$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft File: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json) Hash identifier: Ne9I98L8DlQwUenToROt3spaurpT6V1xKd/amJlEDJA= Subject key identifier: 37:D7:1F:25:F6:04:EF:DC:4E:1B:F1:B7:9E:47:1B:53:51:B7:CE:BC Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Certificate serial: 1286575B029D0A03ED9BA9B283FA5D63D3C22AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft Manifest number: 021C Signing time: Thu 26 Mar 2026 08:23:10 +0000 Manifest this update: Thu 26 Mar 2026 08:18:10 +0000 Manifest next update: Fri 27 Mar 2026 10:01:10 +0000 Files and hashes: 1: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: XjKzqWNr7Btvkj5JImVNsEp2dFZjVAsUHydrIsbVUoU=) 2: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: NgKAiWi/9kIzuK34CJYJ5NgD13mXufjklhJW/DfhGXg=) 3: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: RwKBGj41SrCoSwW63bP9iypbQ5/Pk2wZivtbfEbN3Qk=) 4: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: Cz/6kKDUzshq0L4EXVzYnwGNuJcQnGuP6YcPqQJcMJ8=) 5: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: GcrirzUGj+baQQMYil8xBr+JSDUMr1IrAf8dPn6IBjc=) 6: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: XrAwkqLyjKkliRAGb7YhNsmN3gefCa9P2PMxjWEJ07E=) 7: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: s7bJrOak+k6vmxZw3NK9sCosxffSZUuLUPKBmOsK+p8=) 8: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: Zjl5KzSbAzkvfaUcwe5cs8ZLZxM+i+5YDJPhsvemvlM=) 9: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: mNEln2sQigg3u81rooykzeehSg2L9J2uWDrMwZzSFwU=) 10: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: qfYLsiXeU6PfA9fVBBtYwxz+ovi/EvnjjY5itv6zZZY=) 11: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: lzKGUq9e6WEOxjU9fEiZs+XvjPLc/qut/jPBXboiWgc=) 12: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=) 13: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: LdHKLOhJhzl41We9BNwjvOcsg2A+zhlEI37K8ifS5/I=) 14: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: er+oPQhykc6ayg3rrrwvJra3JupeKvjV54bYH7L2tTg=) 15: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: I1y2rQjnLv18d7wE8+32fRo+wpfEuaxk8+JYmCwkLpU=) 16: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: ANVjCMTaWdnuuBBujXWr0xSkD/oY5DXGYVFKNzHfX1w=) 17: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: h+2AnEvh4aG7gOBRETVZO5ExBSI+bmaVuuXvVVF7vHs=) 18: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: xYbQlUPKxSQoHiHG8XgS+jBzfXDA0HmlH23UWrEEgRM=) 19: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: WnRHsnv1v5lgeZmFGSte0JZSgCKL85MQLwyrUB8BqVw=) 20: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: R59heAM0isF102GrpYHgNSOZjt5TEoubWayGdTfPAFs=) 21: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: SgkiaXA0IAiBax3MkrFfX1tZ3ARWy+WsqwuwSIqr97Y=) 22: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: buKU7JdPUK/SlkC4NNnK7hP12R2pJJz2VMgJgPeJ+UM=) 23: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: IEXWaXuV3w8kiyUSn8Xb9ocu7wGkZqq6FHmShe2ilR0=) 24: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: 2+e1pcV/1HjSIXMmpHYPl94RJ1VHndDhp/PzS1D2Aqo=) 25: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: 0UzTLd9sP5E9hVagexG3NWMHzI1vl2WYjkZP4E+bLVU=) 26: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: b01UE1W2EGfzUcIfvNzwNjLl6EWZ+fK9rU0UVH/isX8=) 27: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=) 28: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: NG6zwhRpuGaOaqAr2bnhB0WNjn5u7NK5ztm1d2XSjOs=) 29: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: sujdFNXoHRtVeqZ5b1HSqILk/kU5NautAQO2Xt1EnhA=) 30: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: ay+VpJAxhcK2h7cjcp2jQIWeYB+U5olryyBn7tyJvVg=) 