$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft File: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft (raw, json) Hash identifier: 7HU8VIz5vpvvDS1GP/Jh8uYbEoFaUxKsBYJhBzJf7QY= Subject key identifier: 74:B8:21:6A:E3:94:94:CC:00:FD:45:F0:BD:F3:04:6B:89:26:16:6F Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Certificate serial: 1734BA748F63C49CF58D3E492EA90652ADECB001 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft Manifest number: 0126 Signing time: Sat 14 Nov 2026 09:31:33 +0000 Manifest this update: Sat 14 Nov 2026 09:26:33 +0000 Manifest next update: Sun 15 Nov 2026 12:39:33 +0000 Files and hashes: 1: 326130613a643638313a3a2f33322d3438203d3e20313339373931.roa (hash: LD70u5QlVqEB9vvyRbLQY7rIc7jKzVNRzxV1VLwEmOE=) 2: 326130613a643638373a663030303a3a2f34342d3438203d3e20313432343333.roa (hash: AMQEmk2Gamce4CGjOhcsatfMgR2ITuuPxLRE5OPFALo=) 3: 326130613a643638373a666630333a3a2f34382d3438203d3e20323139323038.roa (hash: S/8ZK1ErCZvTRtQCq1QRmXQBY3n8crW0uhTdSwe8qG0=) 4: 326130613a643638373a666630353a3a2f34382d3438203d3e20323138383637.roa (hash: sQzmM+cfjw9OGqZLZbYBKONhAU1u7EoEQyRU3OqTZ8U=) 5: 326130613a643638323a663030303a3a2f33362d3438203d3e20323139323833.roa (hash: 8/Dy4zPyPwRTfYS2Cii0dXxY7IAyPHqGc67WcpaHY8g=) 6: 326130613a643638373a653030303a3a2f34332d3438203d3e20323139343333.roa (hash: tW+nGNlDGvPdAUmeC4K3mnasXAgQn+DooLTJQYmn1dE=) 7: 326130613a643638373a666630303a3a2f34382d3438203d3e20313937323133.roa (hash: SkwT1h/rOaQClLo9nHFAVUlnnxxHoz85B/heCrM8trg=) 8: 326130613a643638323a653030303a3a2f33362d3438203d3e20323139323037.roa (hash: /hbUb7P8tvehfjH0Hs94vC86vj3k0KrkZvYJd6dLPnA=) 9: 326130613a643638373a666630323a3a2f34382d3438203d3e20323139323037.roa (hash: 5JWWZDi+y2DIDiFR71Ufp8CF8RxIHJzTGTA47i2VuYE=) 10: 326130613a643638373a666630363a3a2f34382d3438203d3e20323138373031.roa (hash: 1T45wJGc9qWA/I6HYWiBwXOEkTOAa5L1s8+wvsXsnRY=) 11: 326130613a643638373a666630313a3a2f34382d3438203d3e20323139353435.roa (hash: rL8ASD59Ti8nB9XD3UXOLC8XxvqgDesYATRPUcKVSuY=) 12: 326130613a643638323a643030303a3a2f33362d3438203d3e20323139323038.roa (hash: v/BWIbyLFdNKWIJBTAMGuH9YaifhTiluWVcVxi+Fhlk=) 13: 326130613a643638373a653130303a3a2f34332d3438203d3e20323139343333.roa (hash: g1wT/6cmNUPL0/+gCGthFM4aX0wibSOImG3Rr13sSvQ=) 14: 326130613a643638373a663130303a3a2f34342d3438203d3e20313937323133.roa (hash: bHHSi5wagGdCluZPsKdv0VQ8BFQU3w+P+YxMSNDafL4=) 15: 326130613a643638373a666630343a3a2f34382d3438203d3e20323138383638.roa (hash: /Qn7vWpWpCtp1RtdEsraoox42aGCAAZITsl1NydtXls=) 16: 0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl (hash: Vx5EtvC4CxjKIOYuqNHrz++bXNVD45MARZD/djAgPUY=) 17: 238A11AE245357E72FEB39785C7BC03A973A44E1.cer (hash: R+HEqGQkKX3kuC+uAGVikvyFGt/9CvxJ0iCn1j10oDE=) 18: 326130613a643638303a3a2f33322d3438203d3e20313339333137.roa (hash: 9uxdhCWJM/sIXCpTZUmH78FRG6qiNbULLGusY6bMbzg=) 19: 326130613a643638333a3a2f33322d3438203d3e20323133393033.roa (hash: W+8q39gznYX0o4KUlgrQq8k9LXJMIdHIh+OMugSu5lg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:ba:74:8f:63:c4:9c:f5:8d:3e:49:2e:a9:06:52:ad:ec:b0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea Validity Not Before: Nov 14 09:26:33 2026 GMT Not After : Nov 15 12:39:33 2026 GMT Subject: CN=74B8216AE39494CC00FD45F0BDF3046B8926166F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:ad:33:51:62:3d:26:f0:2d:48:90:29:b6: