$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: Pxq3qILv7s4381muZxfXMmt3AvMbJtcoIT/KYSNjkNM= Subject key identifier: E8:F5:9F:04:D8:87:55:0F:41:61:9D:09:52:99:EA:04:1A:5D:68:83 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 35B447295B4ED09BFC9898A75938D1E2584B9366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0695 Signing time: Wed 25 Mar 2026 17:21:14 +0000 Manifest this update: Wed 25 Mar 2026 17:16:14 +0000 Manifest next update: Thu 26 Mar 2026 19:54:14 +0000 Files and hashes: 1: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: HHWDsn/geYTSKOK374fOgzwqQ04cratsjB9aVUs6qO0=) 2: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 3: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 4: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: IVpkKpecJIjzuckRW19RYnHFzcqeOz1CHzHhlqd09/8=) 5: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 6: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: oZOogcZA7gOpZC0s0tbGMXCZZe5qdoNGw7VhUnq2iag=) 7: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 8: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 9: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 10: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 11: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: MXv0n3yhVwbvjjaJOF9O73YzDFTj3ml1/vPDdHddI3o=) 12: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: rxGzTHw2ETBLYdKcURKX80/JYXYHlHWFPETTk7njjlE=) 13: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 14: 3138352e3133302e36322e302f32342d3234203d3e20323036313530.roa (hash: 0Uta0mciJtwdV1pzRO+5GA2qv0qJ2rULFPtgrlRyMi0=) 15: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 16: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 17: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 19: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 20: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 21: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: X7Tn/GpCSEBlmrST5TEKgAjVIubIFvn/OXAnR/EzN3o=) 22: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: PCz6aeIUTtC34FXSr6irNuWXyhZRMV7yjZ9OeA9cKuk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:47:29:5b:4e:d0:9b:fc:98:98:a7:59:38:d1:e2:58:4b:93:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Mar 25 17:16:14 2026 GMT Not After : Mar 26 19:54:14 2026 GMT Subject: CN=E8F59F04D887550F41619D095299EA041A5D6883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:64:64:d1:f3:4d:8a:30:f6:b0:58:b0:7c: d7:05:dd:67:2c:2c:8b:50:25:64:cc:37:da:7e:4f: e9:12:f4:98:ad:df:65:4f:f2:43:79:75:5d:96:c8: de:50:f6:cc:a9:59:7e:16:72:4a:ae:bb:34:f5:d6: df:07:a7:ae:e2:25:0e:23:1b:30:07:37:db:c1:81: 1e:6c:ee:84:fd:1f:6a:07:90:59:01:a1:c6:98:6a: 6d:92:0d:b9:fe:c4:df:76:29:59:1b:ee:35:2c:5a: 67:1c:45:4d:ae:e3:f4:34:4b:92:e4:7f:78:10:a2: e3:46:83:49:f2:de:d0:0b:84:1e:f3:ef:22:d9:dd: 7e:42:8c:4b:70:2f:c6:dc:38:ef:4a:00:cb:95:94: a3:74:46:e1:7f:67:57:f0:53:33:e0:3a:55:3b:2f: 5c:42:21:a3:2e:9b:57:59:d7:98:be:55:c1:49:1c: f3:6e:bf:19:dd:39:ca:13:2c:10:ad:8c:cb:1a:7a: ed:f9:46:29:39:6f:1c:b7:e0:cd:1a:4c:09:16:04: a9:65:1f:74:6f:19:38:97:d2:e2:cc:12:1e:ca:53: ef:0e:68:f9:be:d4:b9:9c:67:6b:5a:e5:81:cc:82: ab:79:0f:a3:88:7d:4a:20:8d:39:14:d9:99:af:73: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F5:9F:04:D8:87:55:0F:41:61:9D:09:52:99:EA:04:1A:5D:68:83 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ed:5a:e0:c9:97:b4:80:d3:db:57:c7:c9:e3:f5:c1:4f:ac: 97:ac:9e:00:ac:92:8f:57:38:1d:05:25:f2:98:0f:20:ba:c1: 48:0d:ab:fc:13:30:6e:16:13:17:61:bf:6f:c7:b6:6a:c3:e4: df:38:51:83:77:fa:5c:98:98:7b:89:78:df:c8:09:ce:55:af: 55:a7:30:92:d3:e5:65:64:9e:41:27:b3:0b:8b:e1:1e:f6:79: 89:59:c5:62:c4:af:65:21:87:59:01:6a:4f:70:0f:64:4d:e8: 1f:7e:de:38:8d:df:40:e9:b3:fb:32:fc:a3:06:8d:50:fb:e8: e0:c5:bf:19:3c:4c:a3:53:e2:2c:54:0c:89:6e:6a:ab:c0:c2: c9:40:cb:3b:a2:b8:3b:02:40:d2:04:fa:31:03:4a:11:16:05: 21:0e:4b:f7:46:b1:1c:c6:d8:8a:db:40:c1:40:d7:3a:73:f1: f4:5e:6c:a2:19:86:5f:f3:a3:ce:98:f8:1a:bc:2d:0c:6a:fe: 51:21:f5:08:96:f7:54:12:30:4f:25:ad:ac:bc:ea:4a:5d:d0: be:b1:5f:73:ff:34:11:f6:33:de:d6:20:ca:d3:47:7f:b0:53: 02:bc:42:03:87:6d:53:59:4a:99:36:f2:8a:27:c3:e2:78:bd: 57:6c:be:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNbRHKVtO0Jv8mJinWTjR4lhLk2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNjAzMjUxNzE2MTRaFw0yNjAzMjYxOTU0MTRaMDMxMTAvBgNV BAMTKEU4RjU5RjA0RDg4NzU1MEY0MTYxOUQwOTUyOTlFQTA0MUE1RDY4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaw2Rk0fNNijD2sFiwfNcF3Wcs LItQJWTMN9p+T+kS9Jit32VP8kN5dV2WyN5Q9sypWX4WckquuzT11t8Hp67iJQ4j GzAHN9vBgR5s7oT9H2oHkFkBocaYam2SDbn+xN92KVkb7jUsWmccRU2u4/Q0S5Lk f3gQouNGg0ny3tALhB7z7yLZ3X5CjEtwL8bcOO9KAMuVlKN0RuF/Z1fwUzPgOlU7 L1xCIaMum1dZ15i+VcFJHPNuvxndOcoTLBCtjMsaeu35Rik5bxy34M0aTAkWBKll H3RvGTiX0uLMEh7KU+8OaPm+1LmcZ2ta5YHMgqt5D6OIfUogjTkU2Zmvc8ZfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6PWfBNiHVQ9BYZ0JUpnqBBpdaIMwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+1a4MmXtIDT21fHyeP1 wU+sl6yeAKySj1c4HQUl8pgPILrBSA2r/BMwbhYTF2G/b8e2asPk3zhRg3f6XJiY e4l438gJzlWvVacwktPlZWSeQSezC4vhHvZ5iVnFYsSvZSGHWQFqT3APZE3oH37e OI3fQOmz+zL8owaNUPvo4MW/GTxMo1PiLFQMiW5qq8DCyUDLO6K4OwJA0gT6MQNK ERYFIQ5L90axHMbYittAwUDXOnPx9F5sohmGX/Ojzpj4GrwtDGr+USH1CJb3VBIw TyWtrLzqSl3QvrFfc/80EfYz3tYgytNHf7BTArxCA4dtU1lKmTbyiifD4ni9V2y+ 3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:12 2026 by rpki-client