LoIWKJGJgq9 OtE3/HNTWRoW3hDebY06VZNPC67bjae6RyReHaanuloEEJjo1MbY8ZmFNw3Umyr0 BVRCkVTAv5Bn7l6JjJjH+MRoggKEGOQKz/I8MwvhEnFbcRojZ4NiVUWSvYP1U6f5 nqS7T4TRUDDpMg32hoPKYCfRa3nppumCdEEmoqdPavtlLUJ6mSqYBXC6q26HEhGX HhYT+HY8QwKEL6ND -----END CERTIFICATE-----Generated at Mon Mar 2 22:31:07 2026 by rpki-client