$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: PL36yg92y4zEEJFo0M6qFQqdrnB0GBwUo44V1XrSTnU= Subject key identifier: A4:64:AB:AA:7A:30:E5:B1:05:57:20:6D:B6:BC:DE:F9:74:51:37:1F Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 0891283D1C4FDC5E9FEAD79207A3A99667BC174C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 064C Signing time: Sun 25 Oct 2026 11:31:49 +0000 Manifest this update: Sun 25 Oct 2026 11:26:49 +0000 Manifest next update: Mon 26 Oct 2026 12:52:49 +0000 Files and hashes: 1: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 2: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 3: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 4: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 5: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 6: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 7: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 8: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 9: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 10: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 11: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 12: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 13: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 14: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 15: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 16: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 17: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 18: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 19: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 20: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 21: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 22: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 23: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 24: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 25: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 26: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: X7YrshEErasGXjit4cBhJnpRrUoa7IHBWRG4yMTlM2I=) 27: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: Jr4fRJS+nPVoRQIRXyWs31rP/U/UP3PPufL87ZQz8U8=) 28: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 12:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:28:3d:1c:4f:dc:5e:9f:ea:d7:92:07:a3:a9:96:67:bc:17:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Oct 25 11:26:49 2026 GMT Not After : Oct 26 12:52:49 2026 GMT Subject: CN=A464ABAA7A30E5B10557206DB6BCDEF97451371F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:aa:82:cc:36:6b:1b:0e:52:91:bc:35:0d:75: 12:b7:f7:c1:a4:7c:9d:0a:03:fb:2b:c2:bc:91:37: 05:f6:3c:77:75:4f:f9:b7:16:a4:c2:06:a8:f1:2f: 00:e7:4a:ad:39:5d:04:4d:4a:8a:91:c6:19:f1:1e: 6e:76:a2:bb:fe:ee:02:3b:75:04:db:c2:82:05:03: 39:f0:82:ab:35:13:2e:6d:6d:7b:30:7c:f0:f6:d8: cb:54:fd:00:93:bf:e4:3c:fc:5f:9b:d6:9f:20:2d: c7:c1:a8:09:36:bd:d7:84:0b:03:c4:a7:e0:91:85: 94:e6:eb:4b:05:98:9f:da:b1:a2:ad:fb:f4:81:87: c4:38:64:88:9c:87:c2:e4:3d:ec:8c:20:e3:88:4d: 63:00:ec:d7:6a:5d:7a:07:b7:0e:9c:36:05:22:b4: d6:16:63:de:34:b6:33:6d:5c:70:18:68:bb:ec:d8: 91:9d:36:0e:cb:fb:03:86:73:eb:e6:90:af:7e:67: 72:b6:89:53:20:bf:be:d2:33:19:fb:cc:e7:a9:a4: 03:55:3a:5e:62:c2:64:59:c9:5c:7c:39:08:20:3c: 3c:5c:f6:7c:50:41:78:cd:bf:fe:55:7a:09:eb:0a: 89:cd:52:9b:22:78:a1:82:cf:a7:bb:18:3c:b3:f9: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:64:AB:AA:7A:30:E5:B1:05:57:20:6D:B6:BC:DE:F9:74:51:37:1F X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:64:2c:d8:19:30:77:aa:60:3b:b9:17:69:6f:bf:a1:0e:c4: 05:81:c4:21:c2:dc:7a:c7:74:16:35:a3:b0:fd:a5:f0:3f:d5: b5:6e:4b:66:3b:ca:ee:44:c7:54:89:11:16:4f:c6:8b:97:c9: 95:76:ee:50:a8:5f:cb:13:e3:87:fe:bf:69:56:b8:c4:40:ff: 6d:66:36:53:b6:62:39:6f:7c:5c:12:19:9e:8d:0d:9f:99:2f: 53:1b:d6:74:28:7b:ed:22:1d:ee:41:72:80:5c:eb:59:c5:d8: e0:fe:0f:59:95:48:89:f1:e7:c6:9f:26:89:16:4c:a0:c9:7d: a6:1c:eb:68:fe:cf:62:b2:46:66:f3:56:35:c4:e2:96:d5:00: af:70:06:1f:d4:3b:54:c6:64:84:50:e9:4e:73:8d:e9:2c:59: 82:a3:c1:c4:2a:d7:65:ed:54:64:47:97:20:99:47:e0:5d:9a: d3:67:41:33:5e:3c:da:9e:6b:07:e4:8c:b0:79:06:85:0c:41: 48:35:45:db:ec:b3:50:a1:e5:b8:7d:d4:31:9a:a9:57:a7:0d: d5:32:b7:ce:88:23:a4:b9:88:d4:5d:84:31:21:f1:27:77:56: dd:1e:50:e9:93:17:27:d5:19:21:ce:c4:c6:a4:c0:b0:92:a5: 89:ce:47:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCJEoPRxP3F6f6teSB6Oplme8F0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjEwMjUxMTI2NDlaFw0yNjEwMjYxMjUyNDlaMDMxMTAvBgNV BAMTKEE0NjRBQkFBN0EzMEU1QjEwNTU3MjA2REI2QkNERUY5NzQ1MTM3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnqoLMNmsbDlKRvDUNdRK398Gk fJ0KA/srwryRNwX2PHd1T/m3FqTCBqjxLwDnSq05XQRNSoqRxhnxHm52orv+7gI7 dQTbwoIFAznwgqs1Ey5tbXswfPD22MtU/QCTv+Q8/F+b1p8gLcfBqAk2vdeECwPE p+CRhZTm60sFmJ/asaKt+/SBh8Q4ZIich8LkPeyMIOOITWMA7NdqXXoHtw6cNgUi tNYWY940tjNtXHAYaLvs2JGdNg7L+wOGc+vmkK9+Z3K2iVMgv77SMxn7zOeppANV Ol5iwmRZyVx8OQggPDxc9nxQQXjNv/5VegnrConNUpsieKGCz6e7GDyz+TN3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpGSrqnow5bEFVyBttrze+XRRNx8wHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWQs2Bkwd6pgO7kXaW+/ oQ7EBYHEIcLcesd0FjWjsP2l8D/VtW5LZjvK7kTHVIkRFk/Gi5fJlXbuUKhfyxPj h/6/aVa4xED/bWY2U7ZiOW98XBIZno0Nn5kvUxvWdCh77SId7kFygFzrWcXY4P4P WZVIifHnxp8miRZMoMl9phzraP7PYrJGZvNWNcTiltUAr3AGH9Q7VMZkhFDpTnON 6SxZgqPBxCrXZe1UZEeXIJlH4F2a02dBM1482p5rB+SMsHkGhQxBSDVF2+yzUKHl uH3UMZqpV6cN1TK3zogjpLmI1F2EMSHxJ3dW3R5Q6ZMXJ9UZIc7ExqTAsJKlic5H bA== -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:21 2026 by rpki-client