$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json) Hash identifier: AicTBp4/SeQJ9ZFbLWRK6G/FrvjDKnwvhgMPKCtDJ0Y= Subject key identifier: 76:A7:46:BD:A8:7A:0D:4C:2D:41:BC:2C:2F:35:74:C8:32:A6:76:1A Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 149F53E32847D1E064788D36021DC56951ADC6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft Manifest number: 07BF Signing time: Sat 14 Nov 2026 22:25:07 +0000 Manifest this update: Sat 14 Nov 2026 22:20:07 +0000 Manifest next update: Mon 16 Nov 2026 01:42:07 +0000 Files and hashes: 1: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: mtoEJfZDnNC4yDUgLMX3zgAOQvqNn4zdImsuSsOQHFo=) 2: 322e35382e38342e302f32342d3234203d3e20323133373931.roa (hash: GP7G3iKZS0eBPTwu6D554rUd6n3xCyAeAvzjRiXprSw=) 3: 34352e382e3137332e302f32342d3234203d3e20313937313936.roa (hash: 3jTf9ki7y9rdeYaN5lJ4A9BLxW2mRTrdw0puXBgOnH8=) 4: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: HDA68mLG6MRopGu3U6pdcLVz81PI4pAevW0Vz54vlJI=) 5: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=) 6: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: KPixncOWZtATcB6bGH2vfbq/4FYYzxp8WcVaCPh1cuU=) 7: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: AtBxdbDSCGMlhk1DR/UjZZkrH6SVbsoHhpopN+8q4gI=) 8: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: PqF1eE/0Vytv7KbARFQc98GTbtGeCuQLtbd2lwf8340=) 9: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: WeteA5qOGTmhboj/I1IbXUTAA6Vr+NpjXoqkx1UDFSQ=) 10: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=) 11: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: e0SSS0xo7gvmOJksQW02nulgd/BU6NIi1E4uFnNkKKU=) 12: 36322e3132322e3138362e302f32342d3234203d3e20343032383636.roa (hash: Gi/MFaHQEM/Dn6eXagj6hZsyESLpGovppu9NGfn557s=) 13: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: O5xaR+jQW/wFf5fQ4meB7PNzpTh/uGAmEj862jE+YtE=) 14: 34352e36362e3134382e302f32342d3234203d3e20313532363036.roa (hash: EKOgOzOtGvJuJZn6XL7WpW4xB1wA+9sc389+2dbv3Ag=) 15: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: m2vKqOV6PJPhocfYUg+46CWALN6X7Mk2hxAjRjOTe4Q=) 16: 3231322e31382e3131352e302f32342d3234203d3e20323131343834.roa (hash: C+TxIzF6QDeooBljKtU5g8jHCoJKYteQs88g8gs89EQ=) 17: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=) 18: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: VpEKhz7umJbmzKVJDVzsQ68HCIsHIOJmXbqn2EpmOdc=) 19: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: yycXD37CweWcSXqvIiIHSQ/Otu/gODYxcJV0XE2Z5fg=) 20: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=) 21: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: lvJfFtfLFIbur8y503IXjh3IqK3A+RUCpmg6qhQ2seM=) 22: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: 8iycEhNuolwACS0ekQ/GS7kI3v9bE81gf9pF0KINbWM=) 23: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: QUzMWd8WT15LNmhOlxttrAzUMOiO/BrrGpvkhqR84HY=) 24: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: VnT6f7eup0/WhMwv7EXnvyzWk35rQ2W/LJCTBqUDvJk=) 25: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: uX4TUpc9QWawvTEY8DM2zgQlxykPZg4zImAv7y2dBbA=) 26: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: cUgxyla8jJ5OroUuNzjvJUi/GEQoiTv5Q7R/8q4Fm1g=) 27: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: ZeyolARCBdnsWHMtggmGQcHiKd280GfS1/j3/Bp8NX4=) 28: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: M/VDbD6X7IWmHx3gMi6h9miP6a1jez1ttIkf8txe0i8=) 29: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: 39Ecrxd/FkCAGTvy7OXLB4dzwM2Ae3nIKwg+e1og5Lc=) 30: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: Aze0H1EmJtfCr2E388tFbkXXQhKMmQb0+wnPTMjfsF4=) 31: 322e35382e38352e302f32342d3234203d3e203136323736.roa (hash: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=) 32: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: pqQl3e2pCUusFmVQbZmEOu3yKXeyiAgp/5DUklbgvdM=) 33: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: kMNRAnqn2ex5ku/KO9MIvv7GjcuVg1AMPoliCEdigOQ=) 