$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft File: CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft (raw, json) Hash identifier: l1fQ0wApCm3a1PlsC7CALDymkDL0yppn31kUKeJaUgs= Subject key identifier: 57:C6:A3:BA:37:75:AA:63:C2:AA:C8:96:1D:A2:03:4E:61:4F:79:DC Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 109D3CC9B938B53511A7A33DC49755627049E4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft Manifest number: 01C8 Signing time: Wed 23 Sep 2026 11:28:33 +0000 Manifest this update: Wed 23 Sep 2026 11:23:33 +0000 Manifest next update: Thu 24 Sep 2026 14:31:33 +0000 Files and hashes: 1: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (hash: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=) 2: CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl (hash: AYuyWJ+fC1qZxsPycrPA0jrWhF2h+7j5NQiHyvjm/bE=) 3: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (hash: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM=) 4: 3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (hash: EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=) 5: C972E8671DEDC43FE908B548531C969A051CD34C.cer (hash: d7NBPzoR5U51KQ6xM8aVu3af+Il1XYsfzuoeH65sh5k=) 6: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (hash: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc=) 7: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (hash: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q=) 8: 3130392e37322e3132322e302f32342d3234203d3e203630383630.roa (hash: 2mjBtJiNX2GgtlTBc9elrwUynjPTbiI/Km0f5EIklUM=) 9: 3138352e33302e3230322e302f32342d3234203d3e203630383630.roa (hash: tBh4T597HLyGCSugLkif66QABd9ufnpWRf3NI++UCNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9d:3c:c9:b9:38:b5:35:11:a7:a3:3d:c4:97:55:62:70:49:e4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Sep 23 11:23:33 2026 GMT Not After : Sep 24 14:31:33 2026 GMT Subject: CN=57C6A3BA3775AA63C2AAC8961DA2034E614F79DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:a3:f8:7b:51:ac:90:1f:23:15:d4:41:ab: 15:5e:a4:e8:0b:bc:93:97:85:c8:02:0c:48:65:4d: f0:42:da:a3:a0:60:b3:56:e4:22:07:e9:6c:a5:6a: e5:9f:c2:8f:2d:d9:59:3e:b3:45:a7:f8:59:14:1d: c3:fd:8c:ab:8d:cf:b4:80:97:ab:1d:dd:57:c4:fa: ce:e9:51:59:71:e5:63:6c:75:08:db:00:07:b4:ac: ff:3c:2f:d7:71:c9:56:9d:39:45:b2:3f:2f:f6:8f: a6:f3:c9:22:bb:b4:f8:4b:73:e4:f9:26:1b:6a:d9: 6d:b8:47:65:c9:9e:48:69:12:5f:e7:c6:fd:e6:c8: dd:f2:1d:8a:a1:04:a2:24:0f:6f:f6:3e:8c:ed:85: 22:80:cb:46:d7:2a:49:f7:38:f9:1c:53:7e:ea:37: a5:b7:99:b7:b6:05:2c:17:f8:66:fa:df:4c:23:8d: 42:c5:97:36:85:d4:e7:95:c6:dc:d5:d9:b9:26:a5: 44:47:8e:dc:1c:3e:1a:a3:d4:5a:99:66:be:45:6b: 42:b4:54:13:1b:a7:a9:38:87:00:6f:a2:20:5a:55: 25:a1:ef:d9:c5:f9:b6:67:a0:fd:9d:8c:e9:6f:6b: 2d:e5:be:6f:6e:56:dd:0f:2f:21:51:7f:89:bd:e3: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C6:A3:BA:37:75:AA:63:C2:AA:C8:96:1D:A2:03:4E:61:4F:79:DC X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:b9:9e:09:4f:78:53:2f:7e:97:5f:9e:bd:25:60:bb:fe: 6a:ff:c8:28:05:11:85:69:d4:96:08:4c:ac:54:68:1a:eb:96: f5:02:24:09:38:36:24:76:19:5f:59:b4:d3:6a:e9:45:d7:25: a1:f1:47:6c:f2:48:ad:13:ac:3c:7f:c0:bd:d4:49:17:2d:0e: ab:eb:ff:a3:9c:83:4e:35:5c:39:56:50:40:d6:8b:11:eb:95: 3f:42:cd:3b:fd:e9:61:7c:77:bf:e7:ac:22:92:a7:ab:5d:a7: 4d:b6:20:f0:4c:cc:87:67:70:cc:c3:3d:ef:c3:de:87:86:04: f1:d9:27:c4:7d:da:4d:67:4e:ca:46:d9:59:5c:f3:b7:0d:e2: 34:ac:13:ca:18:b6:06:97:0a:48:64:f5:29:de:c9:99:00:9b: a8:c3:ae:b1:47:fe:d0:69:a3:6c:fc:65:af:f1:fb:fe:22:da: ce:22:8d:21:89:80:c7:da:62:ba:df:a4:0f:be:9c:d6:6b:f3: 57:8f:6f:ed:7e:5e:92:e2:aa:ee:94:21:e8:87:b2:9f:9c:0a: 7b:e4:56:81:00:a2:f1:36:71:36:d6:ad:3a:16:d5:84:52:52: dd:dd:6f:43:c9:3c:75:2b:1d:94:ba:cb:b9:b5:db:91:a5:b4: 7e:9d:af:96 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEJ08ybk4tTURp6M9xJdVYnBJ5PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjA5MjMxMTIzMzNaFw0yNjA5MjQxNDMxMzNaMDMxMTAvBgNV BAMTKDU3QzZBM0JBMzc3NUFBNjNDMkFBQzg5NjFEQTIwMzRFNjE0Rjc5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJKP4e1GskB8jFdRBqxVepOgL vJOXhcgCDEhlTfBC2qOgYLNW5CIH6WylauWfwo8t2Vk+s0Wn+FkUHcP9jKuNz7SA l6sd3VfE+s7pUVlx5WNsdQjbAAe0rP88L9dxyVadOUWyPy/2j6bzySK7tPhLc+T5 Jhtq2W24R2XJnkhpEl/nxv3myN3yHYqhBKIkD2/2PozthSKAy0bXKkn3OPkcU37q N6W3mbe2BSwX+Gb630wjjULFlzaF1OeVxtzV2bkmpURHjtwcPhqj1FqZZr5Fa0K0 VBMbp6k4hwBvoiBaVSWh79nF+bZnoP2djOlvay3lvm9uVt0PLyFRf4m949+3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV8ajujd1qmPCqsiWHaIDTmFPedwwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02 YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMi9DRjA2MzFEMzNBM0M5REM1QzQ1 NDI0RDU1QzNFNzY2MzgzODY1N0EzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPK5nglPeFMvfpdfnr0l YLv+av/IKAURhWnUlghMrFRoGuuW9QIkCTg2JHYZX1m002rpRdclofFHbPJIrROs PH/AvdRJFy0Oq+v/o5yDTjVcOVZQQNaLEeuVP0LNO/3pYXx3v+esIpKnq12nTbYg 8EzMh2dwzMM978Peh4YE8dknxH3aTWdOykbZWVzztw3iNKwTyhi2BpcKSGT1Kd7J mQCbqMOusUf+0GmjbPxlr/H7/iLaziKNIYmAx9piut+kD76c1mvzV49v7X5ekuKq 7pQh6Ieyn5wKe+RWgQCi8TZxNtatOhbVhFJS3d1vQ8k8dSsdlLrLubXbkaW0fp2v lg== -----END CERTIFICATE-----Generated at Wed Sep 23 17:36:35 2026 by rpki-client