$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: x4ed6ZmVBvFSUo0c/CxLgQyE1LHpKxLpJrQpDvLwWJU= Subject key identifier: D3:89:AF:EF:CA:47:EC:ED:CB:97:A8:B7:15:A5:A0:D2:F2:33:18:61 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 272137DD62A6A35D62DB798D52642F8874AC1069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0681 Signing time: Fri 18 Sep 2026 02:55:36 +0000 Manifest this update: Fri 18 Sep 2026 02:50:36 +0000 Manifest next update: Sat 19 Sep 2026 03:04:36 +0000 Files and hashes: 1: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: fvI4RQQ01xEAqUe6KVlJ1GGLeZTmhK5W4DnyDfr2VQg=) 2: 34362e3138332e32392e302f32342d3234203d3e20323138393535.roa (hash: z5qKjewEEdBI48pCju0pqpPvgTjN75cL9QGGwOpic1Y=) 3: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: Ndgh+eVE1w6trxb5NosbOsGo+jadKJ4obgWnpuGRl+s=) 4: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=) 5: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=) 6: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=) 7: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: +jFZ5kSY3en0vEu5UhMEDoejclzIkHr+PeODgl3Zz0k=) 8: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: xQUOQgb0PWc+/72PSNuNhyH/1WTrTU3f/QF4HqRWRbI=) 9: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: hl0LwIkWgXiEYZpFaX3uPN7EPrDq4mPps9alNUssHF4=) 10: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: Ss/HYpCtXLgsgjLt2I87OIMAV3Zt1zbXev+rVN4ldH4=) 11: 34362e3138332e32392e302f32342d3234203d3e20323138393130.roa (hash: qrwEKuMw0srEHlfhF1gWk1TZ0OG2UAnJk27bbe4IO+4=) 12: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: 3mHdqoYOlm/9t7fBBGZ6MyRWfPgkHCq5iWxroEvrW6w=) 13: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: P1+0nsQvOjxz4uhyz/dzfXbHlZHNA/BWK3bhubdLlKg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 03:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:37:dd:62:a6:a3:5d:62:db:79:8d:52:64:2f:88:74:ac:10:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Sep 18 02:50:36 2026 GMT Not After : Sep 19 03:04:36 2026 GMT Subject: CN=D389AFEFCA47ECEDCB97A8B715A5A0D2F2331861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:0b:9d:64:f6:aa:e1:07:67:f9:4e:49:01: 42:dd:62:cf:5c:be:f8:21:cc:b8:06:7b:61:e0:f4: 26:d7:be:30:3b:17:bb:ca:72:e4:1d:0c:58:c1:68: 3c:aa:72:5e:12:8b:56:ca:5c:76:05:8d:c1:f0:cc: c0:4e:e5:30:41:29:e8:99:c3:26:df:7b:7f:4a:8f: 45:37:a1:c1:d4:c3:98:a1:7c:e2:ca:76:8b:e6:77: c5:dc:40:d5:b3:9b:a5:96:0f:55:ff:77:06:7f:a5: 96:e5:3d:1c:ac:41:9c:64:58:79:8d:3c:aa:dd:ce: bc:bb:a8:58:7d:92:7a:27:04:92:25:76:53:1c:f8: 