$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: V3pnR4IIg8WSGdhZIqgNkWxqxMRO6JaId5NeGtIYKCo= Subject key identifier: 51:B4:B6:C3:36:CC:22:84:B5:44:BE:17:6B:C4:6A:82:61:CC:FF:50 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 6CBF8460C8A198F71F9DBB921A335FA273B65F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 02FF Signing time: Wed 23 Sep 2026 11:49:13 +0000 Manifest this update: Wed 23 Sep 2026 11:44:13 +0000 Manifest next update: Thu 24 Sep 2026 12:06:13 +0000 Files and hashes: 1: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: E/KKQIBIvXrHxntg1Xf36BIIDrbcHQG7BGnX7lqe1ts=) 2: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: 5klqSoppwsu6NOWd6DdkFO/NkJ4F93qo8ByoAVMNmBw=) 3: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=) 4: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: zBck4nOfVGigqbE1M8GwahkpZT+TSOG3sW4XnkW/DN0=) 5: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: HL7mFBDKDU+iYfATsU33A3w0WGjK39TBLxCkLSeJlhE=) 6: 326130653a666434353a326130303a3a2f34302d3438203d3e20323133323533.roa (hash: qDmc/WjuJm2+K6V+qH0YTGIzUkgJV2kWMCYDVdR94ng=) 7: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: 4rV6D1GFz/bjY4t177ru5i22axDSZLmceosAGjuU6GE=) 8: 326130653a666434353a326635303a3a2f34382d3634203d3e203439393831.roa (hash: zpE8O6QFgOcjidzEd8zc2djpSlwttC8o8DmDYuakobQ=) 9: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: b4dSzH5oz/8kg+iOLc3kROxlkMvwGXgL0aSDALtRaeY=) 10: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: VuWkhMiegn3+P8B8YbwyuMoD+ET+4u9fG4FoXlq8M7o=) 11: 326130653a666434353a326636303a3a2f34382d3438203d3e20323037313038.roa (hash: fin/tsFszyHjwEDVRVOEznFkN6ILbbdEP80VJIaXRto=) 12: 326130653a666434353a326636303a3a2f34382d3438203d3e203532303431.roa (hash: IZkqFVYEgPyyB/+rGAFH6ZTxV7F8e0iFJgsbGpJjRuQ=) 13: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 4VMWXKcIo6/p9ijIu9IEM7e/uFISrba097G5zVjTr4E=) 14: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=) 15: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (hash: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 12:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bf:84:60:c8:a1:98:f7:1f:9d:bb:92:1a:33:5f:a2:73:b6:5f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Sep 23 11:44:13 2026 GMT Not After : Sep 24 12:06:13 2026 GMT Subject: CN=51B4B6C336CC2284B544BE176BC46A8261CCFF50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:09:74:88:ed:f8:f3:04:c9:d4:e1:e7:59: f8:e2:86:be:3d:ca:fd:6d:2d:2a:22:1a:18:6e:a1: 66:a5:62:bd:60:52:03:b1:30:f2:99:96:36:91:46: 0d:78:bb:c2:8c:c3:15:e4:12:2f:33:9e:a7:7f:ff: 81:3b:f8:87:80:3a:6b:20:e2:96:59:28:9c:25:d8: 73:f9:fc:cc:86:83:ed:18:9b:28:c7:1b:5b:83:da: 