$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: q6hyLJ8f3jsFvMWcoAe6v1q+52OJFlxdCEyD38zjA2E= Subject key identifier: C3:0B:1D:40:7B:CA:CB:68:7E:4C:FD:B1:86:BC:C2:42:65:3E:A9:51 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 33F901E764383941F7E295E20E8E6A2C62BC3739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 0644 Signing time: Mon 19 Oct 2026 11:56:49 +0000 Manifest this update: Mon 19 Oct 2026 11:51:49 +0000 Manifest next update: Tue 20 Oct 2026 14:13:49 +0000 Files and hashes: 1: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 2: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 3: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 4: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 5: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 6: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 7: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 8: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 9: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 10: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 11: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 12: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 13: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 14: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 15: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 16: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 17: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 18: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: hQD01S1XurM93HBdI4Tm2GIB8H3W351Ub6iKyesDKgY=) 19: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 20: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 21: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 22: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 23: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 24: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: Jr4fRJS+nPVoRQIRXyWs31rP/U/UP3PPufL87ZQz8U8=) 25: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 26: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 27: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 28: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f9:01:e7:64:38:39:41:f7:e2:95:e2:0e:8e:6a:2c:62:bc:37:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Oct 19 11:51:49 2026 GMT Not After : Oct 20 14:13:49 2026 GMT Subject: CN=C30B1D407BCACB687E4CFDB186BCC242653EA951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:a5:f9:fb:32:cd:e7:c0:7e:27:28:49:69: 2d:8c:eb:8e:d9:ad:69:2c:75:bb:03:dd:12:6a:7d: 70:55:73:f4:00:8b:13:94:42:64:27:30:e1:9f:60: ef:0a:26:71:e2:62:d6:af:3d:04:05:aa:ec:31:27: 1d:cb:09:76:60:ed:4c:3b:04:77:a2:d3:a7:32:b5: d2:ac:63:e5:91:0c:2e:ba:b9:b2:4a:61:23:4e:b8: 53:6f:63:0b:91:98:cf:6a:c2:7e:c1:94:5d:ab:49: b1:17:dc:42:00:2b:70:0e:ce:90:d1:c0:58:4f:2b: 0f:b8:6c:f1:d0:0f:f9:5e:d6:31:c3:85:a0:21:d5: 59:17:b0:3d:17:da:59:79:89:07:82:c9:e6:39:67: b3:23:74:69:7f:d9:48:01:a4:e4:18:84:33:59:d5: a8:48:f6:18:af:55:a2:05:7f:aa:80:21:e6:a3:51: 77:64:ea:c9:b8:e0:3e:03:12:af:dc:21:58:2d:11: c5:fd:6b:54:d9:e4:f4:62:1b:6a:19:31:35:29:d1: 2b:61:62:6a:56:c1:40:5e:68:d3:74:57:8e:44:cb: 50:55:c4:02:7d:da:2e:64:45:fd:b3:99:7e:32:0c: f7:03:e8:c5:58:17:50:c5:05:4d:a1:08:37:10:86: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0B:1D:40:7B:CA:CB:68:7E:4C:FD:B1:86:BC:C2:42:65:3E:A9:51 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4b:74:84:99:e3:5b:27:12:05:37:fe:7b:53:88:1a:a6:4e: b8:c9:9e:ef:99:1b:95:99:d3:62:d8:47:43:3d:f3:f5:d9:5e: 48:2b:2c:7d:6d:50:d8:f4:c8:55:43:fe:f1:8d:fa:f7:ee:9e: 91:c4:c2:75:9d:ce:b5:33:ee:ec:db:73:79:67:2a:b8:47:30: 93:e6:41:6c:19:9f:85:d8:61:02:02:7b:5f:93:d9:63:5e:6e: 7e:0f:45:60:f2:68:56:f7:57:03:00:bf:07:06:b0:59:6c:be: 42:b1:05:31:4f:c8:93:05:41:04:8a:b8:15:6e:d4:ec:cf:59: d5:51:21:de:04:e2:08:e6:d0:32:ae:fc:ed:8b:a0:ca:c5:df: 77:fb:41:4d:a3:8c:74:8f:06:f8:db:80:c8:ab:13:25:7a:b9: f5:24:e5:48:e5:2a:8a:d3:94:5d:39:a6:03:1a:8c:43:dd:cb: e8:7e:4f:c3:01:c8:0a:d7:a1:12:fd:63:8f:8e:fd:2a:ea:d8: 75:b8:e8:78:c6:01:08:b6:49:5b:d0:ae:2f:f3:99:57:80:c0: fa:07:16:a4:b7:a8:9b:16:1e:a3:16:6e:c5:6c:b9:8d:90:5a: 28:86:4b:83:99:23:61:1f:1f:91:75:86:0c:60:b2:78:eb:54: d0:d2:cf:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUM/kB52Q4OUH34pXiDo5qLGK8NzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjEwMTkxMTUxNDlaFw0yNjEwMjAxNDEzNDlaMDMxMTAvBgNV BAMTKEMzMEIxRDQwN0JDQUNCNjg3RTRDRkRCMTg2QkNDMjQyNjUzRUE5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmKX5+zLN58B+JyhJaS2M647Z rWksdbsD3RJqfXBVc/QAixOUQmQnMOGfYO8KJnHiYtavPQQFquwxJx3LCXZg7Uw7 BHei06cytdKsY+WRDC66ubJKYSNOuFNvYwuRmM9qwn7BlF2rSbEX3EIAK3AOzpDR wFhPKw+4bPHQD/le1jHDhaAh1VkXsD0X2ll5iQeCyeY5Z7MjdGl/2UgBpOQYhDNZ 1ahI9hivVaIFf6qAIeajUXdk6sm44D4DEq/cIVgtEcX9a1TZ5PRiG2oZMTUp0Sth YmpWwUBeaNN0V45Ey1BVxAJ92i5kRf2zmX4yDPcD6MVYF1DFBU2hCDcQhoc/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwwsdQHvKy2h+TP2xhrzCQmU+qVEwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkt0hJnjWycSBTf+e1OI GqZOuMme75kblZnTYthHQz3z9dleSCssfW1Q2PTIVUP+8Y369+6ekcTCdZ3OtTPu 7NtzeWcquEcwk+ZBbBmfhdhhAgJ7X5PZY15ufg9FYPJoVvdXAwC/BwawWWy+QrEF MU/IkwVBBIq4FW7U7M9Z1VEh3gTiCObQMq787YugysXfd/tBTaOMdI8G+NuAyKsT JXq59STlSOUqitOUXTmmAxqMQ93L6H5PwwHICtehEv1jj479KurYdbjoeMYBCLZJ W9CuL/OZV4DA+gcWpLeomxYeoxZuxWy5jZBaKIZLg5kjYR8fkXWGDGCyeOtU0NLP Gg== -----END CERTIFICATE-----Generated at Mon Oct 19 22:53:37 2026 by rpki-client