34: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: OQXHvkMUYk1QDZhR0DoeAz0QI4bv3B7tsWGIo840D3k=) 35: 3134362e31392e3231352e302f32342d3234203d3e20323031313331.roa (hash: u4ojb2YE51vFgMkjWXXe4FgVm1kbuMMqef5geHX+2I4=) 36: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: CC/OaS/vNEZEx9nQTDQ9q3nxmSxOUqijRREdqIedw2A=) 37: 3231322e32342e3132372e302f32342d3234203d3e20323035353434.roa (hash: Mxn8uOU1SwCqejZhgNenv9gthI4/mGec1zouYkB+GgA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9f:53:e3:28:47:d1:e0:64:78:8d:36:02:1d:c5:69:51:ad:c6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Nov 14 22:20:07 2026 GMT Not After : Nov 16 01:42:07 2026 GMT Subject: CN=76A746BDA87A0D4C2D41BC2C2F3574C832A6761A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:05:b3:31:97:3d:06:1e:7b:dc:e6:51:45: 99:8a:b8:71:41:8d:4e:26:ca:a5:50:56:ac:46:fc: 6a:30:00:37:e7:90:37:95:9f:72:90:e0:bb:d1:a9: b4:38:d1:77:dd:25:53:51:03:1f:b3:d9:22:70:b6: 59:aa:2a:53:5d:68:4a:85:79:9b:88:25:61:90:c1: 46:f9:09:db:54:40:2f:46:b5:9e:cd:c9:a6:96:ca: 8e:d9:5b:fa:2e:6f:15:38:e0:e2:40:f5:5b:21:18: c5:f9:c3:9d:ef:9b:93:20:d1:36:08:51:c5:24:b1: fc:07:82:b7:b2:e0:8c:db:f4:c4:d5:94:88:77:89: 50:ac:39:f6:18:a2:ef:d6:5e:f2:58:86:68:2b:72: 36:6e:a5:99:95:f1:b4:41:b3:df:45:2a:79:88:4a: 06:3b:64:0a:83:37:c5:0b:89:75:70:86:92:1b:cd: 8d:90:f3:d1:8d:54:f5:f3:8d:04:14:0d:de:16:21: 95:bf:f1:64:95:a9:3d:53:10:08:2b:58:4b:fb:be: 7c:e7:09:10:c5:5e:77:1b:13:2f:af:14:33:6f:6c: 69:f8:01:67:f4:f8:ce:c3:6a:e2:97:48:30:22:79: 3e:9a:46:65:84:77:e6:bc:87:ca:56:8a:22:0d:6c: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A7:46:BD:A8:7A:0D:4C:2D:41:BC:2C:2F:35:74:C8:32:A6:76:1A X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f3:e0:28:4b:b1:74:9c:26:9d:0e:c4:25:1c:d0:ab:8d:3f: da:7e:dc:2d:ad:a6:a1:d0:7e:28:28:b4:31:3b:69:56:7e:ef: a1:57:f0:13:19:18:b3:fe:ed:60:77:ad:2c:75:00:44:86:a1: 2b:97:ed:1d:d8:b5:c2:ad:e8:99:3b:69:8f:8d:b6:84:5d:5e: f4:44:39:b4:1b:5b:85:df:68:c1:ea:1e:17:d8:00:5e:32:21: 33:f1:e2:b4:15:fd:e0:b4:14:37:86:e8:7f:70:24:0c:e2:be: 94:2c:3b:99:ca:3a:4e:2d:08:97:84:9e:8f:98:ef:5b:5d:24: 42:a6:b6:8e:45:62:29:50:3f:d8:9f:02:49:b1:1e:be:13:64: f3:9d:f1:6b:33:25:8f:ce:a2:05:a2:35:26:84:20:61:61:86: c4:71:7f:72:07:98:d3:53:1d:5d:04:07:ea:76:4f:0e:9d:0f: 43:c2:7b:be:13:9b:57:63:b2:ca:c2:92:cd:23:6f:97:cc:3e: c8:2b:7d:4c:90:83:e6:c2:1f:6a:a1:53:1c:1a:ba:6e:83:81: 79:7c:c5:7e:51:85:06:0c:f6:d1:eb:60:13:6f:3b:c9:0f:fd: 2e:b9:ac:7f:00:f3:97:de:23:3d:32:3b:23:0a:fd:f7:1d:b6: 68:09:ab:82 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFJ9T4yhH0eBkeI02Ah3FaVGtxr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjExMTQyMjIwMDdaFw0yNjExMTYwMTQyMDdaMDMxMTAvBgNV BAMTKDc2QTc0NkJEQTg3QTBENEMyRDQxQkMyQzJGMzU3NEM4MzJBNjc2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jgWzMZc9Bh573OZRRZmKuHFB jU4myqVQVqxG/GowADfnkDeVn3KQ4LvRqbQ40XfdJVNRAx+z2SJwtlmqKlNdaEqF eZuIJWGQwUb5CdtUQC9GtZ7NyaaWyo7ZW/oubxU44OJA9VshGMX5w53vm5Mg0TYI UcUksfwHgrey4Izb9MTVlIh3iVCsOfYYou/WXvJYhmgrcjZupZmV8bRBs99FKnmI SgY7ZAqDN8ULiXVwhpIbzY2Q89GNVPXzjQQUDd4WIZW/8WSVqT1TEAgrWEv7vnzn CRDFXncbEy+vFDNvbGn4AWf0+M7DauKXSDAieT6aRmWEd+a8h8pWiiINbEQvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdqdGvah6DUwtQbwsLzV0yDKmdhowHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMWIzNWY4Yi02 ZjQ4LTRiYWQtYjE4NS01YzFkYWE4YWNkYTkvMC9DRUZDRTQ0OUJFQThERUFFREIx ODA0REJBMjVDNTg0REY1ODczREM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/PgKEuxdJwmnQ7EJRzQ q40/2n7cLa2modB+KCi0MTtpVn7voVfwExkYs/7tYHetLHUARIahK5ftHdi1wq3o mTtpj422hF1e9EQ5tBtbhd9oweoeF9gAXjIhM/HitBX94LQUN4bof3AkDOK+lCw7 mco6Ti0Il4Sej5jvW10kQqa2jkViKVA/2J8CSbEevhNk853xazMlj86iBaI1JoQg YWGGxHF/cgeY01MdXQQH6nZPDp0PQ8J7vhObV2OyysKSzSNvl8w+yCt9TJCD5sIf aqFTHBq6boOBeXzFflGFBgz20etgE287yQ/9LrmsfwDzl94jPTI7Iwr99x22aAmr gg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:16:18 2026 by rpki-client