$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: Yq78av/Sc589G8tswsZS0mLLsuDb/Cd6g/9NyTq5gMc= Subject key identifier: 0D:C6:C2:FF:24:37:BD:58:B4:1E:AF:D0:19:23:46:0F:B2:B8:77:63 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 62D2574724A3C8F2A4AD98B5734CA91BC9C1BCE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 07B9 Signing time: Tue 10 Nov 2026 14:14:31 +0000 Manifest this update: Tue 10 Nov 2026 14:09:31 +0000 Manifest next update: Wed 11 Nov 2026 15:46:31 +0000 Files and hashes: 1: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=) 2: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 3: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=) 4: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 5: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 6: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 7: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=) 8: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=) 9: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=) 10: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 11: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=) 12: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 13: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=) 14: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=) 15: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 16: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=) 17: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 18: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 19: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 20: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 21: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 22: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 23: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 24: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 25: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: 8ULx0YPajSKuQbuMPokXTSYcF9pfVH7U2QIxEUtu6P8=) 26: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 27: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=) 28: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=) 29: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=) 30: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 31: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 32: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) 33: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) 34: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 35: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 36: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=) 37: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 15:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d2:57:47:24:a3:c8:f2:a4:ad:98:b5:73:4c:a9:1b:c9:c1:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 10 14:09:31 2026 GMT Not After : Nov 11 15:46:31 2026 GMT Subject: CN=0DC6C2FF2437BD58B41EAFD01923460FB2B87763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:48:72:33:ed:7e:57:3b:dd:fb:cc:be:8e: 9a:e2:67:60:05:ca:cb:2e:c0:a0:86:8d:d3:c5:f8: f3:6b:b0:60:53:0d:76:73:56:9d:ce:1c:53:dd:64: b3:47:35:7f:f6:3a:54:ea:26:c5:9e:2f:ca:26:b3: ad:41:77:7d:2b:34:2f:5f:79:e3:c5:6f:ae:43:bb: f1:8d:af:45:e9:f2:02:50:59:97:66:3a:cc:60:43: b8:af:b4:27:1a:ad:2b:4d:cf:ed:a4:b4:26:ea:2e: 95:0a:73:37:d9:33:4c:6f:96:60:66:18:7d:68:e4: 76:41:0a:35:45:47:67:27:02:eb:41:a7:41:e9:73: 65:93:47:d8:2e:d6:06:02:a4:49:60:c7:de:ea:dd: 3c:95:63:d0:51:b6:c8:e5:60:78:23:66:56:83:50: 27:38:df:21:72:66:02:98:d1:b2:97:ac:38:b1:2f: fd:d9:63:69:86:db:dc:80:29:aa:61:80:1f:6e:bc: ce:a1:72:93:d7:38:1a:2d:e4:11:51:92:f5:99:fd: 3c:49:4d:dc:1b:9f:0d:18:5f:81:ea:3f:bc:10:10: 48:6a:38:c9:1f:bf:49:4f:a1:7e:07:da:9a:96:63: 0b:62:c7:5c:57:49:a4:7c:66:87:b7:6b:3a:2f:57: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:C2:FF:24:37:BD:58:B4:1E:AF:D0:19:23:46:0F:B2:B8:77:63 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1f:8b:98:fe:fe:3a:37:97:da:18:3b:42:18:66:da:26:18: 0d:3e:20:a6:15:7c:8b:9f:f3:10:f2:7f:23:b3:d9:bb:86:92: 4a:47:6e:cf:46:0a:4f:8e:7e:eb:b0:d0:a6:b9:db:2f:96:6c: a7:95:cd:34:67:93:86:33:7f:0f:f8:be:18:e8:ec:09:9a:4f: 79:9d:a5:d6:36:4d:ef:a6:e1:5d:4f:39:5b:d9:8a:28:e2:ca: 1b:e0:b3:db:3d:f4:69:68:ed:ea:d0:e7:38:c2:f2:e1:7b:d4: f2:ce:87:66:f8:ce:19:54:76:94:20:82:13:2a:16:df:ad:78: ec:84:15:0f:c6:b8:a3:21:9b:ae:4b:11:e1:10:47:0c:c5:f5: 34:5d:52:b7:a3:cd:9e:b8:fc:89:27:1f:8d:99:fb:91:5f:dd: df:da:8c:ae:77:27:a1:0e:38:2c:00:99:25:15:90:16:4b:f7: b0:0f:4f:eb:2a:76:bb:c4:d0:47:81:33:38:8e:fc:05:4a:45: d3:94:78:e2:1b:97:c1:41:53:ba:ab:44:a1:be:ea:1d:5a:93: 34:ad:e5:85:26:2f:7b:f8:7d:cc:23:8d:b4:e6:47:76:d6:72: 13:0a:93:2d:58:9b:5c:d7:e6:f4:0a:b0:9f:5e:13:ec:29:0f: a9:df:22:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYtJXRySjyPKkrZi1c0ypG8nBvOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjExMTAxNDA5MzFaFw0yNjExMTExNTQ2MzFaMDMxMTAvBgNV BAMTKDBEQzZDMkZGMjQzN0JENThCNDFFQUZEMDE5MjM0NjBGQjJCODc3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkEhyM+1+Vzvd+8y+jpriZ2AF yssuwKCGjdPF+PNrsGBTDXZzVp3OHFPdZLNHNX/2OlTqJsWeL8oms61Bd30rNC9f eePFb65Du/GNr0Xp8gJQWZdmOsxgQ7ivtCcarStNz+2ktCbqLpUKczfZM0xvlmBm GH1o5HZBCjVFR2cnAutBp0Hpc2WTR9gu1gYCpElgx97q3TyVY9BRtsjlYHgjZlaD UCc43yFyZgKY0bKXrDixL/3ZY2mG29yAKaphgB9uvM6hcpPXOBot5BFRkvWZ/TxJ Tdwbnw0YX4HqP7wQEEhqOMkfv0lPoX4H2pqWYwtix1xXSaR8Zoe3azovV437AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDcbC/yQ3vVi0Hq/QGSNGD7K4d2MwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh+LmP7+OjeX2hg7Qhhm 2iYYDT4gphV8i5/zEPJ/I7PZu4aSSkduz0YKT45+67DQprnbL5Zsp5XNNGeThjN/ D/i+GOjsCZpPeZ2l1jZN76bhXU85W9mKKOLKG+Cz2z30aWjt6tDnOMLy4XvU8s6H ZvjOGVR2lCCCEyoW36147IQVD8a4oyGbrksR4RBHDMX1NF1St6PNnrj8iScfjZn7 kV/d39qMrncnoQ44LACZJRWQFkv3sA9P6yp2u8TQR4EzOI78BUpF05R44huXwUFT uqtEob7qHVqTNK3lhSYve/h9zCONtOZHdtZyEwqTLVibXNfm9Aqwn14T7CkPqd8i CQ== -----END CERTIFICATE-----Generated at Tue Nov 10 23:08:42 2026 by rpki-client