$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: OrBFWF6UEqq3ZSYMVtLd6JTdYvHf8RE5pzQCd7oxSIM= Subject key identifier: 9B:65:29:8A:FC:6A:18:6A:C1:5F:50:12:5A:66:CF:F1:0E:6E:9A:EC Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 5F26F6981C641239FB8BB3724B908CDF05249093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 031E Signing time: Sat 26 Sep 2026 20:17:06 +0000 Manifest this update: Sat 26 Sep 2026 20:12:06 +0000 Manifest next update: Sun 27 Sep 2026 23:08:06 +0000 Files and hashes: 1: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: 3nLFsNGfj9TAL0wgFKjFLtIukIT2oeoH9Dn0ACFytSQ=) 2: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: SO5iYpxppDi067L1otYSj19apV4zwNvimr95590708A=) 3: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: QA/AmBx/vt6J6eDW0Y/+kHvJueiOPr7O1NVAvBIe9GY=) 4: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: YE6bAehCH8ruShBFJdgU4NCX9qGkifZ5lR9x24K4y2c=) 5: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: tbJb4NeQxaqdUwJnx0mi5eYh93xW1wx/PyQm3nNKQlk=) 6: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: Ozt3uRUP9szxnq6Y/BlUHZo63N6fYBwOlNZT3blQYnY=) 7: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: pchbJm+Br/uCuzzDsgfU4W3Dq3tZwJWDYbuhydm/Eyc=) 8: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (hash: sj3Mzc5uAM4fOfd+NlVLzXe7KVKZIN7ymsHfPBwN4+I=) 9: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: 7xtsmIrFnzH8qIFMhr9PIJTBifAuGHXQXdM1XzYoP7s=) 10: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 32SDZVJ37JJ5kdrs24paGjp5boRcUJ2fYJyMfyL4cw4=) 11: 3137382e3234382e37362e302f32342d3234203d3e203432383331.roa (hash: FQiM0Ff1DCSzma5DiHQMrsfmN7QznFFoSzW1a5q9Q2M=) 12: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: CCPO6h/MpNSX08leEvwwJIjESWw2OEutpIc59PlyY9E=) 13: 3137382e3234382e37342e302f32342d3234203d3e203630353432.roa (hash: Xr5u/5dDUrYBdAYp0AhqinBp+MATOEXztLhHhfZwhws=) 14: 3137382e3234382e37322e302f32342d3234203d3e20313534343032.roa (hash: CmSSgp2rOmRDakFss7YxyL+V/oYFT12bvLwpMMXS8Tk=) 15: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 7BonRadnccE5oClU90cDWqb2zFnrszRs5TdXh7lrUTg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:f6:98:1c:64:12:39:fb:8b:b3:72:4b:90:8c:df:05:24:90:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Sep 26 20:12:06 2026 GMT Not After : Sep 27 23:08:06 2026 GMT Subject: CN=9B65298AFC6A186AC15F50125A66CFF10E6E9AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f8:b7:ac:65:84:a4:c8:54:d1:89:63:0e:8f: 06:cd:69:5e:a8:a9:c7:cb:0b:bf:79:05:23:cb:db: 9f:5a:cf:cd:a7:82:a0:7b:2e:f5:1c:c9:3d:1b:6d: fc:ce:94:71:19:95:98:3c:2d:2a:f9:d2:d9:2e:cc: ac:66:cb:50:fb:f1:d9:4e:61:85:12:e2:9c:e4:ad: 06:1a:5c:c0:a7:19:ed:2e:dd:1c:f4:8b:c2:d3:72: