$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: UsiG6XV0/5OvztrHD3yzaW9Pfbwik3Bc7Z7brqzYvKA= Subject key identifier: B7:8F:1F:77:D5:C7:61:67:6E:EF:B0:21:E6:C4:85:F7:D4:05:67:1F Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 102A0DE32D91FBB487DE3F1C450143A5EA1C18EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 02AF Signing time: Fri 17 Apr 2026 08:49:42 +0000 Manifest this update: Fri 17 Apr 2026 08:44:42 +0000 Manifest next update: Sat 18 Apr 2026 09:01:42 +0000 Files and hashes: 1: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=) 2: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 3: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 4: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 5: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 6: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 7: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 8: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 9: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 10: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 11: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: IMdeODnFDFIahl7p6iMgGR2Q7YbJf9psHBOuwPueL2w=) 12: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=) 13: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 14: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 15: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 16: 3138352e35382e3135372e302f32342d3234203d3e20343032323033.roa (hash: qEPkBJmJPnkCj+WUZhzItxLAbT+040qoDYW4iZJto64=) 17: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 18: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=) 19: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 20: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2a:0d:e3:2d:91:fb:b4:87:de:3f:1c:45:01:43:a5:ea:1c:18:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Apr 17 08:44:42 2026 GMT Not After : Apr 18 09:01:42 2026 GMT Subject: CN=B78F1F77D5C761676EEFB021E6C485F7D405671F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:02:79:be:ee:f6:79:8b:fd:2e:d4:50:e1: 68:80:a7:b2:71:6e:6a:a1:f8:0d:b7:90:a7:86:86: 3e:34:9e:3e:22:b3:82:4f:65:97:9f:1c:e1:f6:15: f5:39:20:51:f9:ae:3f:0b:4f:ba:54:95:4e:89:e2: 52:fd:61:79:31:2c:1b:63:a1:79:37:d5:e8:64:31: 0f:b6:b7:2e:ec:dc:ce:c6:b0:02:03:42:86:ff:79: 2b:4f:e3:7c:cc:cc:01:53:59:f5:80:1c:c5:0a:72: 14:d1:73:66:2b:23:03:c5:cc:17:53:f7:80:e3:2e: 70:41:50:bc:5f:0d:48:3d:fe:2e:43:a2:63:78:27: 33:ec:fb:cb:65:b9:b0:83:74:73:90:bb:58:5c:02: f3:c7:dc:99:73:44:2b:40:20:65:54:70:0c:6e:1d: 81:1a:9c:11:61:5f:25:ff:0a:5d:46:76:4e:5d:ec: 7a:ba:7d:c7:af:85:6a:45:89:80:37:fe:16:95:54: 39:e3:5c:6f:a5:f7:09:0b:08:1e:a6:c2:07:b9:b6: 4c:ed:26:0a:7b:3f:9f:41:c4:4a:65:86:94:7b:7f: ae:3a:77:48:25:ed:ed:81:db:92:a4:c9:27:06:0c: a9:e9:86:55:ee:da:46:e9:d8:67:17:43:4e:6b:6e: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:1F:77:D5:C7:61:67:6E:EF:B0:21:E6:C4:85:F7:D4:05:67:1F X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4f:be:d7:2f:c2:ea:f6:3b:74:c0:8f:2b:39:62:67:6f:66: 48:83:61:2a:44:8b:6d:35:36:0e:bb:b6:22:87:ec:06:a2:a5: 92:e3:b1:2e:04:d3:b3:d5:21:18:cd:69:a0:5e:c7:34:6c:56: d7:88:a8:e2:82:9c:ff:a9:21:3f:63:45:68:a8:fd:82:c2:9b: a6:32:95:09:81:29:ad:68:de:d3:97:56:05:b6:c0:09:8d:1d: ab:53:81:8c:a3:c2:0d:b7:99:92:ad:0b:cd:12:ca:b9:2a:d9: 0b:2e:7a:2d:b0:8e:00:57:c2:d3:d4:8c:9d:66:e9:18:30:3c: c7:45:1c:9e:17:dd:f3:66:b4:03:b0:54:34:b4:37:f5:bb:0e: 88:4d:a5:8c:40:86:04:bf:c4:20:e8:0b:54:2c:f2:0c:24:64: 87:ca:bb:0c:38:88:f7:d4:fd:04:dc:63:41:f8:74:da:b2:c7: e0:aa:14:e2:33:94:38:b9:50:c9:1b:51:de:8d:07:50:bf:ea: 1b:50:18:48:c5:d6:7b:10:e8:29:cc:e8:26:0f:04:30:60:c5: 61:ff:5d:f3:d4:be:c0:ee:74:f5:9d:43:2b:c7:08:0f:53:8e: f2:cf:b9:fd:ae:6e:32:dc:ca:cd:86:48:22:b9:b0:f5:af:6b: 36:c0:32:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUECoN4y2R+7SH3j8cRQFDpeocGO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA0MTcwODQ0NDJaFw0yNjA0MTgwOTAxNDJaMDMxMTAvBgNV BAMTKEI3OEYxRjc3RDVDNzYxNjc2RUVGQjAyMUU2QzQ4NUY3RDQwNTY3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGwJ5vu72eYv9LtRQ4WiAp7Jx bmqh+A23kKeGhj40nj4is4JPZZefHOH2FfU5IFH5rj8LT7pUlU6J4lL9YXkxLBtj oXk31ehkMQ+2ty7s3M7GsAIDQob/eStP43zMzAFTWfWAHMUKchTRc2YrIwPFzBdT 94DjLnBBULxfDUg9/i5DomN4JzPs+8tlubCDdHOQu1hcAvPH3JlzRCtAIGVUcAxu HYEanBFhXyX/Cl1Gdk5d7Hq6fcevhWpFiYA3/haVVDnjXG+l9wkLCB6mwge5tkzt Jgp7P59BxEplhpR7f646d0gl7e2B25KkyScGDKnphlXu2kbp2GcXQ05rbsfJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUt48fd9XHYWdu77Ah5sSF99QFZx8wHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk++1y/C6vY7dMCPKzli Z29mSINhKkSLbTU2Dru2IofsBqKlkuOxLgTTs9UhGM1poF7HNGxW14io4oKc/6kh P2NFaKj9gsKbpjKVCYEprWje05dWBbbACY0dq1OBjKPCDbeZkq0LzRLKuSrZCy56 LbCOAFfC09SMnWbpGDA8x0Ucnhfd82a0A7BUNLQ39bsOiE2ljECGBL/EIOgLVCzy DCRkh8q7DDiI99T9BNxjQfh02rLH4KoU4jOUOLlQyRtR3o0HUL/qG1AYSMXWexDo KczoJg8EMGDFYf9d89S+wO509Z1DK8cID1OO8s+5/a5uMtzKzYZIIrmw9a9rNsAy 1w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:10 2026 by rpki-client