$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json) Hash identifier: 01xxKlf/iR9XrSn1mDFNbsGAHkt68EoSuF+Gcrd/Ckk= Subject key identifier: B8:D2:CA:4D:6F:ED:68:C5:E0:D4:74:B1:A3:B9:95:BF:DB:8A:4C:A8 Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Certificate serial: 10EA3B3CDF699C2D14007B554AE0254F9EAFB301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft Manifest number: 03A9 Signing time: Fri 25 Sep 2026 16:30:38 +0000 Manifest this update: Fri 25 Sep 2026 16:25:38 +0000 Manifest next update: Sat 26 Sep 2026 17:26:38 +0000 Files and hashes: 1: 3138352e3230302e3231302e302f32342d3234203d3e203137353631.roa (hash: BOK4lpEyVH5XXI/b4WZkHrSllPabXtlg/aEfwPwNvEg=) 2: 3138352e3230302e3230392e302f32342d3234203d3e203137353631.roa (hash: v/h3hPmGhBgtKTeks7zrDtf9px5z2lni2/LbyukdUQ4=) 3: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=) 4: 3138352e3230302e3230382e302f32342d3234203d3e203137353631.roa (hash: KJh7OnFpsOSKfQd/UAft5kU/bpS+tKBMX9KHMKwbuUM=) 5: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: wMQBsJCz0vE/mPUBrgreIBriuiq9+PZyIrdAGxUHPTA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ea:3b:3c:df:69:9c:2d:14:00:7b:55:4a:e0:25:4f:9e:af:b3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907 Validity Not Before: Sep 25 16:25:38 2026 GMT Not After : Sep 26 17:26:38 2026 GMT Subject: CN=B8D2CA4D6FED68C5E0D474B1A3B995BFDB8A4CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:67:50:c7:5f:9c:07:9f:98:5d:9d:9d:79: 93:97:16:98:4a:ac:5b:4e:09:88:36:fe:63:0a:9c: 7a:e3:a1:93:3c:53:e1:b1:2d:0e:19:1e:8c:c2:e3: 49:2d:dd:43:b8:de:00:45:44:31:d5:8b:53:9d:f4: f8:5f:35:e1:70:f4:8a:53:6d:9d:6b:76:9a:30:2b: f9:80:39:37:5f:0f:81:57:15:71:18:d0:da:ef:66: 22:d6:11:60:dc:8a:b8:aa:d4:90:f1:38:a4:cf:9a: 2a:a9:49:8c:4b:9d:26:7c:61:4e:c2:f6:f4:25:fa: 4e:d0:61:06:9d:75:69:83:9f:da:d8:c6:07:41:20: 65:e9:18:26:35:a5:4f:c4:20:5b:ae:3d:7c:18:f8: a1:1d:77:5f:6c:0f:ec:82:94:4e:7a:6e:76:27:18: 24:b7:d3:5e:ce:cc:d9:23:87:c0:69:44:2d:ab:87: 3e:5f:95:2a:87:05:4e:9d:1c:ea:5a:5b:fd:0e:60: 7c:a0:70:85:dc:a2:11:86:70:54:21:19:7c:03:c1: ed:c7:f6:2b:90:50:fc:ee:ba:b1:3d:6f:7c:4d:56: b9:51:16:be:cf:99:3f:68:8f:75:28:99:4c:41:c6: 5d:7c:08:ba:c6:6b:b7:53:8d:f4:ca:be:1e:e0:00: dc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:CA:4D:6F:ED:68:C5:E0:D4:74:B1:A3:B9:95:BF:DB:8A:4C:A8 X509v3 Authority Key Identifier: keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:36:f1:cf:58:65:4d:57:e7:80:a7:ca:04:55:3b:3e:7a:8c: 