39:7a:d0:a9:85:fb:d4:53:75:67:91:a7:3b:17:94: 82:f4:0a:ad:c5:70:d9:ad:4e:26:71:aa:00:c9:9b: ca:7e:4a:c4:1e:6d:1f:b9:76:d0:95:77:ab:01:87: 7e:88:77:17:e9:1f:b3:c2:78:c3:1c:c8:ac:a0:88: d9:7e:9b:06:9a:82:5c:bc:c0:8b:28:98:d3:09:af: ce:f0:e6:34:5c:86:25:b2:7c:7b:8a:65:0b:98:f0: 10:f1:f5:86:f2:b7:f7:16:e3:d5:e3:4d:9e:0d:28: c2:2d:82:5c:fd:49:53:26:cc:c3:89:d8:d7:4c:4f: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:AF:EF:CA:47:EC:ED:CB:97:A8:B7:15:A5:A0:D2:F2:33:18:61 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:26:4c:7c:a9:9c:dd:a2:9a:93:d4:ea:fb:e4:e5:b3:e3:c2: 2e:90:a8:e2:7b:2e:52:c5:62:7e:1a:90:94:d8:4a:f7:24:0d: 82:db:a0:2d:53:fa:e7:ac:50:49:f2:e7:2f:ab:4f:56:45:85: c5:2f:92:cd:f1:e0:a4:e8:9b:ac:21:1c:94:62:4e:64:8d:78: 8c:a4:46:6d:71:9e:ad:63:72:f4:99:8e:50:6d:c9:30:04:e0: 95:4d:52:2a:b3:20:87:87:bc:b6:5c:6d:7a:b3:25:67:1f:82: e0:86:ff:0c:92:1c:4c:c5:c4:b3:54:52:34:22:23:f9:f1:3c: d3:f6:e3:f9:36:50:b4:e5:80:82:96:58:ae:30:40:bf:fc:72: d0:fe:c7:14:a1:40:88:22:5a:8a:fa:54:fb:8b:e8:98:14:66: 3b:01:06:cb:a7:94:4c:5d:4d:0f:c2:66:72:03:af:9e:46:06: ab:3c:84:7c:a9:4c:92:49:a0:16:4e:9e:34:dc:e2:ce:00:c1: d4:f8:db:ad:c2:3b:99:dc:b9:cd:83:41:79:bf:db:5c:10:1f: 67:83:89:f6:d6:4d:51:27:6a:67:41:fc:99:92:5d:7c:7b:05: 20:ab:14:1e:5a:b9:a9:4e:af:65:cf:8e:13:11:33:17:19:8a: f2:08:31:e1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJyE33WKmo11i23mNUmQviHSsEGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjA5MTgwMjUwMzZaFw0yNjA5MTkwMzA0MzZaMDMxMTAvBgNV BAMTKEQzODlBRkVGQ0E0N0VDRURDQjk3QThCNzE1QTVBMEQyRjIzMzE4NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJgudZPaq4Qdn+U5JAULdYs9c vvghzLgGe2Hg9CbXvjA7F7vKcuQdDFjBaDyqcl4Si1bKXHYFjcHwzMBO5TBBKeiZ wybfe39Kj0U3ocHUw5ihfOLKdovmd8XcQNWzm6WWD1X/dwZ/pZblPRysQZxkWHmN PKrdzry7qFh9knonBJIldlMc+Dl60KmF+9RTdWeRpzsXlIL0Cq3FcNmtTiZxqgDJ m8p+SsQebR+5dtCVd6sBh36IdxfpH7PCeMMcyKygiNl+mwaagly8wIsomNMJr87w 5jRchiWyfHuKZQuY8BDx9Ybyt/cW49XjTZ4NKMItglz9SVMmzMOJ2NdMT3q5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU04mv78pH7O3Ll6i3FaWg0vIzGGEwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCZMfKmc3aKak9Tq++Tl s+PCLpCo4nsuUsVifhqQlNhK9yQNgtugLVP656xQSfLnL6tPVkWFxS+SzfHgpOib rCEclGJOZI14jKRGbXGerWNy9JmOUG3JMATglU1SKrMgh4e8tlxterMlZx+C4Ib/ DJIcTMXEs1RSNCIj+fE80/bj+TZQtOWAgpZYrjBAv/xy0P7HFKFAiCJaivpU+4vo mBRmOwEGy6eUTF1ND8JmcgOvnkYGqzyEfKlMkkmgFk6eNNzizgDB1PjbrcI7mdy5 zYNBeb/bXBAfZ4OJ9tZNUSdqZ0H8mZJdfHsFIKsUHlq5qU6vZc+OExEzFxmK8ggx 4Q== -----END CERTIFICATE-----Generated at Fri Sep 18 18:12:25 2026 by rpki-client