60:63:5b:87:f1:26:97:79:cb:3b:7a:3a:7c:a3:cd: 04:77:a7:c8:e9:2c:92:17:c2:42:64:7d:a0:98:27: 47:98:c4:ac:f0:bb:70:7a:53:61:70:94:31:c8:44: 3d:c7:75:c1:6b:a7:63:26:76:dd:4d:81:00:3c:fb: 9f:cb:bb:54:ee:66:6a:53:dd:bf:78:8d:5d:96:bc: af:11:b1:1b:41:d0:02:55:e0:58:af:c4:93:b0:a4: 3d:22:0d:1b:4a:44:96:ed:85:ca:fa:ca:7b:3a:b6: ee:e6:bb:c5:4e:d9:51:e4:7d:49:18:d0:5b:c1:4c: 5a:7d:eb:13:68:5f:68:78:62:b8:5d:36:33:d2:03: 88:84:f0:a8:43:a5:9b:8c:f6:d2:5b:36:6f:5c:b4: 0c:ef:ba:d2:61:e3:6a:57:ae:a4:d7:37:88:9b:00: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:B6:C3:36:CC:22:84:B5:44:BE:17:6B:C4:6A:82:61:CC:FF:50 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:22:15:19:57:e9:96:bb:90:c3:d7:49:5c:83:b4:0f:a8:b7: a6:f0:70:d7:f1:59:fa:72:f7:9f:fe:fb:85:2e:26:35:6e:58: b3:f3:d2:c9:54:b3:0c:f5:08:18:7b:25:21:5b:54:4a:b6:d0: 0f:d1:6c:f0:f0:40:82:28:b8:20:14:4d:6a:69:0a:40:df:19: 41:08:8f:17:d8:67:8b:47:20:4a:b8:01:f2:e9:6b:bc:1b:76: bc:95:c5:fc:92:c9:f2:39:24:44:47:a5:1c:de:1d:99:a5:16: b5:ae:8e:49:49:38:dc:d7:23:10:1c:b7:1b:7f:24:b9:ea:f7: da:e7:00:73:b6:a4:87:92:77:2a:99:4c:28:52:e5:81:ba:68: ac:48:0b:23:58:ed:70:0d:49:ab:bb:63:46:c2:37:f5:7f:2c: 39:6a:20:1b:d4:2e:f5:11:c5:fb:26:e0:ea:c4:0c:17:74:df: be:b5:5c:94:53:5c:c2:79:8c:e1:53:2d:ae:09:b0:02:bb:24: 9a:ba:76:80:07:13:c6:21:29:76:67:7d:5f:80:89:1a:19:e6: 55:15:99:46:95:ee:6c:bd:b4:66:83:3c:5a:14:e8:03:45:4d: cb:dd:27:c3:a3:1e:9b:ef:45:96:92:02:f2:70:52:f6:2f:a9: 46:b3:02:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbL+EYMihmPcfnbuSGjNfonO2X4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNjA5MjMxMTQ0MTNaFw0yNjA5MjQxMjA2MTNaMDMxMTAvBgNV BAMTKDUxQjRCNkMzMzZDQzIyODRCNTQ0QkUxNzZCQzQ2QTgyNjFDQ0ZGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+wl0iO348wTJ1OHnWfjihr49 yv1tLSoiGhhuoWalYr1gUgOxMPKZljaRRg14u8KMwxXkEi8znqd//4E7+IeAOmsg 4pZZKJwl2HP5/MyGg+0YmyjHG1uD2mBjW4fxJpd5yzt6OnyjzQR3p8jpLJIXwkJk faCYJ0eYxKzwu3B6U2FwlDHIRD3HdcFrp2Mmdt1NgQA8+5/Lu1TuZmpT3b94jV2W vK8RsRtB0AJV4FivxJOwpD0iDRtKRJbthcr6yns6tu7mu8VO2VHkfUkY0FvBTFp9 6xNoX2h4YrhdNjPSA4iE8KhDpZuM9tJbNm9ctAzvutJh42pXrqTXN4ibAMNxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUbS2wzbMIoS1RL4Xa8RqgmHM/1AwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyIVGVfplruQw9dJXIO0 D6i3pvBw1/FZ+nL3n/77hS4mNW5Ys/PSyVSzDPUIGHslIVtUSrbQD9Fs8PBAgii4 IBRNamkKQN8ZQQiPF9hni0cgSrgB8ulrvBt2vJXF/JLJ8jkkREelHN4dmaUWta6O SUk43NcjEBy3G38kuer32ucAc7akh5J3KplMKFLlgbporEgLI1jtcA1Jq7tjRsI3 9X8sOWogG9Qu9RHF+ybg6sQMF3TfvrVclFNcwnmM4VMtrgmwArskmrp2gAcTxiEp dmd9X4CJGhnmVRWZRpXubL20ZoM8WhToA0VNy90nw6Mem+9FlpIC8nBS9i+pRrMC sw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:14:09 2026 by rpki-client