$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: xo+YNvnd81mQ2mSxR4GIAGR/VWPd9hie3cH85WIy6EU= Subject key identifier: 87:B1:9E:31:9A:EE:42:FF:8E:44:FA:50:AA:35:34:D3:9B:FE:3E:C2 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 263BB19A22F26476A4F4C353684475D1DEC15DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 0700 Signing time: Wed 25 Mar 2026 22:17:00 +0000 Manifest this update: Wed 25 Mar 2026 22:12:00 +0000 Manifest next update: Fri 27 Mar 2026 01:02:00 +0000 Files and hashes: 1: 3231332e3133392e36372e302f32342d3234203d3e203231383430.roa (hash: pFdE5gy29hjYZhB9VvrsN9wvvGJKHZXcNTzoJSuW9uE=) 2: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=) 3: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=) 4: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: 4avklCjVMylCEeeI60KDAm2gKF0wrDefWHJR4YHtwEk=) 5: 3231332e3133392e37352e302f32342d3234203d3e203231383430.roa (hash: v250iXtra+Z/KKJJC+rUD3hpGZMyGlwjTm5LLjqKRQ4=) 6: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=) 7: 3231332e3133392e38312e302f32342d3234203d3e203232343237.roa (hash: 5OXqLHfaMz4oBWakF90MFYsUXM1IOnkArdNd9qqILtU=) 8: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=) 9: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=) 10: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=) 11: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=) 12: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=) 13: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=) 14: 3231332e3133392e38302e302f32342d3234203d3e203232343237.roa (hash: g2v8voZzjWLOYqIOoWNtEKKH0iUdXIeZf8etwqeRplw=) 15: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=) 16: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: D6sys78d1VHUPnQGvPOUfa9pG9olePRUcwiyJ1CBP8Y=) 17: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=) 18: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=) 19: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=) 20: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: f7C4581jJeKKnyLKipb2ZqdzpdWZFHeKPCD6CEFc/5E=) 21: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=) 22: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=) 23: 3231332e3133392e39322e302f32342d3234203d3e203331373135.roa (hash: BYAn2P29WRgE+5pdG5goQ8GsMhYsyn767YwPiSlp0aI=) 24: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=) 25: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: FY200EeTGQqoD9S8sjuLjCwpFp/7NCHvuVTZp+n3GiM=) 26: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=) 27: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: fJsom9F0kK13YCja85kMhtBJkHN5sEU0G4E2NSYs0/M=) 28: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=) 29: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=) 30: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: TNwARsqDoJIbz+j0rTp7HNkukcwmuUQDBLTWSp7nMfU=) 31: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=) 32: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=) 33: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: HOJUjQHw3n3vLOp4ELlcKmpXxBRTpyVDdnuOO/DKcpY=) 34: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=) 35: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=) 36: 3231332e3133392e36352e302f32342d3234203d3e203331373135.roa (hash: