$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: vOR9e10a1MCNTN1SMdWU4E45sxRM/68Oq/7XL5slJZs= Subject key identifier: C0:EA:FC:8E:64:DA:E0:1F:BA:6F:04:DE:D5:1F:4E:C6:80:11:7F:59 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 1261935BDE76746ADFAFC49A9D838D7321CA396D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 04F1 Signing time: Sun 15 Nov 2026 01:27:21 +0000 Manifest this update: Sun 15 Nov 2026 01:22:21 +0000 Manifest next update: Mon 16 Nov 2026 03:35:21 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: Qox4t/JWvxkukGGw/r9dKtLNJfAFgS1CAD7Cjd/SiSQ=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: oaOjsA/ea8mh2yvq3UO+jvNNoyPO/R0rHNTp+hGKo9A=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: 2cf2+wXFX+Cv3rb6kyCpZO6NR2fDj483Pc3k7g3Nh48=) 4: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: z1N5Q+4SjMdu1Ic1+0f7yO9sk4li4/IOR71/gzqoxVg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:61:93:5b:de:76:74:6a:df:af:c4:9a:9d:83:8d:73:21:ca:39:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Nov 15 01:22:21 2026 GMT Not After : Nov 16 03:35:21 2026 GMT Subject: CN=C0EAFC8E64DAE01FBA6F04DED51F4EC680117F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:ef:5d:c1:59:76:47:96:57:3b:ba:b8:20: a8:80:1d:6a:12:c6:c9:7d:2c:6e:d7:9d:24:ea:a7: df:d6:38:7b:4f:ee:90:9f:79:69:27:a1:ac:e0:0b: 0d:d5:06:83:f3:c5:fb:1e:f1:0f:33:f0:95:b1:1e: 0e:c0:80:e8:36:2f:70:ef:7a:32:5a:c4:31:ef:42: 76:a1:99:77:b8:f9:2a:29:60:bf:eb:9f:e2:93:55: 68:c0:d4:64:92:0e:43:23:dc:81:78:87:f1:6a:7f: a6:3f:27:bd:fc:54:27:f2:6d:64:76:69:06:25:eb: 66:dd:d9:8e:19:a4:d6:fa:f3:61:a3:eb:d9:1e:26: 46:b1:fb:ab:5b:76:37:de:f0:7c:f4:bb:f7:df:c7: 0a:2c:b5:df:d0:4f:c4:65:94:3e:7f:81:ec:95:73: 65:98:21:3f:61:a8:8d:3d:74:78:eb:4f:c8:e7:c4: b0:ee:26:5c:a7:2a:3f:bc:e2:39:cb:a6:98:f7:7f: 2d:75:52:67:9e:45:3f:2f:f9:e7:fa:39:72:2b:7a: 81:90:4d:9b:ec:6a:35:a6:50:38:c0:9e:87:2e:ca: 84:4d:0d:e7:ec:1b:cd:32:94:61:97:8e:2a:65:b6: 6d:79:43:32:1d:65:7f:dc:be:1d:8d:b3:57:68:98: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EA:FC:8E:64:DA:E0:1F:BA:6F:04:DE:D5:1F:4E:C6:80:11:7F:59 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:23:35:4b:fd:09:c7:17:7c:a7:a1:67:1a:43:cc:39:87:1f: 61:a0:de:a0:7c:8a:2a:16:32:f9:67:11:dd:83:8c:ec:58:c3: f1:b0:6c:f4:b2:ee:be:5b:fa:a3:68:a1:00:ef:bc:76:69:c8: 2a:a8:26:79:62:c2:66:da:7b:e6:c5:f3:27:9b:c3:47:c2:1a: 2f:90:e7:b4:e2:93:3f:53:ad:01:06:88:04:f7:51:7a:63:dd: 24:73:89:51:c4:fa:6b:0a:56:00:b0:15:a9:2f:70:56:64:67: 79:ef:f9:c6:a5:4a:8f:72:48:37:bd:36:6c:25:a9:71:d6:2b: d3:45:ae:c2:f9:75:6b:f7:f5:6a:02:94:06:f4:e0:59:88:2b: 0b:91:40:19:ae:4d:7a:97:e0:5b:3a:2f:c9:7d:b3:5a:ad:00: a6:f9:c0:f4:f6:b5:7c:01:a4:1e:6e:69:09:0c:d9:1b:52:f0: 0a:e8:0e:2b:61:fd:d3:09:96:96:af:84:da:e7:7c:db:01:8c: 8b:bc:c5:fb:97:1d:21:e0:07:13:65:80:45:f0:e2:8f:81:d0: b7:62:9e:78:26:d1:62:4c:b7:43:87:f1:de:d7:0f:95:ae:db: 03:06:d0:e7:72:1b:cf:af:5f:fb:24:e1:be:19:bd:25:00:a0: 31:68:a5:69 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEmGTW952dGrfr8SanYONcyHKOW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNjExMTUwMTIyMjFaFw0yNjExMTYwMzM1MjFaMDMxMTAvBgNV BAMTKEMwRUFGQzhFNjREQUUwMUZCQTZGMDRERUQ1MUY0RUM2ODAxMTdGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Cu9dwVl2R5ZXO7q4IKiAHWoS xsl9LG7XnSTqp9/WOHtP7pCfeWknoazgCw3VBoPzxfse8Q8z8JWxHg7AgOg2L3Dv ejJaxDHvQnahmXe4+SopYL/rn+KTVWjA1GSSDkMj3IF4h/Fqf6Y/J738VCfybWR2 aQYl62bd2Y4ZpNb682Gj69keJkax+6tbdjfe8Hz0u/ffxwostd/QT8RllD5/geyV c2WYIT9hqI09dHjrT8jnxLDuJlynKj+84jnLppj3fy11UmeeRT8v+ef6OXIreoGQ TZvsajWmUDjAnocuyoRNDefsG80ylGGXjipltm15QzIdZX/cvh2Ns1domBMjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwOr8jmTa4B+6bwTe1R9OxoARf1kwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMIzVL /QnHF3ynoWcaQ8w5hx9hoN6gfIoqFjL5ZxHdg4zsWMPxsGz0su6+W/qjaKEA77x2 acgqqCZ5YsJm2nvmxfMnm8NHwhovkOe04pM/U60BBogE91F6Y90kc4lRxPprClYA sBWpL3BWZGd57/nGpUqPckg3vTZsJalx1ivTRa7C+XVr9/VqApQG9OBZiCsLkUAZ rk16l+BbOi/JfbNarQCm+cD09rV8AaQebmkJDNkbUvAK6A4rYf3TCZaWr4Ta53zb AYyLvMX7lx0h4AcTZYBF8OKPgdC3Yp54JtFiTLdDh/He1w+VrtsDBtDnchvPr1/7 JOG+Gb0lAKAxaKVp -----END CERTIFICATE-----Generated at Sun Nov 15 20:49:05 2026 by rpki-client