$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: AQKOW4Dd0Z5CW04YVyFyOHRLaLDKqMB7+jeawc8oFuo= Subject key identifier: A5:41:57:6E:A4:9A:0A:5E:B0:BC:A3:F1:5D:68:D6:AD:4C:80:3C:C5 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 704FF1561067B3D7E3C8A893CAE734181D058869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 084D Signing time: Thu 05 Nov 2026 12:19:03 +0000 Manifest this update: Thu 05 Nov 2026 12:14:03 +0000 Manifest next update: Fri 06 Nov 2026 15:34:03 +0000 Files and hashes: 1: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: MNLBCqMmK/mGKn+arx3sMtp4e+thFoWGhi8ivlTfj0U=) 2: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: kRC8p1GZDVw/n153aBzSn3FnDjN+XtehTkikwSQQAhY=) 3: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: mu6JkT3fZoMbVctkEBjnrLNPWmpvwLKVK+IulCwBuzU=) 4: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: lCZOT7CUw//G2wSUIRSPoEnVhHBxs955MQWzeQPvQMk=) 5: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: hksR2RFjNh00D4GQuid5Bvdsyv72DQ8eShLKWLWJ500=) 6: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: 7Oj+hP0YV7LQnpCPJh2SU1zRRPNxpiFixVYZv1ihuBc=) 7: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: +9ZlUjFGDijH8b5+yzD1PMjjZdY4zblyEeoJ6+Yq2Hw=) 8: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: CavYIrZSFhZfgGj2RhsuO+5dyTDRj7K4lMIF+18l9zg=) 9: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: BWn7Fyc71HS3Qx09imcUTYAlGWvzW8ei/YZ4vwsjDbQ=) 10: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: e2HbFyb9jJVCReOUGrS06701Hln0j7R9pUtzgWwuBh4=) 11: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: dwbyJCtBdp+JkGUYAgtx7UvsHYfO6HdHWwhgMdccyTg=) 12: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: iBZrpirngtNdiGfgs1e/5egkTxly/jS9DyH9F0hqP68=) 13: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: YJQzrkCNdtcHF03SEJIbUA14cqWLzrSdWGFwfzoZWw8=) 14: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: UJuRx/b7ZuN3xXtU9UGl0rZYUByVV4xgOSCJ1FXm9MY=) 15: 3231332e3133392e36362e302f32332d3234203d3e20383334.roa (hash: /fEFWqqLrd+Ts0CFxmSPtqlc3u0CZ4xk9QWgLc2rXd0=) 16: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: CxXf2MZIKaUycFVCcvqJ0pu6d/h/wQOBy3gRZyXomCo=) 17: 3231332e3133392e37352e302f32342d3234203d3e20383334.roa (hash: 4XXjL0MwhaJInGfscOF1Yf6rhcl9L6u/8QICuc26MxA=) 18: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: NJOowo5VUyyKfXn6pnDF/Tz4fWJEVeCOza5neOzvfGM=) 19: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: xh9MbcQaOVI91ITKhlmBWnlkj2aoxPKUoH1PWhneuhw=) 20: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: YdmUivZOiB+z6zp254vUpjVQR2cGS4KwZb90oR6ZVsM=) 21: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: JEuERYX+zmY14zA8MGqIEE+WMqqmJly2u5v4u9LNrmQ=) 22: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 0cchwdJLnMGDMK7R7/iy+DuTxrLqECv6lMhtpTOQuYc=) 23: 3231332e3133392e36352e302f32342d3234203d3e20313337343039.roa (hash: 98cTJAfKgRxXy+8me2IlHy/9WFu3NTMiKJWvj2EAs8U=) 24: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: jYd4q98qoULIjdslO4Xk9d5wPUuNksXv3RR74JoHySc=) 25: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: ZNpXP0V7X1SLVOWk1qf9gaielEOXyCXpXadwIPelQAs=) 26: 3231332e3133392e37382e302f32332d3234203d3e20383334.roa (hash: ZAAaqaDQto8YMZJOOWZKhH2B64dKunjVz6h4lEzy2Bo=) 27: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: ddkCuB2C0zIUJCsHJnqd7PIRz+kBJmKHlIRYHjQdbXM=) 28: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: OH/dvNiYWhw/SVHGvLSGkBdK+Kv4T+yJzETwI0tfRWM=) 