$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json) Hash identifier: LbWxAIAN/eKCIAF16FOyoDhCrVKPa6XhifpFZFdzK6w= Subject key identifier: 62:78:54:E7:81:1C:48:D2:D1:25:93:F6:49:28:F0:34:F8:C6:0B:C1 Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Certificate serial: 661D043297D176CC3C29D90BE9F75C371D4B7DE6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft Manifest number: E9 Signing time: Fri 24 Jul 2026 12:38:32 +0000 Manifest this update: Fri 24 Jul 2026 12:33:32 +0000 Manifest next update: Sat 25 Jul 2026 15:06:32 +0000 Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=) 2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 4D+HsQ0dLgIVo5eJTlPr39fgRneOKqHXGNHqVV/fyTA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:04:32:97:d1:76:cc:3c:29:d9:0b:e9:f7:5c:37:1d:4b:7d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F Validity Not Before: Jul 24 12:33:32 2026 GMT Not After : Jul 25 15:06:32 2026 GMT Subject: CN=627854E7811C48D2D12593F64928F034F8C60BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:14:3c:68:7b:b7:af:21:87:de:1f:85:68: 8b:6d:47:4b:5c:80:ad:4c:48:33:4e:17:91:e7:9f: 3b:c7:7a:15:0e:d4:61:6a:7b:6b:8f:e5:35:d7:08: 07:5b:a2:62:c8:31:d7:07:7c:e9:0a:e3:fd:a6:03: d1:40:10:86:b4:54:8b:2f:e4:4e:f3:b8:58:5e:84: 6f:13:32:cb:ff:99:85:df:2e:67:c5:96:0f:94:45: 98:43:28:52:30:fd:64:25:b1:72:cd:d1:0f:dd:98: 26:15:69:67:07:c7:08:57:56:71:cf:dc:04:e6:c4: 35:f9:3e:04:70:15:bc:d9:b0:1c:b9:ec:02:53:af: a6:72:5d:1b:f5:11:d8:89:13:a2:bf:fd:97:54:61: 5b:13:bc:57:c9:dd:5d:af:35:ce:ed:db:3d:a1:2b: ed:dc:84:c1:e9:48:d5:dd:a1:06:a4:2f:52:ce:63: 85:52:8e:60:21:e4:71:21:bb:b4:e3:ef:70:b8:f4: ed:9d:19:c1:9b:c5:41:ac:ae:24:e9:68:2c:cb:90: f3:eb:8b:c8:99:02:3c:16:92:7e:38:89:2a:c3:52: 2e:c6:8d:ef:fa:e9:c7:f8:fd:45:00:db:b3:08:b2: b3:4e:ff:18:a7:cb:37:33:62:b8:1c:11:30:53:d4: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:78:54:E7:81:1C:48:D2:D1:25:93:F6:49:28:F0:34:F8:C6:0B:C1 X509v3 Authority Key Identifier: keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:0e:56:ab:28:d0:b2:20:0b:04:2a:d4:23:2c:f7:de:e9:c0: 5d:fc:da:5f:f3:58:b8:b5:b3:2b:b2:a6:ed:9b:e7:53:e9:1a: d3:d4:88:eb:a3:3b:6f:8c:dc:dd:4d:f7:bf:c3:0c:44:b3:09: 7b:aa:a6:5a:35:a1:7e:91:86:da:f9:45:8e:0e:ac:99:4d:91: b7:c8:24:97:f3:8e:b3:3b:19:89:06:bd:08:90:96:94:48:56: c8:fe:40:b9:ce:eb:05:69:8c:2d:6e:93:93:31:7f:40:1d:41: 23:16:0e:38:c1:30:4b:ca:a1:99:cf:ab:8e:03:44:de:6e:e5: 2c:3d:4c:c4:43:48:7c:8c:36:8c:94:32:12:c2:eb:cb:19:2f: ab:b9:36:e1:0b:b4:94:c7:da:ec:a2:5b:6d:70:97:77:0b:8a: c9:92:b0:c0:53:11:cb:7a:56:40:a1:70:27:11:85:44:9d:30: 1f:8f:ca:67:5b:2b:4a:0a:e8:19:45:01:b8:d3:eb:06:4a:f0: 12:94:8e:77:fc:4b:0d:d8:56:fc:aa:d3:5c:86:65:51:c7:b9: 80:4b:73:e7:ee:df:08:ca:d4:c8:c7:45:5d:58:57:a0:fe:4b: f6:ad:b7:fd:73:99:dc:82:ae:ad:d9:26:9b:9a:b8:19:17:d7: 82:d7:21:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZh0EMpfRdsw8KdkL6fdcNx1LfeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThG NDM5OUIwRjAeFw0yNjA3MjQxMjMzMzJaFw0yNjA3MjUxNTA2MzJaMDMxMTAvBgNV BAMTKDYyNzg1NEU3ODExQzQ4RDJEMTI1OTNGNjQ5MjhGMDM0RjhDNjBCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vBQ8aHu3ryGH3h+FaIttR0tc gK1MSDNOF5HnnzvHehUO1GFqe2uP5TXXCAdbomLIMdcHfOkK4/2mA9FAEIa0VIsv 5E7zuFhehG8TMsv/mYXfLmfFlg+URZhDKFIw/WQlsXLN0Q/dmCYVaWcHxwhXVnHP 3ATmxDX5PgRwFbzZsBy57AJTr6ZyXRv1EdiJE6K//ZdUYVsTvFfJ3V2vNc7t2z2h K+3chMHpSNXdoQakL1LOY4VSjmAh5HEhu7Tj73C49O2dGcGbxUGsriTpaCzLkPPr i8iZAjwWkn44iSrDUi7Gje/66cf4/UUA27MIsrNO/xinyzczYrgcETBT1CmJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYnhU54EcSNLRJZP2SSjwNPjGC8EwHwYDVR0j BBgwFoAUZ+LbzpwAsYmEysLturQsWPQ5mw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmI4MDY5NzgtNTU3MS00ZGM5LWE4NzItOTIzOTdjNGM4 ODgwLzAvNjdFMkRCQ0U5QzAwQjE4OTg0Q0FDMkVEQkFCNDJDNThGNDM5OUIwRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvMy82N0UyREJDRTlDMDBCMTg5ODRDQUMyRURC QUI0MkM1OEY0Mzk5QjBGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZiODA2OTc4LTU1NzEtNGRjOS1hODcyLTkyMzk3YzRjODg4MC8wLzY3RTJEQkNF OUMwMEIxODk4NENBQzJFREJBQjQyQzU4RjQzOTlCMEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxDlar KNCyIAsEKtQjLPfe6cBd/Npf81i4tbMrsqbtm+dT6RrT1IjroztvjNzdTfe/wwxE swl7qqZaNaF+kYba+UWODqyZTZG3yCSX846zOxmJBr0IkJaUSFbI/kC5zusFaYwt bpOTMX9AHUEjFg44wTBLyqGZz6uOA0TebuUsPUzEQ0h8jDaMlDISwuvLGS+ruTbh C7SUx9rsolttcJd3C4rJkrDAUxHLelZAoXAnEYVEnTAfj8pnWytKCugZRQG40+sG SvASlI53/EsN2Fb8qtNchmVRx7mAS3Pn7t8IytTIx0VdWFeg/kv2rbf9c5ncgq6t 2SabmrgZF9eC1yHT -----END CERTIFICATE-----Generated at Fri Jul 24 17:28:33 2026 by rpki-client