$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: 7h1SdZhyv3x/kYRjrZs1n5UmGCCU2ZD90rus6ua7yKA= Subject key identifier: 39:E1:95:23:6C:39:68:5C:F2:80:9C:F3:09:67:A0:E1:44:03:93:3F Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 6AF63477C9166F13A88212F338EB23FEF6008A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 040E Signing time: Tue 10 Nov 2026 09:44:31 +0000 Manifest this update: Tue 10 Nov 2026 09:39:31 +0000 Manifest next update: Wed 11 Nov 2026 12:31:31 +0000 Files and hashes: 1: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: H6z5UgqzzwENibeoaL/jOe9aa5t0uv0+rNtrD0/GlKE=) 2: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=) 3: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: pS1G1drRPBWH4FNN6+N6RZE6LuLa2srViTNKuVC8toE=) 4: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: dqbGTjTU/B8vA6teyanpuEPrxP3e6KA82oBtbQg0IYM=) 5: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: dOWc+OJbaSWI6k3uhVQp8DWP9hcIzA5cW/+s9uK1MHQ=) 6: 33312e32322e3130372e302f32342d3234203d3e2039333034.roa (hash: 8hKTOek6Qthhyjni25okZb8/VhofK89RBgImZyqawwQ=) 7: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: sGZRYXq3pgxXgMpA6qb4Lt81cMmDp969oaWBo8d9e1M=) 8: 33312e32322e3130352e302f32342d3234203d3e20323030383539.roa (hash: nw9YLvM7zXyP2kzR5sTyAuZwaZ0QV0qAmB4zg2Dg+gg=) 9: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: 7bNrxcvUZ17BVt7tVCbbxISD5HLTvxOeQrmUPkwlG/E=) 10: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=) 11: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=) 12: 3130332e34392e3133302e302f32342d3234203d3e20313939363935.roa (hash: RDauoDGr+i1zVcuayu/4HbEUes85SAVA7OzOaH8ZkX8=) 13: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=) 14: 34332e3233302e38342e302f32342d3234203d3e20313938353636.roa (hash: np6fRGdvntmo0WUS6PHKf2pD76Rp5Br0W2IrCVC8yd0=) 15: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: Qks8J0X938H6HVLJgBIAZbcnO+aF1xL4OBNn/fR/W5Q=) 16: 3130332e34392e3132382e302f32342d3234203d3e203231383539.roa (hash: Gks1amT+rPKiG3Iiuhmb/CKRKvNQxK+jCx7Bb8Ah+xI=) 17: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: e3yeUvIbF4YF0fCErBT4H99U9jC9XkRZUBr3LRE9AVI=) 18: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: YaV2coN10mtSdMCwpunQHhnXdXWjWsC3QeS46Z+3lrE=) 19: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: K6pPcrxT1qaaXfoQ1qJYcODSnYPMdIwjQ2K1qzc/KoU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 12:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f6:34:77:c9:16:6f:13:a8:82:12:f3:38:eb:23:fe:f6:00:8a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 10 09:39:31 2026 GMT Not After : Nov 11 12:31:31 2026 GMT Subject: CN=39E195236C39685CF2809CF30967A0E14403933F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:71:bc:6b:78:c7:19:a6:90:0d:06:ba:13: 83:5b:51:b5:3d:c5:ae:1e:c0:d0:a4:44:3d:f5:4c: 