29: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: lYqwnaRxPaTNvtieRkaYrJa4vdVrGpVp8Qfg6gy2efQ=) 30: 3231332e3133392e36392e302f32342d3234203d3e20383334.roa (hash: ltBPoGvI8LMOGTQFixOZhqY2LJ/20YwdXHn/7p1ROpI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4f:f1:56:10:67:b3:d7:e3:c8:a8:93:ca:e7:34:18:1d:05:88:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Nov 5 12:14:03 2026 GMT Not After : Nov 6 15:34:03 2026 GMT Subject: CN=A541576EA49A0A5EB0BCA3F15D68D6AD4C803CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:cc:6c:7c:68:59:fd:cf:04:e4:b2:16:38: ba:f0:24:9f:4e:f0:21:f1:47:dc:f5:fc:52:82:af: 31:8d:ea:b1:47:fa:21:78:06:14:13:28:83:c3:6b: d9:24:87:18:49:29:ba:06:33:ce:bd:b9:c7:ca:ee: 47:83:8c:cf:70:87:0a:67:55:61:a5:2d:77:da:e9: a9:a1:38:9e:73:73:d2:b1:8b:00:59:c1:f7:f6:e5: 48:8a:d3:78:f2:72:6a:b0:9e:ea:74:a8:92:3d:ed: 34:f7:92:25:b4:0e:12:8b:43:90:6a:ab:33:da:09: ca:d4:77:41:d6:11:e4:a8:f9:68:14:23:c0:60:64: 66:40:80:80:4b:c8:45:ae:3b:fe:f9:fc:9d:45:37: b1:82:d4:53:09:fd:28:97:e9:bf:58:15:0f:71:7a: 50:24:10:c4:ac:2a:f8:25:d7:c8:ab:67:ad:98:d6: d6:f5:72:8b:db:48:6e:21:eb:1f:07:d6:68:25:ca: 1a:8e:a5:6c:58:c6:5b:68:88:e0:50:a3:f3:95:e6: b9:14:2f:97:c8:29:eb:d0:d1:06:1f:85:90:75:4f: 17:40:3d:1d:9e:69:cb:22:10:76:06:f5:aa:3c:1d: 6b:ff:7d:6c:fd:5b:01:55:08:70:2c:dd:d1:da:ae: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:57:6E:A4:9A:0A:5E:B0:BC:A3:F1:5D:68:D6:AD:4C:80:3C:C5 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:44:b0:63:6c:ad:7d:76:5b:4f:5b:8a:cb:c9:a4:20:e1:07: b6:53:2a:8c:2b:40:ff:b6:c5:f7:0a:81:bf:7e:a8:db:c0:5d: 3c:dd:81:89:de:74:d7:b0:88:c9:dd:73:f0:c8:08:19:b7:b9: 07:c6:e5:1b:cc:61:0e:6d:03:86:dd:0b:a0:1f:f5:ff:aa:3b: 88:26:23:23:84:4b:c2:08:6c:1e:64:1d:ba:de:31:4a:1f:f3: ca:85:65:1b:42:ab:37:da:2a:9b:31:1f:cc:4a:a0:ba:c1:56: 23:4e:75:92:46:14:98:f9:40:2b:63:41:0b:0c:3b:e2:cb:65: f6:98:bd:02:0f:00:e2:d1:5c:7e:12:ee:32:25:bf:82:86:2c: 3f:98:f8:bc:9e:c7:08:ad:14:db:41:c6:95:bf:69:43:8f:d3: 4e:69:7e:5d:68:22:37:6a:9a:47:59:90:60:c3:34:1b:0b:1c: 78:d8:42:dd:66:f0:b4:5a:dc:81:64:5e:4b:2a:35:70:48:1b: 49:c4:b8:95:3a:da:12:d2:d7:d2:15:c6:37:0f:f3:04:1c:0e: 87:7f:76:65:fb:a2:84:2c:43:95:ea:02:ec:75:ee:23:37:e5: fb:95:d3:1e:af:0d:b2:af:c0:ad:2b:69:84:55:2d:73:5a:c2: e5:2a:05:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcE/xVhBns9fjyKiTyuc0GB0FiGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNjExMDUxMjE0MDNaFw0yNjExMDYxNTM0MDNaMDMxMTAvBgNV BAMTKEE1NDE1NzZFQTQ5QTBBNUVCMEJDQTNGMTVENjhENkFENEM4MDNDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ1cxsfGhZ/c8E5LIWOLrwJJ9O 8CHxR9z1/FKCrzGN6rFH+iF4BhQTKIPDa9kkhxhJKboGM869ucfK7keDjM9whwpn VWGlLXfa6amhOJ5zc9KxiwBZwff25UiK03jycmqwnup0qJI97TT3kiW0DhKLQ5Bq qzPaCcrUd0HWEeSo+WgUI8BgZGZAgIBLyEWuO/75/J1FN7GC1FMJ/SiX6b9YFQ9x elAkEMSsKvgl18irZ62Y1tb1covbSG4h6x8H1mglyhqOpWxYxltoiOBQo/OV5rkU L5fIKevQ0QYfhZB1TxdAPR2eacsiEHYG9ao8HWv/fWz9WwFVCHAs3dHarin7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpUFXbqSaCl6wvKPxXWjWrUyAPMUwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0SwY2ytfXZbT1uKy8mk IOEHtlMqjCtA/7bF9wqBv36o28BdPN2Bid5017CIyd1z8MgIGbe5B8blG8xhDm0D ht0LoB/1/6o7iCYjI4RLwghsHmQdut4xSh/zyoVlG0KrN9oqmzEfzEqgusFWI051 kkYUmPlAK2NBCww74stl9pi9Ag8A4tFcfhLuMiW/goYsP5j4vJ7HCK0U20HGlb9p Q4/TTml+XWgiN2qaR1mQYMM0GwsceNhC3WbwtFrcgWReSyo1cEgbScS4lTraEtLX 0hXGNw/zBBwOh392ZfuihCxDleoC7HXuIzfl+5XTHq8Nsq/ArStphFUtc1rC5SoF pQ== -----END CERTIFICATE-----Generated at Thu Nov 5 18:16:31 2026 by rpki-client