$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: tbOtIU5XCtCB7deJnK6iSjXPlIutr4x80D/IPkwofOc= Subject key identifier: 70:F5:90:BE:B8:7E:65:DF:64:EE:5D:11:3A:C0:91:2C:5A:1A:81:BE Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 3F14162BA5BD846A65864546184CF266C8D6E4A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 061E Signing time: Mon 21 Sep 2026 03:21:36 +0000 Manifest this update: Mon 21 Sep 2026 03:16:36 +0000 Manifest next update: Tue 22 Sep 2026 05:44:36 +0000 Files and hashes: 1: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: i7yv9pJldqESd3qyArmWGTA23VAsXHLxrFSErMSFK/s=) 2: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=) 3: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: zH/62I+GFjmbLT58TFoHTt4seVQwFkHzMOITLzNLWwM=) 4: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: 6vwMaK76XK6X/pz6kTht3dh5BVylEQSRFW6TtRdFjeM=) 5: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: tf013dx+p23kvdhs/rrgl7jF0HCw4nuCcwBzDL5I7qE=) 6: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=) 7: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: m3qyMw/oJQApcKE+tTHmQHJByXjG/Fh99MnZmfiTNq8=) 8: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=) 9: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: Jr4fRJS+nPVoRQIRXyWs31rP/U/UP3PPufL87ZQz8U8=) 10: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W19aTL73kDmq4VpxFcM/5jWE3HfVKXSDK7YuTWHNOTU=) 11: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: UzAk6y5i6qWN9IVFlhmoZTRjcqrtlajGQzrPjOGpriU=) 12: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=) 13: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: DU5pynjNIEEP2cTa3qAwphhWauxpRZzQL0RoFoNuEKY=) 14: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: jli84J8TPjOOdHhktkVlx+DNU1JzPO7pUh03TSavr40=) 15: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: RBjXMLj20ozhJFLy1WSIfc7wq7Cyuu+KQRQSUNSEpNg=) 16: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: IYPeBc0njFQqxrAGs2OJRowmjEd1rlfv9Au+QQE5POo=) 17: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 57eeXg7j+oXHRFh1XtK1fw7OXcY8daCIezixmAfkJcw=) 18: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: kGai0vt9wA/86vZjdukxOGnISfChmqA46SxZbgRXmkY=) 19: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: QbwoBEnpKwFJwsOgE5BSkaanZZexGA6c5rVJbKDREKo=) 20: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: rx28ukAYIi7QdbkrNWf+57kJyDhNeE212LGEgmkq0Dk=) 21: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: kfugqwL5a8rKpk8fwdFIn7pS0iv55PmKrmdtLvO9AmM=) 22: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: EJG2SDzWzIGWns6pT4kVSDqRPMJTJNXkz97kFGgjHCI=) 23: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mgaSFuH9dwlQC9LQOF1dVYEFek9VIOTVBqz/2FqpDg4=) 24: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: 9ZXjSWAp+j58GwfDtQ/mqL8ScvPvc/83HCdFvbTQt+M=) 25: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=) 26: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 8yuN3MCh3uYcW+DbtvxPqGplTmthXGYCL3Ax7r80myw=) 27: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: euJ5l1svQV4yeF07rYfON9i9pW05MgdKcVAsQcZCZgs=) 28: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 