$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 4Im3o8RpLh1emGTTgtqVJmwZ+301E7YxwVMtIV3QWHc= Subject key identifier: 88:94:ED:CB:43:7C:92:8B:7A:CF:96:1C:CA:CF:19:01:4A:5D:E4:A6 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 402F27D9E5E2710CB421A80C1B75B19A182CB6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 028C Signing time: Sat 07 Mar 2026 18:27:13 +0000 Manifest this update: Sat 07 Mar 2026 18:22:13 +0000 Manifest next update: Sun 08 Mar 2026 22:21:13 +0000 Files and hashes: 1: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 5: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 6: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: JvV2UyI+uO7MEIxWKABL9eTzI1rT1hRvAy1afwYih4g=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 8: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 20:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2f:27:d9:e5:e2:71:0c:b4:21:a8:0c:1b:75:b1:9a:18:2c:b6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Mar 7 18:22:13 2026 GMT Not After : Mar 8 22:21:13 2026 GMT Subject: CN=8894EDCB437C928B7ACF961CCACF19014A5DE4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:39:e6:2f:77:59:85:7e:ba:93:52:a3:ec:39: 2f:4f:12:9d:b7:a5:95:cd:f2:1f:06:48:5a:74:03: a1:f5:7f:cd:f5:b7:c5:a4:e4:87:ad:cf:40:50:2b: 46:99:9e:8a:7b:d5:3a:15:cf:c9:cc:3c:b3:25:1b: 35:2d:62:a2:73:9a:a7:c6:c9:9c:de:cf:ac:66:bd: 89:13:be:95:05:9e:e0:20:f5:a6:b6:5b:8b:6e:a0: c4:d0:36:2f:77:58:3d:b7:e6:35:26:6f:ca:fc:ad: f7:de:4a:a8:64:f7:cf:a9:f2:5f:e9:09:93:e8:2c: 64:e7:da:27:bf:8a:0b:6c:91:33:84:b4:a4:1d:55: 89:91:f8:9e:40:49:ce:e2:6b:fc:02:e7:7f:d1:fe: 9f:d5:95:1c:65:90:d8:2c:09:4f:f3:4a:c3:9d:a2: f2:32:37:3a:c7:3d:8a:fa:e8:10:58:ef:84:70:ed: 5f:87:20:ed:50:0c:7d:1d:b1:21:79:2a:7c:e4:cf: 36:8a:83:6d:a8:79:04:0f:a2:24:95:fa:e8:5c:92: 2c:f8:64:6c:9e:16:0b:2c:4f:71:ea:87:03:f5:dc: f7:fd:3d:0c:f1:2e:af:c1:4c:a9:b8:97:1f:5b:45: 76:f4:9b:c5:fa:aa:6d:d1:70:62:db:ce:3d:bc:76: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:94:ED:CB:43:7C:92:8B:7A:CF:96:1C:CA:CF:19:01:4A:5D:E4:A6 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:2c:06:d0:12:a6:67:d0:6c:02:36:a8:57:9a:35:9d:71: 58:c0:49:d5:22:15:84:9c:94:12:b5:e7:dc:e6:0f:35:64:6a: 9d:d6:49:2a:e2:6f:fc:82:64:e6:0c:2e:ed:f6:bb:2d:33:46: f7:6c:9b:c6:ac:2e:74:1e:f2:49:1a:d8:3d:08:0e:b4:8f:5f: d1:4a:e0:31:19:d2:48:6b:36:ca:ec:b9:56:80:07:39:0b:97: 5a:a5:fb:7b:37:9e:fd:66:67:7b:f0:a3:25:15:70:01:be:c7: 03:e0:d0:5b:f3:ac:aa:b5:9f:ac:88:50:92:9d:5e:2a:64:c4: bc:16:2e:3a:e4:22:6c:aa:77:bf:24:27:b9:7e:07:aa:7a:e6: 63:f3:e7:58:cd:5d:14:14:9b:df:7e:33:e9:43:6a:50:20:0f: 2f:da:f6:4b:25:54:9c:0c:a9:3e:48:53:aa:fb:ff:09:85:94: fd:48:99:d5:a1:48:14:60:e1:02:65:01:28:1e:70:cd:c4:12: e7:9a:8a:34:bb:b1:d2:54:7e:49:1d:71:93:f7:9e:52:1d:7f: e5:13:76:37:ee:77:98:86:ca:aa:3f:83:05:e0:d1:fc:25:80: 9f:a0:8b:8a:5a:72:e4:61:07:2d:3c:7e:3d:3e:2c:a1:a1:56: 00:6a:ab:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQC8n2eXicQy0IagMG3WxmhgstqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjAzMDcxODIyMTNaFw0yNjAzMDgyMjIxMTNaMDMxMTAvBgNV BAMTKDg4OTRFRENCNDM3QzkyOEI3QUNGOTYxQ0NBQ0YxOTAxNEE1REU0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOeYvd1mFfrqTUqPsOS9PEp23 pZXN8h8GSFp0A6H1f831t8Wk5Ietz0BQK0aZnop71ToVz8nMPLMlGzUtYqJzmqfG yZzez6xmvYkTvpUFnuAg9aa2W4tuoMTQNi93WD235jUmb8r8rffeSqhk98+p8l/p CZPoLGTn2ie/igtskTOEtKQdVYmR+J5ASc7ia/wC53/R/p/VlRxlkNgsCU/zSsOd ovIyNzrHPYr66BBY74Rw7V+HIO1QDH0dsSF5KnzkzzaKg22oeQQPoiSV+uhckiz4 ZGyeFgssT3HqhwP13Pf9PQzxLq/BTKm4lx9bRXb0m8X6qm3RcGLbzj28duCXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiJTty0N8kot6z5Ycys8ZAUpd5KYwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOUsBtASpmfQbAI2qFea NZ1xWMBJ1SIVhJyUErXn3OYPNWRqndZJKuJv/IJk5gwu7fa7LTNG92ybxqwudB7y SRrYPQgOtI9f0UrgMRnSSGs2yuy5VoAHOQuXWqX7ezee/WZne/CjJRVwAb7HA+DQ W/OsqrWfrIhQkp1eKmTEvBYuOuQibKp3vyQnuX4HqnrmY/PnWM1dFBSb334z6UNq UCAPL9r2SyVUnAypPkhTqvv/CYWU/UiZ1aFIFGDhAmUBKB5wzcQS55qKNLux0lR+ SR1xk/eeUh1/5RN2N+53mIbKqj+DBeDR/CWAn6CLilpy5GEHLTx+PT4soaFWAGqr rw== -----END CERTIFICATE-----Generated at Sun Mar 8 00:50:15 2026 by rpki-client