94:8c:13:12:1b:ba:fd:37:5a:a1:90:5e:be:33:ee: cb:c0:e5:15:82:bd:d2:39:23:f2:7b:43:eb:65:bd: d4:94:bf:da:15:3e:80:2f:17:23:4a:ec:8b:00:46: d5:3d:0c:b9:7c:fe:69:a7:a7:e5:c4:a3:b5:98:c8: 3d:99:7e:ea:3d:c8:17:56:09:47:0c:d3:da:1a:2f: 23:40:17:9e:be:41:14:bc:85:fa:4b:68:bb:a9:39: e0:bf:3e:65:62:b2:8d:7c:cc:cf:98:5c:3c:d5:ca: 21:20:b7:7e:6e:6b:b9:97:0b:75:a2:15:71:63:94: fc:df:33:43:be:89:95:94:15:83:84:53:4a:91:67: cb:d7:c8:c7:57:c2:8c:4f:23:ef:9b:57:b4:68:31: 5c:66:5d:d0:36:d8:b5:03:c4:a5:8f:99:63:45:29: b8:d6:a7:62:b7:72:46:ba:56:fe:60:ac:52:3c:75: 55:80:a9:0d:c0:4f:fa:ed:58:3d:f5:5c:06:1f:c4: 45:cf:e0:32:8a:d0:f7:21:fb:19:5e:88:f6:b0:d5: d0:64:2a:49:e6:eb:da:30:71:e3:47:32:d1:a4:04: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E1:95:23:6C:39:68:5C:F2:80:9C:F3:09:67:A0:E1:44:03:93:3F X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:df:b9:b7:c2:b9:df:cd:a6:2c:02:b1:c0:7c:a4:29:14:95: bf:c5:6e:4c:18:cd:da:b0:05:34:58:de:40:1b:49:74:b0:6f: 3d:6c:0b:fc:17:58:8c:b1:91:32:d8:b6:37:06:73:d2:1c:af: 04:e0:03:45:f5:ca:9e:d4:b1:b4:c5:4c:3f:d1:21:1c:b9:49: 18:c6:24:ef:d6:c9:f5:db:e0:f2:00:5d:48:3e:c9:55:6f:a4: cd:9c:ed:a7:82:80:82:70:e0:28:9f:53:ce:d5:65:7e:bc:9b: 24:72:18:5e:cd:88:4c:27:8c:71:61:41:45:e2:4c:86:b8:c5: e3:12:af:22:30:ff:91:a9:6f:b9:de:02:0c:6b:31:13:dc:8f: 7e:2a:9e:de:ad:bb:8e:4d:b5:8a:8d:a9:5a:dc:67:ec:ff:7b: 4a:0b:ff:0e:dd:cc:b1:57:a7:fc:fa:37:3e:f1:d4:68:47:2c: ed:e7:02:56:3d:6d:58:37:77:90:f6:04:8f:1b:e5:e5:58:b9: 71:17:31:a2:29:13:2d:98:e2:c0:30:15:94:87:85:15:a9:92: dd:d4:70:8d:ab:29:da:58:99:65:62:47:96:39:ba:bf:24:aa: c4:15:54:df:0a:cd:2a:65:b8:a1:c3:d5:44:93:99:1a:ed:89: f4:36:31:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUavY0d8kWbxOoghLzOOsj/vYAii4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjExMTAwOTM5MzFaFw0yNjExMTExMjMxMzFaMDMxMTAvBgNV BAMTKDM5RTE5NTIzNkMzOTY4NUNGMjgwOUNGMzA5NjdBMEUxNDQwMzkzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSXG8a3jHGaaQDQa6E4NbUbU9 xa4ewNCkRD31TJSMExIbuv03WqGQXr4z7svA5RWCvdI5I/J7Q+tlvdSUv9oVPoAv FyNK7IsARtU9DLl8/mmnp+XEo7WYyD2Zfuo9yBdWCUcM09oaLyNAF56+QRS8hfpL aLupOeC/PmViso18zM+YXDzVyiEgt35ua7mXC3WiFXFjlPzfM0O+iZWUFYOEU0qR Z8vXyMdXwoxPI++bV7RoMVxmXdA22LUDxKWPmWNFKbjWp2K3cka6Vv5grFI8dVWA qQ3AT/rtWD31XAYfxEXP4DKK0Pch+xleiPaw1dBkKknm69owceNHMtGkBBA3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOeGVI2w5aFzygJzzCWeg4UQDkz8wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid+5t8K5382mLAKxwHyk KRSVv8VuTBjN2rAFNFjeQBtJdLBvPWwL/BdYjLGRMti2NwZz0hyvBOADRfXKntSx tMVMP9EhHLlJGMYk79bJ9dvg8gBdSD7JVW+kzZztp4KAgnDgKJ9TztVlfrybJHIY Xs2ITCeMcWFBReJMhrjF4xKvIjD/kalvud4CDGsxE9yPfiqe3q27jk21io2pWtxn 7P97Sgv/Dt3MsVen/Po3PvHUaEcs7ecCVj1tWDd3kPYEjxvl5Vi5cRcxoikTLZji wDAVlIeFFamS3dRwjasp2liZZWJHljm6vySqxBVU3wrNKmW4ocPVRJOZGu2J9DYx CQ== -----END CERTIFICATE-----Generated at Tue Nov 10 19:50:30 2026 by rpki-client