DLaV1sFNoIrmOFdG/w3fReS7aY1M4x1P7DARyXDc6LA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3b:b1:9a:22:f2:64:76:a4:f4:c3:53:68:44:75:d1:de:c1:5d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Mar 25 22:12:00 2026 GMT Not After : Mar 27 01:02:00 2026 GMT Subject: CN=87B19E319AEE42FF8E44FA50AA3534D39BFE3EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:22:6c:0a:02:23:a2:a1:c8:a9:f9:4a:61: b3:f6:8f:ef:b1:91:d9:a4:71:de:6d:d9:86:d9:e3: 1c:d3:e5:8b:7f:f6:af:af:61:1f:c7:0d:0f:e7:e3: 8b:15:66:be:5e:e0:38:99:20:ec:41:33:41:4f:98: 5a:f5:7d:23:57:0a:2f:98:51:3f:91:9f:a8:0d:61: 1a:af:00:4a:b3:8a:99:e3:65:a9:7e:59:5c:5a:ff: d4:95:00:64:f6:50:1f:41:b4:9b:8c:5b:8f:d3:92: fb:e5:7c:ea:0d:cb:51:a9:c1:9d:05:e7:97:4e:3c: 51:47:d4:fc:2b:b9:5a:e2:73:8e:70:eb:c5:86:92: c1:fb:9e:0a:79:9f:c9:02:99:31:89:f0:b0:90:d8: 6e:d1:36:a0:f3:4c:0f:28:f7:0f:96:21:a7:df:f7: 8e:18:76:0d:1c:9a:8b:52:fe:3f:11:05:85:59:4a: d8:cd:79:1d:2b:08:d4:4a:38:10:3b:f1:70:c0:34: d4:e0:6f:9c:bf:6d:42:11:21:5e:4c:00:1d:6a:89: 70:f3:ce:47:b5:81:8d:52:ec:b1:ba:35:e5:84:c9: 2a:49:93:ee:00:a4:c0:de:81:7c:b6:cb:64:b6:76: 50:d4:a4:cf:60:b8:1f:8b:25:63:ea:c0:12:4e:98: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B1:9E:31:9A:EE:42:FF:8E:44:FA:50:AA:35:34:D3:9B:FE:3E:C2 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b6:db:c4:e0:e9:75:c0:16:7c:36:ef:88:11:6e:b9:64:1e: 40:45:7f:92:35:c2:14:4b:75:41:e3:34:e3:b2:25:a8:d1:58: b4:5e:6d:af:8d:c6:f6:1c:49:34:3a:26:bf:1d:91:17:6e:5e: 6b:18:6c:32:34:60:a8:70:6a:00:7b:f4:ee:68:0f:61:43:df: 74:e0:2b:5f:ba:c8:16:3c:ef:9b:18:c3:f6:c9:61:da:34:3e: 41:83:3e:ca:31:e3:6f:df:d6:5e:4d:9b:d4:bb:fc:63:0b:17: 97:4d:54:69:f6:a7:3c:70:c8:91:b5:41:25:30:41:87:ed:cd: a4:c3:06:10:c1:c5:1d:18:35:e4:22:af:66:77:77:79:ca:44: db:af:82:0f:4e:a7:5a:80:e9:9a:47:15:a9:23:f2:b1:12:2b: e1:07:2f:f9:02:42:0c:c9:3c:80:53:fe:ae:a3:ec:1f:40:ae: 2e:05:c3:21:59:9d:d9:3a:35:d1:a1:9f:ed:82:be:ea:17:8c: d6:22:9e:54:d1:90:9d:31:d7:72:92:16:e8:1a:7c:36:3d:ba: ca:bd:b9:39:9e:5f:3e:a0:29:95:d1:19:8d:aa:9d:5f:55:6d: d1:a7:60:b2:4d:f1:f4:78:68:c5:e0:7b:1e:89:36:3b:a9:87: 9b:98:df:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJjuxmiLyZHak9MNTaER10d7BXfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjAzMjUyMjEyMDBaFw0yNjAzMjcwMTAyMDBaMDMxMTAvBgNV BAMTKDg3QjE5RTMxOUFFRTQyRkY4RTQ0RkE1MEFBMzUzNEQzOUJGRTNFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0CJsCgIjoqHIqflKYbP2j++x kdmkcd5t2YbZ4xzT5Yt/9q+vYR/HDQ/n44sVZr5e4DiZIOxBM0FPmFr1fSNXCi+Y UT+Rn6gNYRqvAEqzipnjZal+WVxa/9SVAGT2UB9BtJuMW4/TkvvlfOoNy1GpwZ0F 55dOPFFH1PwruVric45w68WGksH7ngp5n8kCmTGJ8LCQ2G7RNqDzTA8o9w+WIaff 944Ydg0cmotS/j8RBYVZStjNeR0rCNRKOBA78XDANNTgb5y/bUIRIV5MAB1qiXDz zke1gY1S7LG6NeWEySpJk+4ApMDegXy2y2S2dlDUpM9guB+LJWPqwBJOmGn9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUh7GeMZruQv+ORPpQqjU005v+PsIwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLbbxODpdcAWfDbviBFu uWQeQEV/kjXCFEt1QeM047IlqNFYtF5tr43G9hxJNDomvx2RF25eaxhsMjRgqHBq AHv07mgPYUPfdOArX7rIFjzvmxjD9slh2jQ+QYM+yjHjb9/WXk2b1Lv8YwsXl01U afanPHDIkbVBJTBBh+3NpMMGEMHFHRg15CKvZnd3ecpE26+CD06nWoDpmkcVqSPy sRIr4Qcv+QJCDMk8gFP+rqPsH0CuLgXDIVmd2To10aGf7YK+6heM1iKeVNGQnTHX cpIW6Bp8Nj26yr25OZ5fPqApldEZjaqdX1Vt0adgsk3x9HhoxeB7Hok2O6mHm5jf sQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:00:58 2026 by rpki-client