$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: TczYvAB2lFgPolVoCwhSs9E37/DTVGA70jZQ6OSWuEI= Subject key identifier: 2C:F4:0B:76:7E:AE:04:AB:EC:7F:66:D7:02:AC:E7:6B:9C:87:22:30 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 5DAB817709C83CFCE664925D61A72E1F3EBB0596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 02C8 Signing time: Tue 21 Apr 2026 15:19:56 +0000 Manifest this update: Tue 21 Apr 2026 15:14:56 +0000 Manifest next update: Wed 22 Apr 2026 16:42:56 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 2: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: DuetShf9fZMN4MijPpqf8Zp99tJYFbSqdpVPtpVGgS4=) 5: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 6: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 7: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 8: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 16:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ab:81:77:09:c8:3c:fc:e6:64:92:5d:61:a7:2e:1f:3e:bb:05:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Apr 21 15:14:56 2026 GMT Not After : Apr 22 16:42:56 2026 GMT Subject: CN=2CF40B767EAE04ABEC7F66D702ACE76B9C872230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:42:92:e3:c8:19:2d:6e:8b:5b:44:da:e7: ad:08:f0:15:6e:d1:1a:b2:d2:df:ca:c4:1c:30:78: 70:3a:63:5f:08:b0:1c:eb:62:43:cb:5e:a3:94:ea: 4f:75:17:7f:ba:2c:69:a2:e5:60:1b:53:1c:e2:1f: e5:9a:97:eb:52:9d:e6:6a:a7:53:7b:3d:02:e1:e6: 6a:df:cd:2b:24:0f:46:5d:71:92:bc:1d:d3:72:23: d1:e6:62:c5:b1:50:33:34:2d:69:ed:5e:0e:ef:a0: 69:5b:04:41:49:9b:19:cc:64:97:51:d0:86:8e:fb: a7:51:0c:f9:25:91:63:a0:38:a2:e8:60:b7:e5:5c: 5d:21:d0:17:bb:0f:f3:f5:87:f8:a4:ac:3a:62:0c: 5d:fa:3f:31:78:86:de:2d:fb:58:27:24:5f:f3:d3: ee:37:e4:b2:13:7f:cd:7c:11:46:40:ad:9d:70:f1: 0c:3d:4f:74:4b:c2:8d:5f:db:c1:28:be:f3:29:6a: a9:d6:4a:e5:db:c2:31:56:bb:41:03:a3:fe:d6:ed: 37:99:ba:cd:6d:3b:e3:24:19:0c:45:0a:a2:5c:11: 6d:55:45:aa:38:c7:d0:28:83:64:08:c8:d4:0d:f8: 47:34:39:fd:42:a1:34:a5:5a:68:93:73:8c:96:b7: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:0B:76:7E:AE:04:AB:EC:7F:66:D7:02:AC:E7:6B:9C:87:22:30 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:21:b8:58:a5:2a:5e:e9:9b:6c:16:3c:c5:ef:39:89:f1:22: d8:e7:ee:26:f3:db:c4:99:25:d8:46:5d:7b:57:f2:13:40:44: 7b:80:53:75:04:5b:a2:23:cb:3c:8d:db:68:31:13:a5:75:51: 62:ae:eb:61:37:a0:bf:94:82:bf:2e:71:25:e2:27:1a:32:05: 93:7a:33:19:4b:c9:20:23:00:86:03:4f:f8:b0:f0:8d:d4:cc: 8c:d3:b9:71:92:4a:f6:a4:8f:ba:79:3e:2b:8d:31:f7:2b:46: 92:05:b0:18:6f:04:60:e9:e3:22:48:b5:e7:5b:73:8e:b8:7a: 7d:37:51:1b:f4:68:7f:07:ad:71:60:c2:2a:5d:5d:b8:b8:50: fc:ce:8e:e3:f3:8f:63:0b:e9:4a:0b:ae:99:a8:38:e1:f2:b5: b2:15:d9:09:bc:a7:cf:78:b1:1c:e0:c9:3f:eb:10:0c:f0:b9: 61:0b:00:ec:5d:11:c6:f0:b4:f0:29:d4:e7:ab:30:74:36:84: a5:44:d6:24:d7:e1:94:cf:f1:60:03:46:34:bd:12:6e:3f:e8: 69:7e:be:90:19:36:ce:b0:a4:a6:67:52:c2:d0:6e:af:88:e5: 61:d7:40:b5:ef:51:f5:92:ac:42:3f:b9:84:c1:0b:14:75:8d: ff:48:6e:a7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXauBdwnIPPzmZJJdYacuHz67BZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA0MjExNTE0NTZaFw0yNjA0MjIxNjQyNTZaMDMxMTAvBgNV BAMTKDJDRjQwQjc2N0VBRTA0QUJFQzdGNjZENzAyQUNFNzZCOUM4NzIyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8UKS48gZLW6LW0Ta560I8BVu 0Rqy0t/KxBwweHA6Y18IsBzrYkPLXqOU6k91F3+6LGmi5WAbUxziH+Wal+tSneZq p1N7PQLh5mrfzSskD0ZdcZK8HdNyI9HmYsWxUDM0LWntXg7voGlbBEFJmxnMZJdR 0IaO+6dRDPklkWOgOKLoYLflXF0h0Be7D/P1h/ikrDpiDF36PzF4ht4t+1gnJF/z 0+435LITf818EUZArZ1w8Qw9T3RLwo1f28EovvMpaqnWSuXbwjFWu0EDo/7W7TeZ us1tO+MkGQxFCqJcEW1VRao4x9Aog2QIyNQN+Ec0Of1CoTSlWmiTc4yWtwBzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULPQLdn6uBKvsf2bXAqzna5yHIjAwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCG4WKUqXumbbBY8xe85 ifEi2OfuJvPbxJkl2EZde1fyE0BEe4BTdQRboiPLPI3baDETpXVRYq7rYTegv5SC vy5xJeInGjIFk3ozGUvJICMAhgNP+LDwjdTMjNO5cZJK9qSPunk+K40x9ytGkgWw GG8EYOnjIki151tzjrh6fTdRG/RofwetcWDCKl1duLhQ/M6O4/OPYwvpSguumag4 4fK1shXZCbynz3ixHODJP+sQDPC5YQsA7F0RxvC08CnU56swdDaEpUTWJNfhlM/x YANGNL0Sbj/oaX6+kBk2zrCkpmdSwtBur4jlYddAte9R9ZKsQj+5hMELFHWN/0hu pw== -----END CERTIFICATE-----Generated at Wed Apr 22 06:01:39 2026 by rpki-client