$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: 9etIuMxXUsm7olUgKs1X2HKpPnneirDgJtndxfzhfq8= Subject key identifier: 2C:8C:F7:D3:65:77:D9:07:AC:BD:B5:70:54:07:7E:74:23:86:F5:46 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 1F4EDDA67A9BCFBCF0ABC820783EA004E8BF377D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 03CF Signing time: Wed 25 Mar 2026 17:00:13 +0000 Manifest this update: Wed 25 Mar 2026 16:55:13 +0000 Manifest next update: Thu 26 Mar 2026 17:13:13 +0000 Files and hashes: 1: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 2: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: hlRxVRTGCYLs+4pugx8KRqifUcS/gxNMDCFRq+0LHH0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:dd:a6:7a:9b:cf:bc:f0:ab:c8:20:78:3e:a0:04:e8:bf:37:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Mar 25 16:55:13 2026 GMT Not After : Mar 26 17:13:13 2026 GMT Subject: CN=2C8CF7D36577D907ACBDB57054077E742386F546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:4a:f5:c0:41:34:39:0a:5a:65:82:91:cc: b4:ec:b8:3f:0b:4c:18:0e:76:d3:92:3d:93:e1:9c: 23:63:b9:88:97:40:e8:70:25:9d:7b:1b:23:78:95: 12:aa:ee:e9:c1:f3:d2:6a:53:9f:9b:31:a0:65:a6: 35:db:e1:b0:29:6b:dc:82:38:2d:64:30:b1:72:6f: 35:17:49:68:12:b7:98:e0:27:62:c7:dd:90:af:76: 92:c6:0b:ed:65:9e:b9:1a:ec:ec:fa:2f:a9:97:57: 7d:a3:0d:e6:4d:af:ac:88:5a:2d:21:7d:fe:0c:9c: 0e:44:36:23:33:56:84:8d:70:16:92:fe:54:f1:3c: 85:a2:a8:ab:c8:a0:02:17:7a:e0:9a:04:2b:39:f8: 46:9f:1a:da:28:28:15:d4:25:2f:ce:6c:b8:e1:ae: 96:2e:af:f4:0c:fb:99:9d:d3:95:6b:5b:9a:49:a2: 1f:06:61:01:5f:1d:d7:82:56:01:07:1b:6d:27:d5: d7:2e:a5:f4:c6:08:b1:29:93:97:7a:71:1c:c3:19: 8d:89:39:a0:75:bc:ed:27:a0:f9:55:56:9a:af:84: 5b:6c:de:a6:7d:ca:d4:5c:f4:c8:b1:c7:33:fe:1f: 17:d8:c6:6e:e6:5f:e6:48:df:4e:0c:ca:b0:15:5a: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:F7:D3:65:77:D9:07:AC:BD:B5:70:54:07:7E:74:23:86:F5:46 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:91:ee:85:f5:64:46:7a:05:e2:dc:39:d6:27:2d:95:c6:49: 4d:71:ce:ef:63:46:3f:8d:a5:88:f2:9f:95:39:54:05:3e:a0: 01:42:61:ad:08:90:b3:ec:a2:15:03:25:05:56:59:d6:91:39: e2:aa:42:98:a0:95:c7:90:99:8a:61:f1:4b:7b:0e:2a:46:50: e8:fb:cd:04:76:a4:13:58:46:2a:7d:04:0b:85:1d:9f:e9:b1: c1:8b:aa:19:98:b1:03:ad:48:8a:51:9a:a7:25:6d:c7:99:2b: 96:9a:1a:01:dc:a0:ab:0e:77:a6:f3:bf:00:d5:69:fa:2a:5c: 1f:e7:4a:0b:47:3e:6f:15:95:f2:9f:44:c6:29:a1:c7:7c:9c: e2:96:ed:b0:14:d6:2e:86:fe:9a:3e:b6:05:7d:94:31:1c:e3: 52:6f:f4:0a:63:50:17:bc:f1:9f:10:f0:56:6f:32:7d:84:2d: 3b:dd:73:5c:0f:2b:01:c8:a2:1d:c1:cb:21:d4:10:f3:55:5b: 04:97:d1:fd:cc:37:f3:6c:78:e7:77:41:37:43:b8:71:ac:4f: 47:61:e6:13:8a:43:f5:da:69:1c:fb:ef:8f:d4:92:37:c5:f4: e4:5a:58:37:1d:94:90:1a:ff:f1:ec:05:70:bf:43:95:26:66: 99:21:21:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH07dpnqbz7zwq8ggeD6gBOi/N30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNjAzMjUxNjU1MTNaFw0yNjAzMjYxNzEzMTNaMDMxMTAvBgNV BAMTKDJDOENGN0QzNjU3N0Q5MDdBQ0JEQjU3MDU0MDc3RTc0MjM4NkY1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr50r1wEE0OQpaZYKRzLTsuD8L TBgOdtOSPZPhnCNjuYiXQOhwJZ17GyN4lRKq7unB89JqU5+bMaBlpjXb4bApa9yC OC1kMLFybzUXSWgSt5jgJ2LH3ZCvdpLGC+1lnrka7Oz6L6mXV32jDeZNr6yIWi0h ff4MnA5ENiMzVoSNcBaS/lTxPIWiqKvIoAIXeuCaBCs5+EafGtooKBXUJS/ObLjh rpYur/QM+5md05VrW5pJoh8GYQFfHdeCVgEHG20n1dcupfTGCLEpk5d6cRzDGY2J OaB1vO0noPlVVpqvhFts3qZ9ytRc9MixxzP+HxfYxm7mX+ZI304MyrAVWrllAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULIz302V32QesvbVwVAd+dCOG9UYwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHke6F 9WRGegXi3DnWJy2VxklNcc7vY0Y/jaWI8p+VOVQFPqABQmGtCJCz7KIVAyUFVlnW kTniqkKYoJXHkJmKYfFLew4qRlDo+80EdqQTWEYqfQQLhR2f6bHBi6oZmLEDrUiK UZqnJW3HmSuWmhoB3KCrDnem878A1Wn6Klwf50oLRz5vFZXyn0TGKaHHfJzilu2w FNYuhv6aPrYFfZQxHONSb/QKY1AXvPGfEPBWbzJ9hC073XNcDysByKIdwcsh1BDz VVsEl9H9zDfzbHjnd0E3Q7hxrE9HYeYTikP12mkc+++P1JI3xfTkWlg3HZSQGv/x 7AVwv0OVJmaZISG2 -----END CERTIFICATE-----Generated at Thu Mar 26 04:22:17 2026 by rpki-client