$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: QuFlO/Ej6k8cf7D68JSeZsLaNsDHogWczhTk6RHAr3w= Subject key identifier: 26:02:5F:3C:4E:35:02:60:72:A9:9D:8D:AE:60:7A:9F:46:C9:36:52 Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 04E6DE3CF894111E0AF7312D65C5FC0DCF3A4A1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0121 Signing time: Fri 27 Mar 2026 16:32:58 +0000 Manifest this update: Fri 27 Mar 2026 16:27:58 +0000 Manifest next update: Sat 28 Mar 2026 20:09:58 +0000 Files and hashes: 1: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 2: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=) 3: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=) 4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=) 5: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=) 6: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=) 7: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: j+4IOqh2Es9FxwNO+ti66FGOWCRWL0WFseK8VTTWqYg=) 8: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 20:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:de:3c:f8:94:11:1e:0a:f7:31:2d:65:c5:fc:0d:cf:3a:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Mar 27 16:27:58 2026 GMT Not After : Mar 28 20:09:58 2026 GMT Subject: CN=26025F3C4E35026072A99D8DAE607A9F46C93652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:a8:50:b6:16:b2:04:e6:5f:c4:53:06:05: 82:7a:d1:aa:3a:01:c5:b5:04:1a:e2:f4:f4:c1:f9: d8:31:41:3f:bc:89:9c:50:38:63:9d:2f:85:ed:3a: b4:6c:87:e4:fe:12:03:88:dc:68:c6:b0:63:ae:18: 7c:6f:8e:61:90:a9:97:31:74:c4:50:28:cb:73:15: b9:f5:3b:66:93:aa:c9:1e:e9:b1:5c:72:3e:ed:ff: 57:2f:4a:ce:6e:4e:e6:4c:30:7d:9c:f7:a0:96:66: c0:15:e6:d1:6b:11:16:88:90:6f:fe:a3:28:10:99: 91:6f:1e:9a:82:cf:1e:d7:a3:58:97:83:b6:8b:75: ad:c8:de:2c:ec:04:d1:d7:9a:df:dc:28:a7:99:22: f3:62:0d:ef:e1:6f:32:e0:ae:7c:c6:28:5e:bc:32: d4:3f:70:f2:37:47:70:9c:c5:97:15:a3:38:96:62: ea:a3:d1:4e:d4:86:ad:70:c2:fe:b5:4d:33:ee:f2: 17:87:15:49:71:43:47:2a:66:88:ef:40:ba:27:f5: d6:b8:f8:cf:df:a3:19:07:ce:b7:e4:8e:45:d5:fa: 01:65:f3:b2:91:d0:78:5a:b3:ba:d5:04:79:a9:7f: 89:54:27:45:2e:08:93:1f:2a:6c:8f:11:20:e1:e4: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:5F:3C:4E:35:02:60:72:A9:9D:8D:AE:60:7A:9F:46:C9:36:52 X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ec:5a:17:2e:4e:85:c4:6f:0a:c3:2b:dd:94:51:30:b4:d1: d9:26:f6:f5:6b:66:d2:a4:a4:a3:af:81:a4:1e:7b:78:34:55: 5f:61:0d:82:81:88:18:3f:19:5f:42:bd:3c:af:c5:d9:4d:17: 88:3b:a4:95:dd:95:17:3f:ce:ce:0f:ac:08:4a:65:4d:73:63: ef:0f:17:62:5e:8c:35:39:26:b9:aa:2a:4d:58:9b:12:ef:bc: 39:89:b7:3e:b4:ab:23:09:0b:6b:c3:53:af:67:cd:d5:dd:0b: 2f:ef:71:31:f7:bf:24:56:c3:74:39:c3:00:09:5e:ed:19:f1: 11:6e:14:7a:b5:c1:da:c1:a4:c1:ff:0e:26:78:f7:dd:ef:81: e4:ec:67:a8:44:bd:48:26:49:33:5d:03:42:3d:38:42:60:7c: 32:1e:8f:1c:7f:f8:bd:4e:d2:fe:de:8b:27:8e:a0:6d:6f:9d: f3:a0:f3:df:6e:15:be:e1:7d:06:a3:31:97:36:6c:85:27:f3: 14:00:4e:18:79:fc:04:c1:0a:ea:d1:4e:5b:0f:fe:49:b2:6c: ee:4e:34:49:46:b8:d3:fd:53:3e:bd:47:09:2c:7f:72:22:84: ae:50:80:5f:5d:5f:f3:9a:f6:3a:d7:79:eb:23:e7:fc:97:05: 9d:e4:b3:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBObePPiUER4K9zEtZcX8Dc86ShowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNjAzMjcxNjI3NThaFw0yNjAzMjgyMDA5NThaMDMxMTAvBgNV BAMTKDI2MDI1RjNDNEUzNTAyNjA3MkE5OUQ4REFFNjA3QTlGNDZDOTM2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fahQthayBOZfxFMGBYJ60ao6 AcW1BBri9PTB+dgxQT+8iZxQOGOdL4XtOrRsh+T+EgOI3GjGsGOuGHxvjmGQqZcx dMRQKMtzFbn1O2aTqske6bFccj7t/1cvSs5uTuZMMH2c96CWZsAV5tFrERaIkG/+ oygQmZFvHpqCzx7Xo1iXg7aLda3I3izsBNHXmt/cKKeZIvNiDe/hbzLgrnzGKF68 MtQ/cPI3R3CcxZcVoziWYuqj0U7Uhq1wwv61TTPu8heHFUlxQ0cqZojvQLon9da4 +M/foxkHzrfkjkXV+gFl87KR0Hhas7rVBHmpf4lUJ0UuCJMfKmyPESDh5K1NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJgJfPE41AmByqZ2NrmB6n0bJNlIwHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB67FoX Lk6FxG8KwyvdlFEwtNHZJvb1a2bSpKSjr4GkHnt4NFVfYQ2CgYgYPxlfQr08r8XZ TReIO6SV3ZUXP87OD6wISmVNc2PvDxdiXow1OSa5qipNWJsS77w5ibc+tKsjCQtr w1OvZ83V3Qsv73Ex978kVsN0OcMACV7tGfERbhR6tcHawaTB/w4mePfd74Hk7Geo RL1IJkkzXQNCPThCYHwyHo8cf/i9TtL+3osnjqBtb53zoPPfbhW+4X0GozGXNmyF J/MUAE4YefwEwQrq0U5bD/5JsmzuTjRJRrjT/VM+vUcJLH9yIoSuUIBfXV/zmvY6 13nrI+f8lwWd5LO6 -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:52 2026 by rpki-client