$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: PzJMeIIfRgx0KEE+4/QRk66fq9cribhDOcathRUseiM= Subject key identifier: 8A:3B:84:33:15:CD:F0:29:25:FD:81:0A:18:98:06:82:82:F7:63:68 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 3D5BB8D40FECB3E2EDDDFF6BB4EB5B70CC9196BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 0621 Signing time: Wed 23 Sep 2026 08:21:36 +0000 Manifest this update: Wed 23 Sep 2026 08:16:36 +0000 Manifest next update: Thu 24 Sep 2026 11:13:36 +0000 Files and hashes: 1: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 2: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 3: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 4: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 5: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 6: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 7: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) 8: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: hYcyhdYFMuck7dKiSbwCc7HJ0eL+Xkuwdv3ahODBf1U=) 9: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 10: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 11: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 12: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 13: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 14: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 15: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: Jr4fRJS+nPVoRQIRXyWs31rP/U/UP3PPufL87ZQz8U8=) 16: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 17: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 18: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 19: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 20: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 21: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 22: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 23: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 24: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 25: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 26: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 27: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 28: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5b:b8:d4:0f:ec:b3:e2:ed:dd:ff:6b:b4:eb:5b:70:cc:91:96:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Sep 23 08:16:36 2026 GMT Not After : Sep 24 11:13:36 2026 GMT Subject: CN=8A3B843315CDF02925FD810A1898068282F76368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:a2:26:fb:7f:17:c1:54:b4:79:49:05:20: a8:82:d2:6a:46:57:26:26:cd:ae:03:80:b1:c9:5f: a3:1a:3f:9d:ec:3e:a8:68:48:e4:85:47:c7:74:32: 4d:9d:34:e1:4f:95:40:4b:c6:3c:ea:8d:f3:5c:b2: 89:de:c0:ab:03:24:99:b5:17:32:f1:12:47:45:b8: b5:62:c3:5b:f0:37:db:8b:8e:eb:ef:3f:b1:6d:c9: 69:c7:ee:66:65:e6:cf:7e:fa:63:df:5d:4a:11:7a: 58:e7:13:80:18:4a:c9:38:09:aa:26:50:33:0f:23: 2f:73:5b:a8:de:a9:5b:aa:16:22:cf:75:0b:70:ab: 9d:9c:47:da:3c:64:4e:5c:3b:c5:41:82:c7:8b:70: 58:e7:80:ac:6d:35:89:97:05:1a:48:5a:0b:42:e1: b9:da:4a:76:37:1f:85:44:2b:9a:10:8d:77:82:e9: 15:fb:1a:1a:91:82:66:da:59:60:c5:83:52:d2:38: fd:21:78:c4:ee:65:52:df:a1:a4:b6:57:d2:82:c3: ae:41:3e:21:82:fb:e1:78:ae:27:41:87:ae:9c:01: f3:2d:dd:8f:a1:cc:f0:e7:f8:42:6f:5c:fe:18:27: c6:67:87:5c:da:80:eb:0b:1f:9d:28:0b:3d:79:96: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:84:33:15:CD:F0:29:25:FD:81:0A:18:98:06:82:82:F7:63:68 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5a:58:d0:df:7d:f0:79:16:5b:18:e6:a8:5d:8c:9d:10:5a: 06:6a:95:20:93:0e:30:d5:5d:af:b1:87:f8:ad:e8:d6:88:0e: fd:84:a3:b0:ca:34:04:42:5c:42:91:64:e9:c7:3c:e2:0f:e4: df:b9:9c:c0:a5:9f:0b:a9:f9:e8:70:a3:83:39:bb:fb:09:4e: c0:65:9d:74:a6:5a:b8:c2:52:af:ee:e2:03:16:14:73:4d:7d: 00:c5:e5:b6:69:81:06:c5:2c:52:d7:cf:02:29:ef:f4:43:40: b3:1e:01:b0:43:7a:c3:41:2c:5c:69:56:36:f8:ca:19:58:2c: 22:0b:35:7d:7e:d7:fa:d8:ca:73:6d:ef:2b:4d:7b:e6:31:60: 59:d2:cc:38:7c:aa:c5:91:27:29:91:6a:86:c1:7d:df:3b:47: d4:63:ea:18:5d:6d:e4:20:fa:bc:df:94:b1:7e:d1:ed:8b:8c: e1:fc:69:e0:3f:49:38:e4:c4:bc:45:4c:7a:17:e0:75:18:10: f1:28:31:45:6f:1b:c6:59:d3:a6:f2:11:20:75:2d:eb:3f:ee: 19:28:48:c6:98:90:9f:26:4f:25:21:ec:bd:27:a5:f0:ed:74: b4:56:54:90:f7:5e:66:27:80:99:33:39:a3:85:43:20:47:8f: ff:ef:bc:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPVu41A/ss+Lt3f9rtOtbcMyRlr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA5MjMwODE2MzZaFw0yNjA5MjQxMTEzMzZaMDMxMTAvBgNV BAMTKDhBM0I4NDMzMTVDREYwMjkyNUZEODEwQTE4OTgwNjgyODJGNzYzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyqIm+38XwVS0eUkFIKiC0mpG VyYmza4DgLHJX6MaP53sPqhoSOSFR8d0Mk2dNOFPlUBLxjzqjfNcsonewKsDJJm1 FzLxEkdFuLViw1vwN9uLjuvvP7FtyWnH7mZl5s9++mPfXUoReljnE4AYSsk4Caom UDMPIy9zW6jeqVuqFiLPdQtwq52cR9o8ZE5cO8VBgseLcFjngKxtNYmXBRpIWgtC 4bnaSnY3H4VEK5oQjXeC6RX7GhqRgmbaWWDFg1LSOP0heMTuZVLfoaS2V9KCw65B PiGC++F4ridBh66cAfMt3Y+hzPDn+EJvXP4YJ8Znh1zagOsLH50oCz15llOpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUijuEMxXN8Ckl/YEKGJgGgoL3Y2gwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFpY0N998HkWWxjmqF2M nRBaBmqVIJMOMNVdr7GH+K3o1ogO/YSjsMo0BEJcQpFk6cc84g/k37mcwKWfC6n5 6HCjgzm7+wlOwGWddKZauMJSr+7iAxYUc019AMXltmmBBsUsUtfPAinv9ENAsx4B sEN6w0EsXGlWNvjKGVgsIgs1fX7X+tjKc23vK0175jFgWdLMOHyqxZEnKZFqhsF9 3ztH1GPqGF1t5CD6vN+UsX7R7YuM4fxp4D9JOOTEvEVMehfgdRgQ8SgxRW8bxlnT pvIRIHUt6z/uGShIxpiQnyZPJSHsvSel8O10tFZUkPdeZieAmTM5o4VDIEeP/++8 BQ== -----END CERTIFICATE-----Generated at Wed Sep 23 11:58:40 2026 by rpki-client