$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: U0aYnl1Hj4BRw3dRlpCgTnoqU12ZcUGuuWkiCnyGyB8= Subject key identifier: F4:8C:C2:A3:F9:2B:F0:F9:00:6D:F9:34:6C:66:F9:A5:03:6A:76:2C Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 4AFCA923CF07189B28D536F8589E37F6D3F56BE8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: 47 Signing time: Thu 26 Mar 2026 02:42:18 +0000 Manifest this update: Thu 26 Mar 2026 02:37:18 +0000 Manifest next update: Fri 27 Mar 2026 04:14:18 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 3xTSg6EFoPAJXkZm8Jzwf0PvGh87COy+wfaZ4I9ZrSA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fc:a9:23:cf:07:18:9b:28:d5:36:f8:58:9e:37:f6:d3:f5:6b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Mar 26 02:37:18 2026 GMT Not After : Mar 27 04:14:18 2026 GMT Subject: CN=F48CC2A3F92BF0F9006DF9346C66F9A5036A762C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:e7:62:6e:56:e9:2f:21:f7:b1:55:f7:a2: 05:b8:f0:85:62:a4:f6:9d:b1:d9:7f:13:be:86:74: 44:7c:52:f9:38:f2:06:97:99:fa:7f:77:94:7e:80: e1:ae:67:88:cd:64:7f:80:1b:a2:2b:f4:a3:38:19: 78:dd:49:2b:ea:ab:d8:fc:5a:af:1a:94:a1:96:55: 5d:2c:61:97:86:17:d4:0a:0e:76:cc:75:04:bb:2a: 8f:f4:ff:1a:25:c2:1d:49:43:7c:23:a9:37:c0:6a: 20:e6:dd:a2:d7:9d:43:55:d5:98:b8:f8:47:82:75: 8f:1f:80:fb:4f:7e:ce:cb:93:05:91:23:3b:c6:fe: 4f:d1:63:2a:df:9b:5f:72:e0:0b:d8:25:26:69:75: 90:63:ed:c8:d5:6b:7b:91:4d:7f:da:04:41:63:7b: 3e:be:2b:a0:a5:d4:bd:7e:82:67:ea:76:3a:9c:ff: b1:80:b9:14:4b:13:db:69:06:5d:03:be:a2:77:2b: 19:2c:b7:5a:19:d0:2d:48:7e:32:ee:10:6f:43:c5: d0:f3:ad:e4:39:91:ea:14:50:60:e7:5e:39:93:2e: 4f:6d:bf:ea:ce:95:fe:6e:7a:4b:86:33:89:3c:5e: c8:74:54:a8:ea:f8:b4:0e:5a:ea:6b:fc:13:bc:67: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8C:C2:A3:F9:2B:F0:F9:00:6D:F9:34:6C:66:F9:A5:03:6A:76:2C X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:48:5b:82:c5:0b:5e:18:59:af:9e:45:39:df:fe:54:8e: 85:1d:41:78:40:b5:23:a4:7d:84:ed:4d:4d:a4:5c:72:22:e0: aa:15:ff:ea:68:6d:f3:6a:cc:79:a3:64:3e:a7:a8:68:4f:24: e7:69:1e:66:5c:91:9b:06:06:4c:47:a4:0c:7a:4b:dd:21:6f: 9f:7a:8f:93:17:a3:1d:f2:fd:96:f8:83:72:83:a5:1f:1f:b8: 21:6a:ff:3a:ac:cb:39:53:a4:5b:0d:8c:78:18:9b:44:11:e3: fd:9f:ec:2b:62:d9:a6:89:d0:b1:36:c4:7c:bf:ac:08:be:ed: da:e9:6d:42:a0:35:9b:ca:62:b1:c3:f3:b1:3a:8e:6c:fc:b5: fd:58:ab:a4:f3:e8:ef:12:62:26:4f:6d:cf:d1:40:00:79:e5: 66:e5:e8:7c:39:6a:f0:d8:b4:3e:ea:a7:dc:3e:b5:cd:5f:74: 19:cd:57:5b:f5:92:7b:6c:f1:69:9f:3f:4b:6d:f6:0e:56:b7: d8:83:8b:7f:df:88:d1:7f:9f:a2:11:8c:e5:0e:01:6d:ac:ec: 46:23:43:24:99:d7:2d:bf:90:d6:90:26:c1:7f:ae:18:ed:f3: df:a0:46:c2:e6:68:4f:9d:7c:ed:60:8f:d4:ed:b1:eb:b1:1c: 26:18:85:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSvypI88HGJso1Tb4WJ439tP1a+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjAzMjYwMjM3MThaFw0yNjAzMjcwNDE0MThaMDMxMTAvBgNV BAMTKEY0OENDMkEzRjkyQkYwRjkwMDZERjkzNDZDNjZGOUE1MDM2QTc2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgK+diblbpLyH3sVX3ogW48IVi pPadsdl/E76GdER8Uvk48gaXmfp/d5R+gOGuZ4jNZH+AG6Ir9KM4GXjdSSvqq9j8 Wq8alKGWVV0sYZeGF9QKDnbMdQS7Ko/0/xolwh1JQ3wjqTfAaiDm3aLXnUNV1Zi4 +EeCdY8fgPtPfs7LkwWRIzvG/k/RYyrfm19y4AvYJSZpdZBj7cjVa3uRTX/aBEFj ez6+K6Cl1L1+gmfqdjqc/7GAuRRLE9tpBl0DvqJ3Kxkst1oZ0C1IfjLuEG9DxdDz reQ5keoUUGDnXjmTLk9tv+rOlf5uekuGM4k8Xsh0VKjq+LQOWupr/BO8Z2zFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9IzCo/kr8PkAbfk0bGb5pQNqdiwwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfE0hb gsULXhhZr55FOd/+VI6FHUF4QLUjpH2E7U1NpFxyIuCqFf/qaG3zasx5o2Q+p6ho TyTnaR5mXJGbBgZMR6QMekvdIW+feo+TF6Md8v2W+INyg6UfH7ghav86rMs5U6Rb DYx4GJtEEeP9n+wrYtmmidCxNsR8v6wIvu3a6W1CoDWbymKxw/OxOo5s/LX9WKuk 8+jvEmImT23P0UAAeeVm5eh8OWrw2LQ+6qfcPrXNX3QZzVdb9ZJ7bPFpnz9LbfYO VrfYg4t/34jRf5+iEYzlDgFtrOxGI0Mkmdctv5DWkCbBf64Y7fPfoEbC5mhPnXzt YI/U7bHrsRwmGIXL -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:35 2026 by rpki-client