ad:14:4d:4b:d0:86:14:7c:3c:5c:27:b6:d2:ef:6e: 00:9b:2e:90:2c:fb:bc:2d:3e:09:33:15:fb:33:f3: 39:87:3e:27:55:37:9e:e7:cb:66:1a:2d:4e:a3:2c: 0e:c9:c1:8d:89:40:91:c1:fc:81:3f:5d:f9:50:30: 71:0a:53:39:28:02:ee:bb:71:c6:2f:9f:cd:4d:73: a5:4a:10:d2:00:dc:33:d7:58:fa:66:ca:ab:a3:d4: ad:9d:3b:8c:7d:10:7f:5e:f7:c0:1c:47:9a:15:31: 33:78:ca:82:7c:8f:e7:62:6d:69:35:71:31:d3:de: d6:a4:36:57:41:ff:12:85:f1:75:04:6d:92:36:13: fa:ef:28:79:09:db:52:7b:59:35:3b:b2:46:15:53: d1:90:08:8e:26:f3:9d:18:6d:7e:ea:b0:f5:1a:94: 90:42:04:50:eb:f5:2d:ee:98:09:8a:bd:84:66:fe: a5:e7:2d:b1:85:e7:34:a5:f5:2d:13:db:a1:c9:51: 4c:5f:5f:ad:75:ab:fc:42:0f:8d:2c:e0:3d:69:4e: 9a:70:9f:1e:a5:10:6b:90:83:71:03:ba:52:a2:6b: 0b:d1:75:b5:dc:c5:be:65:26:6e:89:50:10:00:ee: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B8:21:6A:E3:94:94:CC:00:FD:45:F0:BD:F3:04:6B:89:26:16:6F X509v3 Authority Key Identifier: keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8e:0f:68:12:28:36:92:ac:bb:2d:f1:c3:5a:32:95:83:0d: 3f:c2:89:b7:5b:91:bb:e5:df:6f:43:9c:1c:68:29:c1:83:d7: 35:c5:67:a1:df:17:98:59:6c:3d:fe:8b:1a:16:9e:15:49:ae: 5e:95:62:5d:9e:e0:13:05:1d:5d:e0:3c:79:07:3f:09:b2:0a: ab:dc:55:31:98:e3:af:91:c7:f1:e5:3b:9d:6c:2e:2c:a0:be: ae:7c:13:e1:10:28:29:c7:fb:04:e1:e6:e6:f0:f0:fa:fd:93: ee:34:49:39:2b:58:b9:47:5c:94:47:83:b8:df:66:53:57:4c: 13:65:4c:5c:1b:ad:45:db:55:8e:af:f2:c0:73:9c:79:d8:a0: 54:19:fa:e1:fb:d8:21:4b:97:fd:08:4d:f7:97:53:d3:00:bd: 1f:cb:72:fa:c1:75:37:1c:ce:35:12:ea:b2:13:7c:4a:57:af: 09:fb:88:69:d3:8b:82:85:71:08:47:fe:bd:1a:7e:f9:a5:72: e4:be:02:d5:14:5b:93:81:34:9e:2d:83:ca:9f:57:a7:05:77: f6:f7:e4:a9:a1:f9:82:31:b7:6b:83:6b:ff:e5:b4:30:98:6c: 2d:44:30:2e:75:b1:58:47:24:44:da:6e:1e:44:30:65:2b:dd: 8b:84:63:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFzS6dI9jxJz1jT5JLqkGUq3ssAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh M2MzZTRlYTAeFw0yNjExMTQwOTI2MzNaFw0yNjExMTUxMjM5MzNaMDMxMTAvBgNV BAMTKDc0QjgyMTZBRTM5NDk0Q0MwMEZENDVGMEJERjMwNDZCODkyNjE2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbp60zUWI9JvAtSJAptq0UTUvQ hhR8PFwnttLvbgCbLpAs+7wtPgkzFfsz8zmHPidVN57ny2YaLU6jLA7JwY2JQJHB /IE/XflQMHEKUzkoAu67ccYvn81Nc6VKENIA3DPXWPpmyquj1K2dO4x9EH9e98Ac R5oVMTN4yoJ8j+dibWk1cTHT3takNldB/xKF8XUEbZI2E/rvKHkJ21J7WTU7skYV U9GQCI4m850YbX7qsPUalJBCBFDr9S3umAmKvYRm/qXnLbGF5zSl9S0T26HJUUxf X611q/xCD40s4D1pTppwnx6lEGuQg3EDulKiawvRdbXcxb5lJm6JUBAA7svTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdLghauOUlMwA/UXwvfMEa4kmFm8wHwYDVR0j BBgwFoAUDnCuCs0L6D0tRYyiB7HU/6PD5OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjNmMmFhYWUtMjNjZi00YTM3LTk0MDMtNzQzYjE1ZWMy YThlLzAvMEU3MEFFMEFDRDBCRTgzRDJENDU4Q0EyMDdCMUQ0RkZBM0MzRTRFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RuQ3VDczBMNkQwdFJZeWlCN0hVXzZQ RDVPby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0y M2NmLTRhMzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0 NThDQTIwN0IxRDRGRkEzQzNFNEVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASY4PaBIoNpKsuy3xw1oy lYMNP8KJt1uRu+Xfb0OcHGgpwYPXNcVnod8XmFlsPf6LGhaeFUmuXpViXZ7gEwUd XeA8eQc/CbIKq9xVMZjjr5HH8eU7nWwuLKC+rnwT4RAoKcf7BOHm5vDw+v2T7jRJ OStYuUdclEeDuN9mU1dME2VMXButRdtVjq/ywHOcedigVBn64fvYIUuX/QhN95dT 0wC9H8ty+sF1NxzONRLqshN8SlevCfuIadOLgoVxCEf+vRp++aVy5L4C1RRbk4E0 ni2Dyp9XpwV39vfkqaH5gjG3a4Nr/+W0MJhsLUQwLnWxWEckRNpuHkQwZSvdi4Rj gw== -----END CERTIFICATE-----Generated at Sun Nov 15 06:38:32 2026 by rpki-client