$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: wJrBjS+wkJ31R8WE9oru5N/iBFWRdG50g0pnHev2kDU= Subject key identifier: A6:9A:86:ED:28:27:07:7A:CF:8A:9F:B7:87:94:79:8C:69:EB:02:7A Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 43058F3817AA640827DF492073843E6366E30E6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 0339 Signing time: Tue 28 Jul 2026 15:39:08 +0000 Manifest this update: Tue 28 Jul 2026 15:34:08 +0000 Manifest next update: Wed 29 Jul 2026 18:19:08 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=) 2: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=) 3: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: ZZZKpsOOuwjWsT19rRobEIFO9nA2s0Dkv6pd9DPBTGU=) 4: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=) 5: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=) 6: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=) 7: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=) 8: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=) 9: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=) 10: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=) 11: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=) 12: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=) 13: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=) 14: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=) 15: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=) 16: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=) 17: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=) 18: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=) 19: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=) 20: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=) 21: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 18:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:05:8f:38:17:aa:64:08:27:df:49:20:73:84:3e:63:66:e3:0e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jul 28 15:34:08 2026 GMT Not After : Jul 29 18:19:08 2026 GMT Subject: CN=A69A86ED2827077ACF8A9FB78794798C69EB027A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:b0:e0:e2:cb:6f:12:52:db:ee:19:5a:fb: d0:2b:98:02:25:05:75:d5:45:3b:47:08:9d:69:19: 78:20:66:5c:53:e5:6f:f0:cd:73:0b:d5:4e:c3:57: 9a:e1:f3:e4:51:6b:97:0b:f2:5c:58:f4:90:1e:61: a6:3b:a3:d3:76:94:62:9d:98:84:28:7f:d2:4e:4f: af:67:6b:96:d5:37:2f:cd:b7:f2:d7:82:84:7e:7c: 9a:b7:3f:95:a0:f3:ee:b1:94:cc:2b:22:b1:5f:88: 45:10:f6:95:e2:79:3e:60:6e:5e:1a:54:dd:45:34: 5c:98:1f:82:79:2a:d1:43:47:77:e4:76:b4:b3:7b: 7f:1c:e6:a6:15:27:e7:27:8a:9a:a0:e9:22:7a:c9: d5:f3:c6:09:94:89:ec:0f:9e:8a:84:f9:82:95:9b: a6:ad:4d:d0:c1:ac:1b:42:f9:07:30:0c:9d:62:0b: 30:59:8e:55:26:64:96:92:68:1e:9d:91:2d:08:9c: 86:f5:8b:02:d8:ec:20:6e:69:14:da:1e:e0:1d:e0: 15:2a:f0:c1:66:1a:5d:01:c4:a0:34:ca:28:53:37: a9:9c:52:89:9a:27:37:b5:84:9e:7b:bc:33:00:c7: a0:28:f5:4e:ec:a0:cd:80:66:73:54:89:bd:86:0d: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9A:86:ED:28:27:07:7A:CF:8A:9F:B7:87:94:79:8C:69:EB:02:7A X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:f9:ca:fa:10:ac:c1:6c:17:3c:d1:af:64:12:20:0a:6e: 2f:90:e4:91:01:85:21:b1:da:4b:e7:83:ad:21:b1:93:bd:57: fb:ce:58:bd:59:e6:9b:36:37:8c:b4:3a:c4:28:5f:d0:e3:e3: f2:02:75:fe:d1:fe:05:f5:f2:c1:9c:0b:29:3f:1d:a0:c5:2d: 2e:b1:2e:f4:4a:cb:ff:92:92:2f:aa:c0:4f:df:98:8c:7b:61: 76:49:62:da:b6:2b:e5:4b:c9:f5:d2:ae:99:c4:dd:d6:0f:d1: ae:d4:5c:8f:0f:90:97:45:2d:05:20:27:2a:82:17:75:7d:16: 9f:16:6e:2a:0d:31:46:a8:51:b5:3a:93:25:6f:04:32:f3:08: 98:cf:69:d4:6a:6d:79:2d:7c:e3:c1:a4:78:50:2d:69:17:7a: b9:01:18:da:a7:89:07:c0:1e:20:d2:61:88:37:2b:33:ac:fd: 2f:31:e3:f8:47:5d:ff:09:10:89:f8:50:ab:1c:93:f7:7b:69: 04:47:28:ff:c3:89:14:d4:b0:8c:80:a2:c0:4c:dc:53:04:ec: 4b:d6:c8:1e:29:93:1b:8b:20:6a:2d:99:b0:a6:3e:85:9c:87: 0d:8a:b2:81:31:ba:db:ee:cf:45:42:2e:a7:c5:d7:47:78:6b: 3d:44:5f:72 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQwWPOBeqZAgn30kgc4Q+Y2bjDmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNjA3MjgxNTM0MDhaFw0yNjA3MjkxODE5MDhaMDMxMTAvBgNV BAMTKEE2OUE4NkVEMjgyNzA3N0FDRjhBOUZCNzg3OTQ3OThDNjlFQjAyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHs7Dg4stvElLb7hla+9ArmAIl BXXVRTtHCJ1pGXggZlxT5W/wzXML1U7DV5rh8+RRa5cL8lxY9JAeYaY7o9N2lGKd mIQof9JOT69na5bVNy/Nt/LXgoR+fJq3P5Wg8+6xlMwrIrFfiEUQ9pXieT5gbl4a VN1FNFyYH4J5KtFDR3fkdrSze38c5qYVJ+cnipqg6SJ6ydXzxgmUiewPnoqE+YKV m6atTdDBrBtC+QcwDJ1iCzBZjlUmZJaSaB6dkS0InIb1iwLY7CBuaRTaHuAd4BUq 8MFmGl0BxKA0yihTN6mcUomaJze1hJ57vDMAx6Ao9U7soM2AZnNUib2GDQKFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUppqG7SgnB3rPip+3h5R5jGnrAnowHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLz5yvoQrMFsFzzRr2QS IApuL5DkkQGFIbHaS+eDrSGxk71X+85YvVnmmzY3jLQ6xChf0OPj8gJ1/tH+BfXy wZwLKT8doMUtLrEu9ErL/5KSL6rAT9+YjHthdkli2rYr5UvJ9dKumcTd1g/RrtRc jw+Ql0UtBSAnKoIXdX0WnxZuKg0xRqhRtTqTJW8EMvMImM9p1GpteS1848GkeFAt aRd6uQEY2qeJB8AeINJhiDcrM6z9LzHj+Edd/wkQifhQqxyT93tpBEco/8OJFNSw jICiwEzcUwTsS9bIHimTG4sgai2ZsKY+hZyHDYqygTG62+7PRUIup8XXR3hrPURf cg== -----END CERTIFICATE-----Generated at Wed Jul 29 00:53:12 2026 by rpki-client