ab:f5:be:03:b3:9d:0a:a4:e2:fe:e1:66:69:bc:1c: 47:08:3b:2d:6c:2d:dd:72:8b:30:93:c8:34:47:92: 78:1f:3b:1b:76:96:fa:51:f1:d3:67:a8:7e:a1:ad: 2e:ae:c0:3a:a3:45:93:fa:d9:ba:86:a0:fa:73:6d: bb:ff:4a:fb:3d:d6:bb:ba:b4:c7:d9:f7:5f:60:8d: 78:8a:e1:32:a9:73:90:9b:8d:f7:72:b6:f4:d7:5c: d2:7d:d9:e4:fb:50:56:b0:f1:7e:9f:70:0d:c9:40: bf:8a:d8:6f:0e:a8:a0:95:99:22:03:f3:7a:5e:9c: f8:da:01:41:a6:0f:a0:b3:d5:7e:b0:68:9e:d6:27: d9:92:1e:9e:a4:77:f1:69:80:f1:e7:5f:e3:11:59: d3:42:b5:d4:09:b1:69:4e:ea:0d:4c:44:d0:2f:a8: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:65:29:8A:FC:6A:18:6A:C1:5F:50:12:5A:66:CF:F1:0E:6E:9A:EC X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d6:38:0c:0a:8a:17:d0:47:be:58:a6:e9:2b:85:f6:59:44: 33:76:38:6e:a7:a1:7d:96:ca:e2:6f:ee:94:81:57:8b:13:d9: 57:9d:65:28:db:46:07:c0:c4:72:c5:eb:fe:81:e7:eb:3c:fa: 89:97:74:cc:1f:02:ba:d2:88:dd:f7:3b:ae:eb:e3:16:39:00: 2d:5f:cb:fe:c1:0d:c7:67:b8:1e:72:d6:70:d6:bd:79:39:dc: 7d:e0:1d:71:bc:31:fc:48:50:e4:75:ea:2f:e1:b2:46:ce:bf: 38:73:dd:83:aa:97:c6:e9:b7:70:d4:52:d4:19:20:2a:46:7a: fc:ca:89:9a:8a:39:3e:dc:87:46:e0:7a:d0:19:fd:05:f0:2c: a3:9a:7a:68:2b:cc:09:be:f9:f1:08:7a:a8:3e:fa:ab:f7:37: 6e:cf:e3:2f:7d:ec:43:68:49:78:1d:d5:e2:09:28:b4:68:17: 46:7a:f4:0e:70:74:7f:59:15:a1:8b:c1:1f:8c:dd:97:44:aa: 4f:96:d5:0e:7e:bd:fe:48:4d:10:d3:7a:c0:83:25:94:83:58: 89:a0:10:76:3b:62:8b:41:95:eb:3f:ad:1d:69:a3:6f:37:2c: 6c:cb:08:b3:c7:4a:56:95:e8:f6:a7:d1:af:28:88:ef:93:36: c8:2c:9d:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXyb2mBxkEjn7i7NyS5CM3wUkkJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNjA5MjYyMDEyMDZaFw0yNjA5MjcyMzA4MDZaMDMxMTAvBgNV BAMTKDlCNjUyOThBRkM2QTE4NkFDMTVGNTAxMjVBNjZDRkYxMEU2RTlBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+LesZYSkyFTRiWMOjwbNaV6o qcfLC795BSPL259az82ngqB7LvUcyT0bbfzOlHEZlZg8LSr50tkuzKxmy1D78dlO YYUS4pzkrQYaXMCnGe0u3Rz0i8LTcqv1vgOznQqk4v7hZmm8HEcIOy1sLd1yizCT yDRHkngfOxt2lvpR8dNnqH6hrS6uwDqjRZP62bqGoPpzbbv/Svs91ru6tMfZ919g jXiK4TKpc5CbjfdytvTXXNJ92eT7UFaw8X6fcA3JQL+K2G8OqKCVmSID83penPja AUGmD6Cz1X6waJ7WJ9mSHp6kd/FpgPHnX+MRWdNCtdQJsWlO6g1MRNAvqEW7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUm2UpivxqGGrBX1ASWmbP8Q5umuwwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdY4DAqKF9BHvlim6SuF 9llEM3Y4bqehfZbK4m/ulIFXixPZV51lKNtGB8DEcsXr/oHn6zz6iZd0zB8CutKI 3fc7ruvjFjkALV/L/sENx2e4HnLWcNa9eTncfeAdcbwx/EhQ5HXqL+GyRs6/OHPd g6qXxum3cNRS1BkgKkZ6/MqJmoo5PtyHRuB60Bn9BfAso5p6aCvMCb758Qh6qD76 q/c3bs/jL33sQ2hJeB3V4gkotGgXRnr0DnB0f1kVoYvBH4zdl0SqT5bVDn69/khN ENN6wIMllINYiaAQdjtii0GV6z+tHWmjbzcsbMsIs8dKVpXo9qfRryiI75M2yCyd gw== -----END CERTIFICATE-----Generated at Sun Sep 27 05:45:08 2026 by rpki-client