$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: 2a8oeXn8uP6eXphGJ+yPbudzZREoeabZxYcGz6D3CCc= Subject key identifier: 2B:5B:20:4B:3C:13:BF:A1:CD:DE:D7:F7:89:27:39:BC:13:94:31:EA Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 210F0671EE1F65D1A96730C30B72E44600160D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0381 Signing time: Sun 20 Sep 2026 15:00:44 +0000 Manifest this update: Sun 20 Sep 2026 14:55:44 +0000 Manifest next update: Mon 21 Sep 2026 18:44:44 +0000 Files and hashes: 1: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 2: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 3: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 4: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=) 5: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=) 6: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=) 7: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=) 8: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 9: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 10: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: IGHOt9/JB+bPy1LJTSx77qyDRpfGDQArPVTiG+DnY8g=) 11: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 12: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 13: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 14: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 15: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 16: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 17: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 18: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 19: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 20: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 21: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0f:06:71:ee:1f:65:d1:a9:67:30:c3:0b:72:e4:46:00:16:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Sep 20 14:55:44 2026 GMT Not After : Sep 21 18:44:44 2026 GMT Subject: CN=2B5B204B3C13BFA1CDDED7F7892739BC139431EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:9b:c1:a1:92:3a:0b:0f:90:e7:1c:85:6e: bc:e4:7a:a0:61:1d:62:61:e6:d8:4b:ca:6a:c8:cf: e2:c4:cb:55:74:0d:1e:5a:06:07:95:39:0d:02:b0: 02:8b:72:79:0c:de:3c:91:37:65:ab:55:b8:f6:7e: e3:75:b9:fd:76:5d:6f:7b:69:9e:0f:35:91:a2:b9: 30:30:13:d4:e6:29:8d:f2:33:9b:56:a1:93:f3:7f: 93:6d:52:ae:38:e7:6a:0a:49:0a:83:f2:99:80:ed: 7d:4f:01:7b:52:3d:df:a6:38:b3:51:83:40:da:d7: dc:61:53:51:ec:2d:51:c7:67:58:9a:31:53:e5:1b: b5:79:fa:6c:5f:69:c9:f2:28:db:04:f4:66:34:1c: 30:fb:2e:d2:24:6c:67:46:9d:8e:89:92:24:d5:5f: 02:ed:0c:2b:41:ff:85:c8:a8:88:db:c3:03:95:39: 7d:0c:0c:c3:b9:b3:47:d0:1a:17:83:6c:0c:99:da: ba:6b:ef:cd:0f:56:69:24:14:34:bb:44:1b:9a:46: 84:e1:66:79:df:f8:01:eb:fe:76:ba:1a:e4:aa:18: 6e:59:15:27:92:32:10:80:c2:39:cc:aa:24:77:e3: ad:61:63:4b:34:a2:85:a2:eb:83:e7:9d:ef:d2:c7: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5B:20:4B:3C:13:BF:A1:CD:DE:D7:F7:89:27:39:BC:13:94:31:EA X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:03:d8:13:8c:33:cf:c5:d3:76:f7:b1:11:27:2c:7c:ef:cc: 79:6e:43:4f:97:92:d9:70:eb:35:35:87:ed:31:9f:36:bb:49: 5e:99:ef:a1:8a:8a:df:43:71:db:75:c3:4a:29:fa:f4:43:73: 8b:a0:7e:98:0c:17:84:6f:4a:2a:9d:21:73:ce:03:4f:04:b0: 79:44:ec:85:40:1c:ea:40:bb:3e:0d:f1:16:fb:17:1d:83:d9: e3:f9:94:fe:9f:02:d2:6d:47:bb:ab:ba:5a:e4:89:8c:28:05: 4e:80:6e:2c:27:ff:f2:12:1a:ab:a9:a8:8f:f6:91:25:32:8f: 84:69:5d:4c:49:74:77:ce:e9:c2:5f:88:c7:5c:7e:25:ac:18: 89:8a:67:39:52:0a:66:ad:c4:93:69:a7:ad:ef:7c:90:45:ba: c0:04:62:3a:8b:0b:bc:db:80:1a:6a:fc:79:3f:1a:e8:e4:07: dc:cb:ab:90:ca:b1:6b:d5:cc:e5:e7:c7:bb:37:63:42:8f:bf: 57:0c:44:70:75:36:c8:4f:58:54:a8:07:da:18:d4:98:f9:83: b7:7c:96:63:56:23:ce:70:95:77:36:82:ac:2e:2d:ec:d2:26: 1d:dc:ec:6a:9b:e9:a2:09:bb:da:1e:08:96:3e:e7:a9:d1:dc: 68:7c:84:00 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIQ8Gce4fZdGpZzDDC3LkRgAWDZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA5MjAxNDU1NDRaFw0yNjA5MjExODQ0NDRaMDMxMTAvBgNV BAMTKDJCNUIyMDRCM0MxM0JGQTFDRERFRDdGNzg5MjczOUJDMTM5NDMxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYX5vBoZI6Cw+Q5xyFbrzkeqBh HWJh5thLymrIz+LEy1V0DR5aBgeVOQ0CsAKLcnkM3jyRN2WrVbj2fuN1uf12XW97 aZ4PNZGiuTAwE9TmKY3yM5tWoZPzf5NtUq4452oKSQqD8pmA7X1PAXtSPd+mOLNR g0Da19xhU1HsLVHHZ1iaMVPlG7V5+mxfacnyKNsE9GY0HDD7LtIkbGdGnY6JkiTV XwLtDCtB/4XIqIjbwwOVOX0MDMO5s0fQGheDbAyZ2rpr780PVmkkFDS7RBuaRoTh Znnf+AHr/na6GuSqGG5ZFSeSMhCAwjnMqiR3461hY0s0ooWi64Pnne/Sx1ufAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUK1sgSzwTv6HN3tf3iSc5vBOUMeowHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgPYE4wzz8XTdvexEScs fO/MeW5DT5eS2XDrNTWH7TGfNrtJXpnvoYqK30Nx23XDSin69ENzi6B+mAwXhG9K Kp0hc84DTwSweUTshUAc6kC7Pg3xFvsXHYPZ4/mU/p8C0m1Hu6u6WuSJjCgFToBu LCf/8hIaq6moj/aRJTKPhGldTEl0d87pwl+Ix1x+JawYiYpnOVIKZq3Ek2mnre98 kEW6wARiOosLvNuAGmr8eT8a6OQH3MurkMqxa9XM5efHuzdjQo+/VwxEcHU2yE9Y VKgH2hjUmPmDt3yWY1YjznCVdzaCrC4t7NImHdzsapvpogm72h4Ilj7nqdHcaHyE AA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:39:12 2026 by rpki-client