$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 6+6XCZoe7ANNv6YdA8ToJ8h2ZcRd7fa0eM1jbsCFR+k= Subject key identifier: CB:FC:7B:AB:29:AB:CA:41:7F:67:94:21:62:00:19:CA:FA:E0:28:B4 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0BADB96A43E455135AD733A1B3F862F777BC793C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 03C5 Signing time: Mon 26 Oct 2026 03:02:13 +0000 Manifest this update: Mon 26 Oct 2026 02:57:13 +0000 Manifest next update: Tue 27 Oct 2026 06:13:13 +0000 Files and hashes: 1: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 2: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (hash: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: nDa3XIhJEU6vgtEIO8Z+USd+iGjgMxrGc0NGg6QiOGw=) 6: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 7: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: ja3+U57yAGxxGr5Um51OCVQtaQ7uJbanl/ykt0EuLwg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 06:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ad:b9:6a:43:e4:55:13:5a:d7:33:a1:b3:f8:62:f7:77:bc:79:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Oct 26 02:57:13 2026 GMT Not After : Oct 27 06:13:13 2026 GMT Subject: CN=CBFC7BAB29ABCA417F679421620019CAFAE028B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:da:db:61:21:49:e8:b8:f8:19:72:47:7d: 98:c6:fd:38:97:4f:c5:85:d2:b2:23:df:bb:96:6d: 96:06:71:b8:1e:a2:f5:7b:98:79:ea:96:97:f1:aa: 97:85:29:e5:58:c0:f1:74:f3:e2:96:cc:52:04:d0: e2:99:fa:e3:af:7f:41:90:e9:40:ea:12:9b:7e:ab: cf:6c:d8:f2:9d:c9:94:ec:59:89:71:cb:2e:ea:a5: 77:82:a3:23:48:f4:9c:a8:9c:a8:97:b3:63:ff:6c: 87:be:d9:d6:bc:cd:86:7a:8a:2d:e0:98:f2:c1:86: 3d:d2:fe:42:3a:4d:6f:12:fd:38:3b:60:b9:15:4f: 35:cf:9e:6b:15:fe:ae:44:cc:be:8e:b9:a8:a5:8a: 38:03:74:73:14:08:65:fe:37:87:50:38:20:0f:98: 1a:70:fa:f1:a3:a6:9f:ec:bb:88:f7:13:97:97:57: f3:f4:fe:ec:d4:76:92:4e:dc:62:48:cd:b4:69:bf: 7d:63:3e:4b:e0:e6:92:f4:e0:16:ab:a0:b2:cc:e5: 6c:54:a1:4d:1e:89:b6:63:da:62:3c:5e:b0:4b:54: d3:c8:ab:4c:44:78:fc:ef:52:3d:e2:1b:3c:eb:d2: 63:5c:95:37:d1:ef:9b:a8:fd:ae:ff:94:16:96:38: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FC:7B:AB:29:AB:CA:41:7F:67:94:21:62:00:19:CA:FA:E0:28:B4 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3a:80:58:bd:07:51:b2:98:95:ab:59:1f:08:98:60:5e:52: 0e:e6:b8:e4:97:3d:c5:40:9e:88:e4:65:64:ee:5f:a2:95:28: a2:6f:b7:62:a8:24:ec:f3:f3:ba:96:f8:90:5b:74:87:c0:a4: 77:4b:c8:3f:6c:13:2b:9a:6a:5c:c6:f8:aa:19:17:03:2b:ba: 73:48:79:b0:9c:11:e5:cd:c8:5c:8d:40:43:32:74:d4:95:3f: 08:f3:0b:6c:95:1e:4e:a6:84:31:d3:5a:a6:35:c3:b4:1d:d5: 45:6b:14:fb:2d:de:41:d0:42:71:32:44:50:ce:c3:e8:41:7e: a1:58:01:20:35:80:8b:f7:c8:b0:84:4e:48:ab:5a:89:52:63: 67:7a:cc:88:ba:05:d7:fa:08:bc:7b:6c:45:e9:1b:ca:5b:30: e6:66:6d:e6:6c:2f:25:12:07:99:64:fd:9f:24:e1:26:e5:0c: a9:0b:6e:d8:5c:1c:c9:1b:d8:1b:7e:9f:9c:f8:64:cc:10:3a: 13:06:9d:a6:f1:8a:45:73:cb:65:5e:92:86:85:69:9d:c7:5d: 67:6c:dd:32:49:05:69:91:8d:80:89:ab:97:d6:12:fe:d3:b8: c5:aa:8f:f0:92:fa:30:56:df:c0:4d:ec:38:11:27:11:1e:a8: df:df:64:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC625akPkVRNa1zOhs/hi93e8eTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjEwMjYwMjU3MTNaFw0yNjEwMjcwNjEzMTNaMDMxMTAvBgNV BAMTKENCRkM3QkFCMjlBQkNBNDE3RjY3OTQyMTYyMDAxOUNBRkFFMDI4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAndrbYSFJ6Lj4GXJHfZjG/TiX T8WF0rIj37uWbZYGcbgeovV7mHnqlpfxqpeFKeVYwPF08+KWzFIE0OKZ+uOvf0GQ 6UDqEpt+q89s2PKdyZTsWYlxyy7qpXeCoyNI9JyonKiXs2P/bIe+2da8zYZ6ii3g mPLBhj3S/kI6TW8S/Tg7YLkVTzXPnmsV/q5EzL6OuailijgDdHMUCGX+N4dQOCAP mBpw+vGjpp/su4j3E5eXV/P0/uzUdpJO3GJIzbRpv31jPkvg5pL04BaroLLM5WxU oU0eibZj2mI8XrBLVNPIq0xEePzvUj3iGzzr0mNclTfR75uo/a7/lBaWOL1LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUy/x7qymrykF/Z5QhYgAZyvrgKLQwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjqAWL0HUbKYlatZHwiY YF5SDua45Jc9xUCeiORlZO5fopUoom+3Yqgk7PPzupb4kFt0h8Ckd0vIP2wTK5pq XMb4qhkXAyu6c0h5sJwR5c3IXI1AQzJ01JU/CPMLbJUeTqaEMdNapjXDtB3VRWsU +y3eQdBCcTJEUM7D6EF+oVgBIDWAi/fIsIROSKtaiVJjZ3rMiLoF1/oIvHtsRekb ylsw5mZt5mwvJRIHmWT9nyThJuUMqQtu2FwcyRvYG36fnPhkzBA6EwadpvGKRXPL ZV6ShoVpncddZ2zdMkkFaZGNgImrl9YS/tO4xaqP8JL6MFbfwE3sOBEnER6o399k Hg== -----END CERTIFICATE-----Generated at Mon Oct 26 22:55:12 2026 by rpki-client