31: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: SBs8h2+t6QDU1J2FG/blrmN+qmqR4M4fBNi1SbYEnNU=) 32: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: v+xhc6fxafxAfS7MdKJ1T7i4/dfRVtX123aAkTRxKjs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:86:57:5b:02:9d:0a:03:ed:9b:a9:b2:83:fa:5d:63:d3:c2:2a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Validity Not Before: Mar 26 08:18:10 2026 GMT Not After : Mar 27 10:01:10 2026 GMT Subject: CN=37D71F25F604EFDC4E1BF1B79E471B5351B7CEBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:1b:8f:37:0c:65:05:aa:1b:72:fe:be:36: 82:5b:5a:0b:5a:ca:91:0e:85:50:0e:5d:6b:24:5b: 88:30:67:7a:9c:d9:1c:05:0b:bb:0b:78:be:62:b0: 92:b6:8c:ef:dd:70:2d:3b:9b:91:6c:45:dc:20:72: 04:7e:a0:dc:04:58:d8:ed:a5:4e:27:16:fe:35:db: dc:29:c8:c0:fd:ab:3a:fc:94:71:eb:74:55:66:fc: c9:ef:66:fa:73:ed:e5:27:6e:9f:71:a0:99:72:61: 45:be:d2:e4:1b:5f:5b:25:b3:9c:5a:d2:3b:8a:f5: 30:de:f5:a1:da:1d:e3:20:1c:99:3e:4f:d6:e0:8b: f0:db:73:da:5c:16:a3:50:3f:6c:24:6d:b3:17:3a: 1a:2d:ad:73:dc:fb:b1:1d:0a:a2:05:b8:03:9f:c6: 1e:d2:99:fa:75:5d:fa:28:76:8d:91:e6:08:65:04: d3:7d:fa:19:63:61:23:84:4e:ce:0d:f0:b0:29:0a: 5e:6c:21:17:70:fc:8a:92:d7:1d:26:ce:83:7d:6a: 29:89:07:2b:f4:13:00:9b:48:07:ca:25:4c:bf:80: e5:72:a9:dc:c8:fa:cd:3c:ae:cb:59:85:47:a3:e5: f3:31:0e:bd:85:ae:78:87:bc:6a:4a:ca:7a:53:5d: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D7:1F:25:F6:04:EF:DC:4E:1B:F1:B7:9E:47:1B:53:51:B7:CE:BC X509v3 Authority Key Identifier: keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:56:94:af:df:4f:6a:93:eb:67:4a:b6:a4:f7:ef:22:76:dd: eb:02:39:db:70:98:b3:da:e1:6b:85:56:b9:d6:90:ec:97:3f: 3e:69:e4:43:12:4d:de:51:5a:da:78:de:dd:4e:d8:34:a4:87: 50:f5:df:33:72:9b:06:23:df:38:cf:24:2a:49:0b:f1:89:d3: b4:9a:fc:e6:d9:a0:07:e6:dd:b6:8c:a2:32:5d:9d:bd:b9:c5: af:11:c5:f4:3e:ce:98:f6:77:f7:77:a3:22:d4:fd:b8:54:2f: 11:83:7e:5e:5e:ad:6a:87:ea:d0:5a:0d:f4:ff:4c:15:ab:b4: 26:5f:c3:35:5f:28:59:42:27:b3:29:8d:e9:0e:75:03:ea:95: d3:fb:f2:fd:cb:3e:8e:b2:0d:bb:42:a1:08:aa:98:e3:46:97: 00:86:4e:25:04:ca:51:9b:e3:48:bc:f7:b1:7f:a3:ab:d4:9b: 40:03:29:26:9a:25:7d:c3:c7:f2:97:31:5d:98:95:b0:29:c1: 99:20:b8:f8:38:33:9d:1c:d0:6f:4f:90:c5:e1:7e:6a:91:f6: c4:a9:7a:31:d2:96:e9:43:d2:48:03:07:45:e1:8b:12:9c:d3: 12:d7:61:fa:17:c1:92:a3:d7:8c:77:59:9b:30:06:b4:2e:59: 0f:57:9d:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEoZXWwKdCgPtm6myg/pdY9PCKu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx ZTc1MmUyNzAeFw0yNjAzMjYwODE4MTBaFw0yNjAzMjcxMDAxMTBaMDMxMTAvBgNV BAMTKDM3RDcxRjI1RjYwNEVGREM0RTFCRjFCNzlFNDcxQjUzNTFCN0NFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSvRuPNwxlBaobcv6+NoJbWgta ypEOhVAOXWskW4gwZ3qc2RwFC7sLeL5isJK2jO/dcC07m5FsRdwgcgR+oNwEWNjt pU4nFv4129wpyMD9qzr8lHHrdFVm/MnvZvpz7eUnbp9xoJlyYUW+0uQbX1sls5xa 0juK9TDe9aHaHeMgHJk+T9bgi/Dbc9pcFqNQP2wkbbMXOhotrXPc+7EdCqIFuAOf xh7Smfp1Xfoodo2R5ghlBNN9+hljYSOETs4N8LApCl5sIRdw/IqS1x0mzoN9aimJ Byv0EwCbSAfKJUy/gOVyqdzI+s08rstZhUej5fMxDr2FrniHvGpKynpTXcbbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUN9cfJfYE79xOG/G3nkcbU1G3zrwwHwYDVR0j BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1 MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1 QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVaUr99PapPrZ0q2pPfv Inbd6wI523CYs9rha4VWudaQ7Jc/PmnkQxJN3lFa2nje3U7YNKSHUPXfM3KbBiPf OM8kKkkL8YnTtJr85tmgB+bdtoyiMl2dvbnFrxHF9D7OmPZ393ejItT9uFQvEYN+ Xl6taofq0FoN9P9MFau0Jl/DNV8oWUInsymN6Q51A+qV0/vy/cs+jrINu0KhCKqY 40aXAIZOJQTKUZvjSLz3sX+jq9SbQAMpJpolfcPH8pcxXZiVsCnBmSC4+DgznRzQ b0+QxeF+apH2xKl6MdKW6UPSSAMHReGLEpzTEtdh+hfBkqPXjHdZmzAGtC5ZD1ed 9w== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:30 2026 by rpki-client