$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: nSodIWoNgIlB62lhVWTxnJG9CDPjisH9bgnfMI+uEEY= Subject key identifier: 89:EC:43:35:C2:BE:3C:59:6F:6C:A2:21:1E:98:FE:A6:C4:00:92:07 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 24F1F0C6FBE6B2C84DD3FAB675612D8B1BF7F0A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 06B1 Signing time: Sat 14 Nov 2026 04:49:57 +0000 Manifest this update: Sat 14 Nov 2026 04:44:57 +0000 Manifest next update: Sun 15 Nov 2026 07:53:57 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: Ogsf1pHLwh4alNxLGrqeI3xW1gva7biy757AFxsWwLA=) 2: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: dhFxJ7SHU2zkEVcuJxqQC02YpfjNfDTWdE/+WmV8cgA=) 3: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 0zaaDFxPbDHdIBKm8oDFclm2gOQttA9amei2QnOrH6c=) 4: 3138352e322e3136322e302f32332d3234203d3e2039333034.roa (hash: Wjjo4BAeQa46xqfwq/Sxl7hZnVc7WLFHYVccugcqEgY=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: liefg3Y9zeeu/3eknFvPsQP8Q7/RU3yzzbVSJuhzj6Y=) 6: 3138352e322e3136322e302f32332d3234203d3e2034373636.roa (hash: 6xIjLnCy0qhWyFEfLZh4dFeHr64CJ0o3uIQFz4O4Ksk=) 7: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: N1SgHIeCyR14qCgo1I2reGlHWWIX9kE3m9tQ4IBQ+AM=) 8: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: gn1EWILIjnPdb4uUP1SS51GqSoj+0YHU+Ji1cERwHek=) 9: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: BusrVHf+zY1JX+bmjDXcC3KVyArFYIN6eENeYlXoxOA=) 10: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: Eraz9BKSO1TLH/SvttKBRKKWjh8Z6j9zrys6hU/wyEI=) 11: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: +CYN6LpZToExMphwa4fQCy/ztAP3d8CKz6ZTfV/9ias=) 12: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: OAEK5JZd7BFlL79h9PBnbNqOxe1gIn6F74tWBPdElDM=) 13: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: Hs+t8irZQmOnipJfky4tAubpdiIFI2Fb6+htYTcqLa8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 07:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f1:f0:c6:fb:e6:b2:c8:4d:d3:fa:b6:75:61:2d:8b:1b:f7:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Nov 14 04:44:57 2026 GMT Not After : Nov 15 07:53:57 2026 GMT Subject: CN=89EC4335C2BE3C596F6CA2211E98FEA6C4009207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:cb:e2:ed:71:51:08:9e:8e:1f:5c:81:08: 98:a3:e4:39:22:e9:de:2b:b7:9c:18:ad:38:d4:24: f0:a3:88:45:7a:ee:8b:a7:ef:4e:75:21:00:94:f9: d7:66:70:29:ea:58:ec:56:94:f7:ba:c0:07:27:54: a7:f5:2e:3e:e7:55:0f:52:df:fc:37:0e:a9:a8:06: f8:fc:3f:88:07:f9:80:f5:07:20:5e:b9:9a:14:da: 2b:3e:b7:19:02:f3:ea:df:e8:06:18:59:6b:c7:62: fe:f2:74:ce:a6:9a:10:81:7d:a3:22:04:36:fd:fb: 