$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: rOYM3GHjBmAQ0N5lh3cwrIexhPddWjGhKtk5PNfIfVs= Subject key identifier: 5B:E9:86:6A:7D:69:29:AC:45:74:EA:94:4F:BB:58:77:41:FD:83:DB Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 25EDA373A7D882B94A0777D4E34C11864D11F0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0332 Signing time: Thu 23 Jul 2026 12:18:15 +0000 Manifest this update: Thu 23 Jul 2026 12:13:15 +0000 Manifest next update: Fri 24 Jul 2026 15:03:15 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 2: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 3: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 4: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 5: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 6: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 7: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=) 8: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 9: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 10: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 11: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 12: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 13: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 14: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 15: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=) 16: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=) 17: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=) 18: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 19: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 20: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 21: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: dXnmMldQmjx3mRQyTzwuGQSOZX7V0dlA5a+Ksns2Qp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ed:a3:73:a7:d8:82:b9:4a:07:77:d4:e3:4c:11:86:4d:11:f0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jul 23 12:13:15 2026 GMT Not After : Jul 24 15:03:15 2026 GMT Subject: CN=5BE9866A7D6929AC4574EA944FBB587741FD83DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:c1:75:7e:cb:0b:06:d4:48:56:bd:86:96: f5:66:e2:ec:26:b1:35:0f:ea:76:5b:c5:10:1e:b3: 8a:07:d3:bc:46:9d:af:29:31:38:f8:84:1a:6b:fa: 7b:0f:0f:58:c9:5c:c2:05:a9:88:03:76:74:cf:7b: 3b:26:ef:1a:3b:d0:39:27:24:01:63:1a:82:2c:6f: d8:4a:fd:ed:d2:29:72:7c:40:3a:73:98:5f:0d:e9: 8e:a8:cc:d4:58:41:d3:7f:e3:90:ee:b3:76:85:48: 1b:5b:cc:b0:5f:5d:79:6d:25:84:0d:14:49:24:1c: 05:10:2c:91:fd:f8:a9:86:b9:14:5c:75:b8:ce:0b: c5:fb:51:04:5a:2c:ed:ec:96:68:7c:4a:30:c9:2a: 11:6d:d8:6d:d3:83:d8:56:99:1c:bb:d1:d2:95:5d: 0b:03:c5:26:9d:e3:df:48:ec:69:59:86:74:e9:38: 35:72:4e:8a:47:38:90:7d:8c:26:54:0f:54:52:e8: 8c:e9:ff:12:9c:5b:f6:97:e6:f0:e7:b4:19:52:f5: 1d:b5:f8:43:e9:19:d8:8a:e2:9d:38:33:08:d7:05: 87:c3:f9:fc:7b:ef:a1:94:42:fd:56:91:50:c5:a1: 25:cf:1e:81:b7:2e:5b:77:68:4e:62:0b:f0:33:a9: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:86:6A:7D:69:29:AC:45:74:EA:94:4F:BB:58:77:41:FD:83:DB X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9f:f4:dc:90:f0:68:9a:93:57:81:b3:de:9e:8b:e1:87:e8: b4:9d:f7:23:6e:6b:a8:5e:98:f0:ca:42:5b:5b:f0:ea:3d:42: 2d:74:23:1f:93:e7:b1:55:4f:2e:b5:d2:80:d6:27:7a:9b:24: e3:52:d2:c9:ac:0d:5b:c6:9d:07:0d:8b:f1:c7:fa:6b:47:52: 7a:e3:40:49:dd:a4:4e:b9:a2:38:8f:7a:24:55:14:38:5d:63: 70:b6:a0:4f:89:88:a7:a7:a0:a8:97:dd:6a:11:89:93:7a:ec: e8:c8:03:ff:a8:b0:fa:37:2d:ca:ea:44:30:68:9a:b3:70:fc: 3b:72:cb:8d:e7:43:64:4c:d8:46:d9:0d:86:a3:98:46:84:26: 07:d9:53:6e:6b:28:ed:5a:61:e9:ec:6a:05:b1:40:5f:7b:b1: 69:77:2d:9d:b0:c7:2b:6f:48:2d:fc:32:90:8b:81:2b:e1:f9: 1b:95:ed:4e:3c:56:67:c1:0f:3e:d8:4b:72:a5:00:cd:dc:49: 26:09:6c:2e:70:0a:95:9e:78:8d:36:19:b8:86:b1:1c:5e:a7: a7:88:27:bd:04:21:f9:e3:76:bb:94:48:3e:0a:25:90:2c:8b: 98:76:a5:d3:67:1f:97:63:7f:ad:fc:65:83:6c:f9:ba:fc:6d: 89:a7:97:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJe2jc6fYgrlKB3fU40wRhk0R8MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA3MjMxMjEzMTVaFw0yNjA3MjQxNTAzMTVaMDMxMTAvBgNV BAMTKDVCRTk4NjZBN0Q2OTI5QUM0NTc0RUE5NDRGQkI1ODc3NDFGRDgzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn58F1fssLBtRIVr2GlvVm4uwm sTUP6nZbxRAes4oH07xGna8pMTj4hBpr+nsPD1jJXMIFqYgDdnTPezsm7xo70Dkn JAFjGoIsb9hK/e3SKXJ8QDpzmF8N6Y6ozNRYQdN/45Dus3aFSBtbzLBfXXltJYQN FEkkHAUQLJH9+KmGuRRcdbjOC8X7UQRaLO3slmh8SjDJKhFt2G3Tg9hWmRy70dKV XQsDxSad499I7GlZhnTpODVyTopHOJB9jCZUD1RS6Izp/xKcW/aX5vDntBlS9R21 +EPpGdiK4p04MwjXBYfD+fx776GUQv1WkVDFoSXPHoG3Llt3aE5iC/AzqeD9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW+mGan1pKaxFdOqUT7tYd0H9g9swHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp/03JDwaJqTV4Gz3p6L 4YfotJ33I25rqF6Y8MpCW1vw6j1CLXQjH5PnsVVPLrXSgNYnepsk41LSyawNW8ad Bw2L8cf6a0dSeuNASd2kTrmiOI96JFUUOF1jcLagT4mIp6egqJfdahGJk3rs6MgD /6iw+jctyupEMGias3D8O3LLjedDZEzYRtkNhqOYRoQmB9lTbmso7Vph6exqBbFA X3uxaXctnbDHK29ILfwykIuBK+H5G5XtTjxWZ8EPPthLcqUAzdxJJglsLnAKlZ54 jTYZuIaxHF6np4gnvQQh+eN2u5RIPgolkCyLmHal02cfl2N/rfxlg2z5uvxtiaeX Rw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:24:42 2026 by rpki-client