$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: HnIVl/WNtVhcljVAm7ho1zwfpxHw75xu3W9W0PkS5EI= Subject key identifier: AD:BC:50:78:64:E2:2A:B4:55:85:D1:C8:FE:3B:20:7C:59:1B:EF:1E Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 5CCE1C14E3090DA62FFD827FDB34F3BACD1774EB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0441 Signing time: Wed 25 Mar 2026 15:28:42 +0000 Manifest this update: Wed 25 Mar 2026 15:23:42 +0000 Manifest next update: Thu 26 Mar 2026 15:55:42 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 2: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 3: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: PPgtm/Eqm6PR2sibWTtNacqu9pO8ZHZUDsckMYQ20Fo=) 4: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 5: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 6: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 7: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 8: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 9: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 10: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 11: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 12: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 13: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ce:1c:14:e3:09:0d:a6:2f:fd:82:7f:db:34:f3:ba:cd:17:74:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Mar 25 15:23:42 2026 GMT Not After : Mar 26 15:55:42 2026 GMT Subject: CN=ADBC507864E22AB45585D1C8FE3B207C591BEF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:bb:8a:51:e5:ab:e5:91:42:eb:ff:c1:10: 2a:b9:04:6b:10:da:fc:f5:f2:98:7a:47:2e:bf:52: 45:91:74:4b:b4:91:e2:cd:ce:38:89:bc:41:dc:2d: 05:91:cb:85:77:d2:2b:60:3b:3f:a7:82:4e:f2:a4: 5c:d5:cc:55:01:44:a4:4e:1f:f4:55:6e:b5:17:11: 8c:f3:18:27:3a:c7:a1:c5:7d:d8:df:54:55:c2:b0: 53:6d:2b:b1:47:7d:73:64:e2:39:07:7e:75:ef:c2: 3f:f6:55:e6:cc:16:09:6f:fd:20:45:4d:84:34:7b: 9c:66:48:49:fb:5f:73:ae:4d:d3:e1:dc:1b:c9:ed: 7c:80:45:2c:79:29:b3:af:16:28:83:94:a4:cd:e3: fb:3e:58:99:60:36:b5:71:8b:ff:af:f7:84:a4:f1: d7:c2:6e:33:3d:aa:b1:c1:7f:d6:b1:25:be:c9:45: 48:16:58:52:7e:ff:0d:0f:80:56:32:40:52:ee:f1: a8:2a:2c:78:60:c8:41:05:3e:a4:39:99:5f:46:57: a7:d9:1d:d1:46:66:7a:e4:5c:d1:2a:97:fb:80:b3: 5b:8a:93:65:15:15:cb:af:b4:d2:5e:f7:88:fe:8f: ab:9c:70:f9:74:41:17:11:33:96:91:9e:da:bb:93: 13:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BC:50:78:64:E2:2A:B4:55:85:D1:C8:FE:3B:20:7C:59:1B:EF:1E X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a7:fa:3a:b0:b7:fd:34:13:79:bb:68:0c:81:88:b9:de:d7: e0:d3:cf:d2:fa:f4:8b:49:b3:e8:f9:da:a0:f5:56:2b:28:0d: e9:f2:40:ae:73:bc:8b:be:78:55:7f:5b:b8:53:3f:03:0f:e1: 6f:75:86:68:f8:1a:d3:b6:d7:88:f8:2f:93:df:9c:75:a5:b5: ea:5e:1b:49:06:77:b5:e8:09:ca:87:fb:0f:c2:74:75:54:e8: 2e:f5:f2:3b:d5:ee:75:2f:15:ee:88:fe:e7:3a:f2:3b:bd:27: e5:88:65:c8:eb:af:8e:d0:6b:f9:ef:8a:11:9a:f0:90:39:cc: d7:98:5f:4d:5c:9e:e1:3b:2b:b0:5c:41:a1:6b:2b:d8:f3:9a: 08:23:36:22:bf:f4:2c:02:00:20:96:da:15:00:72:34:28:98: 13:b0:ef:df:85:35:81:3c:04:08:16:f7:77:75:52:d5:0c:a4: 62:21:5c:c8:e4:b0:24:3c:6c:0a:cc:91:19:73:11:05:d8:e2: 08:cb:09:8b:fb:56:2b:6e:11:86:91:67:ef:85:7e:44:05:00: 63:17:ba:7b:69:ac:12:44:e5:f3:f5:76:2d:4e:16:32:62:cf: 81:e3:c9:cf:2e:19:13:58:41:bf:1d:e7:49:2c:3d:03:27:c7: 0e:63:d3:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXM4cFOMJDaYv/YJ/2zTzus0XdOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNjAzMjUxNTIzNDJaFw0yNjAzMjYxNTU1NDJaMDMxMTAvBgNV BAMTKEFEQkM1MDc4NjRFMjJBQjQ1NTg1RDFDOEZFM0IyMDdDNTkxQkVGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh17uKUeWr5ZFC6//BECq5BGsQ 2vz18ph6Ry6/UkWRdEu0keLNzjiJvEHcLQWRy4V30itgOz+ngk7ypFzVzFUBRKRO H/RVbrUXEYzzGCc6x6HFfdjfVFXCsFNtK7FHfXNk4jkHfnXvwj/2VebMFglv/SBF TYQ0e5xmSEn7X3OuTdPh3BvJ7XyARSx5KbOvFiiDlKTN4/s+WJlgNrVxi/+v94Sk 8dfCbjM9qrHBf9axJb7JRUgWWFJ+/w0PgFYyQFLu8agqLHhgyEEFPqQ5mV9GV6fZ HdFGZnrkXNEql/uAs1uKk2UVFcuvtNJe94j+j6uccPl0QRcRM5aRntq7kxONAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrbxQeGTiKrRVhdHI/jsgfFkb7x4wHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHp/o6 sLf9NBN5u2gMgYi53tfg08/S+vSLSbPo+dqg9VYrKA3p8kCuc7yLvnhVf1u4Uz8D D+FvdYZo+BrTtteI+C+T35x1pbXqXhtJBne16AnKh/sPwnR1VOgu9fI71e51LxXu iP7nOvI7vSfliGXI66+O0Gv574oRmvCQOczXmF9NXJ7hOyuwXEGhayvY85oIIzYi v/QsAgAgltoVAHI0KJgTsO/fhTWBPAQIFvd3dVLVDKRiIVzI5LAkPGwKzJEZcxEF 2OIIywmL+1YrbhGGkWfvhX5EBQBjF7p7aawSROXz9XYtThYyYs+B48nPLhkTWEG/ HedJLD0DJ8cOY9OZ -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:57 2026 by rpki-client