4b:e7:f1:94:9a:45:87:6c:cf:da:bd:42:af:c5:41: f0:2c:98:15:d9:66:e3:fa:ae:9a:c2:b1:d1:93:e8: 13:36:04:60:a1:0f:82:29:7a:a4:1d:f1:4f:1d:ad: 67:63:ed:40:7e:f6:41:6e:b4:b0:57:5b:1a:1d:57: 72:ce:5b:0c:2a:f4:0f:b9:40:21:13:49:d1:b8:20: 63:00:b8:1e:0e:62:89:a0:e1:60:1b:70:15:36:74: bc:0f:b8:d2:69:3b:44:93:86:9e:af:70:91:81:52: 48:15:2b:22:d6:06:2c:82:27:2b:9c:5b:f5:7d:c7: d4:22:7b:f3:f4:cc:93:2d:8c:95:d7:23:77:17:ad: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EC:43:35:C2:BE:3C:59:6F:6C:A2:21:1E:98:FE:A6:C4:00:92:07 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2b:89:f3:5b:4f:d9:7f:a3:e3:51:26:cf:8f:56:92:4f:90: af:27:a8:5c:76:03:cb:cb:19:2c:cb:78:58:b6:8f:ef:fb:3c: 44:40:ed:89:bf:15:4e:90:ea:af:df:24:43:71:c8:5d:74:4d: 50:ae:3e:20:d3:4b:c1:47:01:71:05:6d:95:5c:36:45:2c:a9: 53:9f:db:a3:1a:be:ff:ee:f1:2c:73:a1:7b:62:cf:74:a4:d7: ff:20:ff:2f:8c:51:91:2d:01:c0:53:99:3a:09:e7:51:f9:cb: c7:7b:15:65:29:6a:e0:b0:18:1e:90:aa:42:dd:35:72:62:5c: 46:6a:83:fc:e5:59:47:6e:b8:29:f3:c4:56:cb:9c:43:18:ad: 42:44:22:30:87:fb:5f:12:09:4c:44:e7:6f:90:5c:04:6e:f2: a0:b6:e6:61:8e:e6:bb:38:91:18:ad:c2:1b:8d:f6:7d:74:99: 77:01:92:6c:80:07:09:a8:c5:ca:ee:01:9f:6d:ce:80:7b:60: 00:de:da:4f:3c:b9:5d:be:5d:2c:ca:62:ff:b4:a1:75:95:62: fd:91:07:31:ce:f0:4a:05:20:2c:d3:0d:61:a7:b2:3a:cf:f6: b1:d5:5d:ea:75:84:67:3a:09:d4:c0:30:70:7d:b3:90:e7:46: 3b:93:20:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJPHwxvvmsshN0/q2dWEtixv38KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNjExMTQwNDQ0NTdaFw0yNjExMTUwNzUzNTdaMDMxMTAvBgNV BAMTKDg5RUM0MzM1QzJCRTNDNTk2RjZDQTIyMTFFOThGRUE2QzQwMDkyMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh8vi7XFRCJ6OH1yBCJij5Dki 6d4rt5wYrTjUJPCjiEV67oun7051IQCU+ddmcCnqWOxWlPe6wAcnVKf1Lj7nVQ9S 3/w3DqmoBvj8P4gH+YD1ByBeuZoU2is+txkC8+rf6AYYWWvHYv7ydM6mmhCBfaMi BDb9+0vn8ZSaRYdsz9q9Qq/FQfAsmBXZZuP6rprCsdGT6BM2BGChD4IpeqQd8U8d rWdj7UB+9kFutLBXWxodV3LOWwwq9A+5QCETSdG4IGMAuB4OYomg4WAbcBU2dLwP uNJpO0SThp6vcJGBUkgVKyLWBiyCJyucW/V9x9Qie/P0zJMtjJXXI3cXrQN5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiexDNcK+PFlvbKIhHpj+psQAkgcwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyuJ81tP2X+j41Emz49W kk+QryeoXHYDy8sZLMt4WLaP7/s8REDtib8VTpDqr98kQ3HIXXRNUK4+INNLwUcB cQVtlVw2RSypU5/boxq+/+7xLHOhe2LPdKTX/yD/L4xRkS0BwFOZOgnnUfnLx3sV ZSlq4LAYHpCqQt01cmJcRmqD/OVZR264KfPEVsucQxitQkQiMIf7XxIJTETnb5Bc BG7yoLbmYY7muziRGK3CG432fXSZdwGSbIAHCajFyu4Bn23OgHtgAN7aTzy5Xb5d LMpi/7ShdZVi/ZEHMc7wSgUgLNMNYaeyOs/2sdVd6nWEZzoJ1MAwcH2zkOdGO5Mg Fg== -----END CERTIFICATE-----Generated at Sat Nov 14 23:25:55 2026 by rpki-client