$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: SK6lBLkURt96iw+VDnK1qj9TPKrEjBcmMy7khJbyOws= Subject key identifier: 81:93:70:A3:D1:90:2A:85:3C:54:6B:48:84:16:15:A9:93:67:0F:8F Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 2B7D134F02F4EF9D5270E1D535D0C335FE28A321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 02ED Signing time: Tue 02 Jun 2026 18:53:53 +0000 Manifest this update: Tue 02 Jun 2026 18:48:53 +0000 Manifest next update: Wed 03 Jun 2026 20:42:53 +0000 Files and hashes: 1: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 2: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 3: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 4: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: fg5aU+FtQdFw1wjw5Duf8EcmDDQ010BcM14jbja/U70=) 5: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 6: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 7: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 8: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 9: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 10: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 11: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 12: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 13: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 14: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 15: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 16: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 17: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 18: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 19: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 20: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 15:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7d:13:4f:02:f4:ef:9d:52:70:e1:d5:35:d0:c3:35:fe:28:a3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jun 2 18:48:53 2026 GMT Not After : Jun 3 20:42:53 2026 GMT Subject: CN=819370A3D1902A853C546B48841615A993670F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:ac:4c:5b:20:f3:18:aa:0a:2b:e7:0c:bb: 7b:d4:04:ff:18:5e:57:22:d7:97:d7:de:5c:f4:67: 18:69:0b:ca:06:e1:28:48:c9:5b:91:d8:02:db:39: c2:bd:82:ba:df:cf:9a:58:0f:ce:2f:e2:60:3f:66: a5:d5:11:38:06:2e:3c:73:95:c2:98:c2:00:e6:a8: 55:d2:93:d9:d9:5e:3f:2f:89:12:a6:b8:7b:6c:66: 53:67:63:c0:36:17:e2:1a:28:cc:98:f0:ed:74:62: 5f:ff:6c:54:cb:10:37:ac:25:9d:9b:c2:0c:4c:c0: 00:7c:30:a4:ed:3c:08:e9:71:bd:59:d0:d4:0f:03: b4:44:ff:e5:b9:31:a2:38:df:6f:6d:c1:18:9f:e2: 91:52:00:db:14:75:82:e1:8f:26:11:5d:c4:43:5d: 0e:60:8a:5a:b6:6f:9c:ec:86:45:dc:18:02:19:d9: 77:9d:d3:a9:f9:c1:d2:7f:34:f1:e2:bd:52:ed:d8: c4:f0:61:b4:cc:91:49:79:e0:39:a4:1d:48:36:b3: 39:f2:c4:41:8a:ef:02:95:d2:ee:46:dc:ed:a6:42: d8:5e:ab:24:e3:e4:5c:ab:1e:80:0e:69:cc:99:ff: 64:26:a7:db:8d:f3:ba:9e:e2:4c:84:aa:db:1b:13: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:93:70:A3:D1:90:2A:85:3C:54:6B:48:84:16:15:A9:93:67:0F:8F X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ff:e4:bb:c6:a9:ba:a3:1d:22:2b:50:2b:4e:f1:ec:2b:3b: 38:b0:ee:1d:f4:94:af:77:2c:ea:c2:67:b9:71:1a:84:dc:21: 6b:ab:18:6b:88:54:a4:e4:89:58:a3:92:64:eb:0e:54:4a:57: 4f:e1:3a:3a:f1:1d:76:5a:31:bf:df:7d:83:3b:c4:e8:61:4e: c2:5e:6f:0c:fb:0f:6c:a9:64:87:a1:91:4d:0d:bc:94:f2:65: 2c:c4:a9:ce:5f:71:c8:9c:85:aa:33:ab:57:8f:b5:66:d6:b0: d4:fb:1f:eb:7a:6c:90:93:8a:e7:c7:41:e3:4e:7c:7c:e8:c5: 98:30:db:6c:b8:68:ff:78:56:23:ce:55:07:5c:2c:81:ab:2c: e2:ae:ff:0e:a9:e3:21:c0:51:d3:a7:66:6a:0f:79:26:d3:40: 1d:d2:d0:52:3f:80:69:b8:ba:c6:19:38:4a:7c:18:22:4b:bc: 63:33:09:0d:d6:76:09:34:8e:47:1d:db:05:a8:92:84:75:57: 65:8a:7f:3b:82:76:09:22:1b:fc:53:4e:d9:d6:27:7c:fa:a4: eb:e1:f4:29:10:02:b4:b5:75:44:c0:bc:cd:8a:fe:6b:e7:17: c1:81:00:88:06:9b:06:c8:ae:25:24:d8:6d:79:8f:f2:06:8b: 13:57:3c:bd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK30TTwL0751ScOHVNdDDNf4ooyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA2MDIxODQ4NTNaFw0yNjA2MDMyMDQyNTNaMDMxMTAvBgNV BAMTKDgxOTM3MEEzRDE5MDJBODUzQzU0NkI0ODg0MTYxNUE5OTM2NzBGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFqxMWyDzGKoKK+cMu3vUBP8Y Xlci15fX3lz0ZxhpC8oG4ShIyVuR2ALbOcK9grrfz5pYD84v4mA/ZqXVETgGLjxz lcKYwgDmqFXSk9nZXj8viRKmuHtsZlNnY8A2F+IaKMyY8O10Yl//bFTLEDesJZ2b wgxMwAB8MKTtPAjpcb1Z0NQPA7RE/+W5MaI4329twRif4pFSANsUdYLhjyYRXcRD XQ5gilq2b5zshkXcGAIZ2Xed06n5wdJ/NPHivVLt2MTwYbTMkUl54DmkHUg2szny xEGK7wKV0u5G3O2mQtheqyTj5FyrHoAOacyZ/2Qmp9uN87qe4kyEqtsbE4MpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgZNwo9GQKoU8VGtIhBYVqZNnD48wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv/ku8apuqMdIitQK07x 7Cs7OLDuHfSUr3cs6sJnuXEahNwha6sYa4hUpOSJWKOSZOsOVEpXT+E6OvEddlox v999gzvE6GFOwl5vDPsPbKlkh6GRTQ28lPJlLMSpzl9xyJyFqjOrV4+1Ztaw1Psf 63pskJOK58dB4058fOjFmDDbbLho/3hWI85VB1wsgass4q7/DqnjIcBR06dmag95 JtNAHdLQUj+Aabi6xhk4SnwYIku8YzMJDdZ2CTSORx3bBaiShHVXZYp/O4J2CSIb /FNO2dYnfPqk6+H0KRACtLV1RMC8zYr+a+cXwYEAiAabBsiuJSTYbXmP8gaLE1c8 vQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:50:56 2026 by rpki-client