0ETOHqFxfMol2LhEQMME+DAkxTkGy4ojRF4+9fieTEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:14:16:2b:a5:bd:84:6a:65:86:45:46:18:4c:f2:66:c8:d6:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Sep 21 03:16:36 2026 GMT Not After : Sep 22 05:44:36 2026 GMT Subject: CN=70F590BEB87E65DF64EE5D113AC0912C5A1A81BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:41:b0:54:2b:64:c4:f9:93:98:50:c5:86:5d: 24:82:7a:7b:b2:31:62:d2:f3:9f:7f:49:51:be:16: c2:c8:b8:c7:05:ed:5d:2a:97:e7:0f:a3:ab:dd:8c: 3a:5c:bc:46:58:ef:a3:d0:52:59:bd:4a:f5:a8:9d: c2:12:6b:ed:01:59:91:29:1b:fe:b4:9a:bb:d1:74: 7d:6c:c1:bf:5d:30:73:7a:ec:f9:0d:68:7c:5e:10: 53:96:ee:e7:20:d5:9c:da:2b:af:74:98:8a:20:61: 25:91:56:47:ee:0c:d8:c9:e6:21:23:f4:7d:a2:f2: fa:07:cc:0f:22:1d:0d:3d:d2:d1:7f:c5:a5:43:5e: 09:63:7d:44:cc:57:81:12:01:31:83:6c:6b:b0:ac: 5d:07:bc:9a:c1:60:d6:4e:a4:94:1e:c6:22:5c:65: 55:17:40:ad:b6:a8:bb:c6:50:c9:dc:81:09:7d:8d: 4e:3b:77:61:3a:09:8b:ec:11:2a:cb:7e:72:63:92: 69:d6:0f:91:09:81:b8:59:31:51:43:ef:06:d8:04: 1e:ce:5f:ca:10:16:ba:6e:a7:71:ea:5f:1a:3e:99: 43:dc:c1:aa:12:ca:42:de:37:14:fd:b9:14:b3:2c: 13:1c:d4:20:8e:10:d0:73:79:60:fd:44:a5:b7:59: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:90:BE:B8:7E:65:DF:64:EE:5D:11:3A:C0:91:2C:5A:1A:81:BE X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:16:5a:97:f5:67:19:64:14:75:db:39:81:0b:2a:4d:78:7b: b2:a3:7c:65:f7:51:0b:f9:a0:48:c5:99:5d:e5:71:98:1b:3f: af:f8:5d:a5:e9:f9:7c:e6:d1:0a:7a:c9:cb:70:69:32:09:73: b9:9d:75:af:3c:b8:ce:08:05:c6:77:ad:fe:9b:a0:b4:41:83: a7:c0:cb:3b:0d:76:31:66:4f:fb:a6:b2:22:7d:ad:dc:3f:0e: 2b:ec:0e:d5:47:f6:9e:03:b7:75:02:30:bc:d2:46:37:56:f4: 52:49:46:4b:81:cd:ae:0a:8c:c3:cd:ef:1b:64:a5:85:02:13: b4:ec:73:13:d7:9c:52:46:11:8f:e5:69:35:75:36:48:d6:07: ef:7c:21:d7:e8:e2:0e:b0:2b:83:7c:f6:1f:f5:c3:14:39:43: ac:aa:71:0e:65:a8:44:fb:79:c3:22:96:2a:4f:4d:82:75:86: a9:19:46:25:a3:9a:87:ea:ca:5a:de:4b:7c:a4:a5:3c:d5:f9: a3:89:44:8c:f2:14:0f:ad:8e:fd:40:ee:4b:f4:14:e3:78:cd: dd:26:27:e7:47:04:01:a8:23:04:66:e0:9a:b4:0e:08:56:df: b9:80:e5:3d:29:a4:04:f7:eb:73:72:34:24:cc:c0:69:d9:a5: 5d:8e:10:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPxQWK6W9hGplhkVGGEzyZsjW5KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNjA5MjEwMzE2MzZaFw0yNjA5MjIwNTQ0MzZaMDMxMTAvBgNV BAMTKDcwRjU5MEJFQjg3RTY1REY2NEVFNUQxMTNBQzA5MTJDNUExQTgxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3QbBUK2TE+ZOYUMWGXSSCenuy MWLS859/SVG+FsLIuMcF7V0ql+cPo6vdjDpcvEZY76PQUlm9SvWoncISa+0BWZEp G/60mrvRdH1swb9dMHN67PkNaHxeEFOW7ucg1ZzaK690mIogYSWRVkfuDNjJ5iEj 9H2i8voHzA8iHQ090tF/xaVDXgljfUTMV4ESATGDbGuwrF0HvJrBYNZOpJQexiJc ZVUXQK22qLvGUMncgQl9jU47d2E6CYvsESrLfnJjkmnWD5EJgbhZMVFD7wbYBB7O X8oQFrpup3HqXxo+mUPcwaoSykLeNxT9uRSzLBMc1CCOENBzeWD9RKW3WX8pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUcPWQvrh+Zd9k7l0ROsCRLFoagb4wHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRZal/VnGWQUdds5gQsq TXh7sqN8ZfdRC/mgSMWZXeVxmBs/r/hdpen5fObRCnrJy3BpMglzuZ11rzy4zggF xnet/pugtEGDp8DLOw12MWZP+6ayIn2t3D8OK+wO1Uf2ngO3dQIwvNJGN1b0UklG S4HNrgqMw83vG2SlhQITtOxzE9ecUkYRj+VpNXU2SNYH73wh1+jiDrArg3z2H/XD FDlDrKpxDmWoRPt5wyKWKk9NgnWGqRlGJaOah+rKWt5LfKSlPNX5o4lEjPIUD62O /UDuS/QU43jN3SYn50cEAagjBGbgmrQOCFbfuYDlPSmkBPfrc3I0JMzAadmlXY4Q ig== -----END CERTIFICATE-----Generated at Mon Sep 21 09:17:01 2026 by rpki-client