$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: SUdsnr+RahYkWmk89QQ1ciJoeciMS7nG4mALcArWd+M= Subject key identifier: AA:50:39:57:A0:69:5C:6F:EA:6E:15:27:38:00:90:47:16:27:2E:DE Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 502B0E3E7B8864A6D2529B281C068952DBCB313F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0291 Signing time: Thu 26 Mar 2026 06:12:47 +0000 Manifest this update: Thu 26 Mar 2026 06:07:47 +0000 Manifest next update: Fri 27 Mar 2026 08:15:47 +0000 Files and hashes: 1: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 2: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 3: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 4: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 5: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 6: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 7: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 8: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: gs1ahrYbyMdTLwE8bwgSVsBAk6rS7tPSpoL5RDqMRro=) 9: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 10: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 11: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 12: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 13: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 14: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 15: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 16: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 17: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 18: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 19: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 20: 3138352e35382e3135372e302f32342d3234203d3e20343032323033.roa (hash: qEPkBJmJPnkCj+WUZhzItxLAbT+040qoDYW4iZJto64=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:0e:3e:7b:88:64:a6:d2:52:9b:28:1c:06:89:52:db:cb:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Mar 26 06:07:47 2026 GMT Not After : Mar 27 08:15:47 2026 GMT Subject: CN=AA503957A0695C6FEA6E15273800904716272EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:98:6c:5c:1e:89:40:f2:00:11:2a:fe:92: 4d:a8:5d:f0:cb:6a:4d:a8:36:3f:c0:29:b1:83:04: 1f:0a:60:2c:25:3b:97:ac:df:a9:fc:b8:6e:69:23: b4:fa:73:b3:60:f1:83:43:aa:ba:fc:35:f2:c9:7f: 8f:00:89:32:f6:41:6c:4f:30:bf:3a:8d:2e:48:e2: c8:e6:28:d0:ab:b3:ef:f0:4f:01:02:dd:70:42:73: a2:f4:24:a6:ad:2a:50:5d:70:45:9c:05:90:c5:5d: d6:c8:0f:c4:9b:94:94:7e:b4:98:13:26:e4:fd:e1: c0:cd:7c:a7:fe:eb:2d:32:95:85:45:2a:cf:a8:be: 23:4c:ef:a5:1b:20:43:36:05:31:41:a2:c4:fc:e9: 77:90:18:18:48:0d:2a:ec:2f:e3:d2:2e:79:c5:7a: 24:7d:4a:3d:e3:77:2f:48:0c:c0:66:af:7d:07:b5: 63:7d:80:99:c0:2b:f1:65:a3:ee:05:bd:8d:63:f0: b8:08:56:f8:fb:82:87:a7:f6:82:f9:30:94:5c:56: 8b:67:0d:c3:65:69:ce:0d:b0:ef:d0:cd:97:25:b8: 2c:ab:e4:ac:ed:af:11:b8:66:7d:0f:ae:e7:96:04: 84:a3:a1:14:74:04:24:a2:9c:a2:44:ea:42:c7:d1: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:50:39:57:A0:69:5C:6F:EA:6E:15:27:38:00:90:47:16:27:2E:DE X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:84:e2:20:4d:9a:36:49:dd:8a:cc:95:4a:2b:00:be:7a: 42:fe:9a:55:6f:e2:96:f5:f9:ef:82:20:c8:3e:ef:1b:bb:66: 27:fc:aa:9f:c5:9a:fa:7a:06:5b:84:97:2a:78:14:42:19:23: 4f:2c:1b:d2:81:66:bf:87:b8:f9:46:85:cf:0b:85:fa:2e:c5: 49:06:46:da:7d:1d:76:57:9b:31:2e:22:8e:34:f8:cd:24:ae: 65:3c:21:dc:f9:96:34:e5:b1:03:6f:52:33:82:1d:91:fc:bf: 9d:3e:30:a5:86:a4:e7:68:3b:ea:d3:7f:cf:2f:d0:34:7c:1d: 47:cf:65:c9:cd:13:e9:04:50:77:02:b3:c3:0c:c1:2e:f8:d0: 41:51:5f:e2:d4:3c:b8:93:ae:db:1f:dd:4d:4b:a7:f9:aa:8c: a9:64:d0:80:f4:82:d2:5b:cf:ca:79:03:76:7a:d3:57:32:4c: f2:12:47:15:e1:e4:9a:95:04:e7:d1:56:74:48:25:7c:6b:3f: b5:bd:22:f4:43:54:99:ac:ca:63:e9:85:56:7e:35:b3:fa:ea: ce:de:af:8f:70:39:34:13:d6:4b:66:65:91:b9:d0:c4:7f:64: c2:f9:a6:0a:e9:18:3d:61:33:92:cb:f3:cc:c4:fa:12:1d:f0: d0:75:dd:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUCsOPnuIZKbSUpsoHAaJUtvLMT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjAzMjYwNjA3NDdaFw0yNjAzMjcwODE1NDdaMDMxMTAvBgNV BAMTKEFBNTAzOTU3QTA2OTVDNkZFQTZFMTUyNzM4MDA5MDQ3MTYyNzJFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJqJhsXB6JQPIAESr+kk2oXfDL ak2oNj/AKbGDBB8KYCwlO5es36n8uG5pI7T6c7Ng8YNDqrr8NfLJf48AiTL2QWxP ML86jS5I4sjmKNCrs+/wTwEC3XBCc6L0JKatKlBdcEWcBZDFXdbID8SblJR+tJgT JuT94cDNfKf+6y0ylYVFKs+oviNM76UbIEM2BTFBosT86XeQGBhIDSrsL+PSLnnF eiR9Sj3jdy9IDMBmr30HtWN9gJnAK/Flo+4FvY1j8LgIVvj7goen9oL5MJRcVotn DcNlac4NsO/QzZcluCyr5KztrxG4Zn0PrueWBISjoRR0BCSinKJE6kLH0ZmvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqlA5V6BpXG/qbhUnOACQRxYnLt4wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy6E4iBNmjZJ3YrMlUor AL56Qv6aVW/ilvX574IgyD7vG7tmJ/yqn8Wa+noGW4SXKngUQhkjTywb0oFmv4e4 +UaFzwuF+i7FSQZG2n0ddlebMS4ijjT4zSSuZTwh3PmWNOWxA29SM4Idkfy/nT4w pYak52g76tN/zy/QNHwdR89lyc0T6QRQdwKzwwzBLvjQQVFf4tQ8uJOu2x/dTUun +aqMqWTQgPSC0lvPynkDdnrTVzJM8hJHFeHkmpUE59FWdEglfGs/tb0i9ENUmazK Y+mFVn41s/rqzt6vj3A5NBPWS2ZlkbnQxH9kwvmmCukYPWEzksvzzMT6Eh3w0HXd tA== -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:56 2026 by rpki-client