81:c5:5c:57:19:7b:a6:5a:34:93:4d:84:fe:3f:5a:9b:a2:ec: a5:94:c8:eb:ba:e7:1d:c9:73:49:6b:2b:76:59:88:22:a8:7e: be:44:04:4b:ef:41:9f:0c:30:75:4a:ff:8c:45:2b:d5:26:71: 22:51:4e:26:b1:49:a9:ae:19:47:23:6a:09:62:0c:d2:96:72: a2:9f:e5:82:e8:ab:fc:78:85:ba:31:7a:d3:eb:24:c1:f9:47: ec:26:7d:ae:ae:d5:4c:ac:ad:3f:10:b5:38:d5:6c:af:a3:3e: 51:aa:82:b5:cb:3e:46:65:0b:3e:b5:74:6a:f9:a4:5e:8f:d2: cd:60:a5:7f:8b:31:d7:94:91:06:f5:b6:b2:d2:de:67:fd:86: d0:81:82:5f:1b:c0:b5:0d:ff:8e:b9:14:b9:ba:b6:09:d0:41: 47:84:bb:49:76:cb:d5:09:d1:42:c9:f8:3f:cc:c1:b0:c4:7c: 3d:b3:ed:60:a3:d3:22:46:25:52:49:02:88:be:26:c2:43:91: 81:f0:57:9a:4c:b6:2b:1e:91:9d:34:8e:86:37:84:50:62:03: 11:8b:90:7d:0b:0c:c4:03:16:75:bc:f3:af:bf:0f:88:69:7c: e1:21:8e:69 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEOo7PN9pnC0UAHtVSuAlT56vswEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmRkZWU5MDhhOWFkMmRmYmUzMmZmMzViNDAyYTVhYjIx OThkYzkwNzAeFw0yNjA5MjUxNjI1MzhaFw0yNjA5MjYxNzI2MzhaMDMxMTAvBgNV BAMTKEI4RDJDQTRENkZFRDY4QzVFMEQ0NzRCMUEzQjk5NUJGREI4QTRDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3mdQx1+cB5+YXZ2deZOXFphK rFtOCYg2/mMKnHrjoZM8U+GxLQ4ZHozC40kt3UO43gBFRDHVi1Od9PhfNeFw9IpT bZ1rdpowK/mAOTdfD4FXFXEY0NrvZiLWEWDciriq1JDxOKTPmiqpSYxLnSZ8YU7C 9vQl+k7QYQaddWmDn9rYxgdBIGXpGCY1pU/EIFuuPXwY+KEdd19sD+yClE56bnYn GCS3017OzNkjh8BpRC2rhz5flSqHBU6dHOpaW/0OYHygcIXcohGGcFQhGXwDwe3H 9iuQUPzuurE9b3xNVrlRFr7PmT9oj3UomUxBxl18CLrGa7dTjfTKvh7gANztAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuNLKTW/taMXg1HSxo7mVv9uKTKgwHwYDVR0j BBgwFoAU/d7pCKmtLfvjL/NbQCpashmNyQcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1 NmI2LzMvRkRERUU5MDhBOUFEMkRGQkUzMkZGMzVCNDAyQTVBQjIxOThEQzkwNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19kN3BDS210TGZ2akxfTmJRQ3Bhc2ht TnlRYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03 ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvMy9GRERFRTkwOEE5QUQyREZCRTMy RkYzNUI0MDJBNUFCMjE5OERDOTA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjbxz1hlTVfngKfKBFU7 PnqMgcVcVxl7plo0k02E/j9am6LspZTI67rnHclzSWsrdlmIIqh+vkQES+9Bnwww dUr/jEUr1SZxIlFOJrFJqa4ZRyNqCWIM0pZyop/lguir/HiFujF60+skwflH7CZ9 rq7VTKytPxC1ONVsr6M+UaqCtcs+RmULPrV0avmkXo/SzWClf4sx15SRBvW2stLe Z/2G0IGCXxvAtQ3/jrkUubq2CdBBR4S7SXbL1QnRQsn4P8zBsMR8PbPtYKPTIkYl UkkCiL4mwkORgfBXmky2Kx6RnTSOhjeEUGIDEYuQfQsMxAMWdbzzr78PiGl84SGO aQ== -----END CERTIFICATE-----Generated at Sat Sep 26 02:08:36 2026 by rpki-client