Error: rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: NNT7EuQ93w7ukup0CGvm2nmE08fI6DMGs5TfEAx6+X4= Subject key identifier: F1:F3:FB:0E:A8:F8:E1:DE:AF:43:74:06:37:1A:37:B6:EC:C1:DD:AE Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 0C31683B6EBF25652333B18F6C7776D240042F9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 024A Signing time: Sat 03 Oct 2026 07:25:44 +0000 Manifest this update: Sat 03 Oct 2026 07:20:44 +0000 Manifest next update: Sun 04 Oct 2026 10:00:44 +0000 Files and hashes: 1: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: /i8MWWsHJPg+aXRXCE5Cb3sZyYEmaTu/9ZFKpa3FV7c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:68:3b:6e:bf:25:65:23:33:b1:8f:6c:77:76:d2:40:04:2f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Oct 3 07:20:44 2026 GMT Not After : Oct 4 10:00:44 2026 GMT Subject: CN=F1F3FB0EA8F8E1DEAF437406371A37B6ECC1DDAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:7e:74:3c:63:f0:94:58:ad:84:42:af:22: b3:c5:77:5b:21:a8:5e:89:50:db:2e:a2:b2:83:a0: 8a:de:10:ef:33:3d:06:68:77:85:80:f3:e4:3e:18: 41:60:81:1d:91:51:ca:0a:e4:dc:db:ee:32:39:61: 7d:76:75:f4:b2:b9:02:64:c3:ed:72:15:b5:eb:5b: c9:66:70:b7:85:5f:1d:e1:97:31:3e:d3:58:43:65: f6:36:c1:9b:cd:32:64:51:37:e1:cb:a4:01:8b:73: c5:f7:39:95:35:fc:fc:e9:84:21:0f:4e:2c:b7:73: 13:2b:40:aa:db:76:bb:ef:21:c9:bf:ee:2f:05:1a: db:a9:e4:b7:1d:49:6f:7e:4d:6b:cd:70:e3:ed:72: a0:3b:fc:eb:bd:25:5b:5b:73:19:cf:3b:89:0d:d8: ac:82:1f:14:21:7d:cb:0a:53:c4:0c:f4:fd:91:57: b8:46:3b:af:9b:81:26:ee:c5:f7:e1:7a:54:fb:61: 73:d3:93:f6:fc:3d:a6:30:11:44:6f:b6:88:81:3e: ed:d8:f7:4c:31:b9:22:cd:1c:80:0a:1e:c7:2b:0d: a3:e8:57:c4:43:23:dc:dc:13:f9:6f:43:f6:e8:72: 5d:62:b2:1a:31:10:9d:05:df:1d:c1:7f:69:eb:cf: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F3:FB:0E:A8:F8:E1:DE:AF:43:74:06:37:1A:37:B6:EC:C1:DD:AE X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:78:50:ca:21:78:ca:86:5f:98:22:6e:98:6a:47:70:c4:70: 60:71:51:5b:e8:b6:a0:ff:c5:30:2a:6c:58:55:4d:2b:5f:fc: 5d:42:c1:89:49:75:96:38:22:db:25:9e:53:4f:1b:38:6f:f4: 21:ad:53:c4:02:e4:c4:5e:54:74:cb:d0:e8:57:26:fe:2f:1a: c9:8f:b5:89:95:cc:1a:f1:15:f7:a5:44:e9:b0:f6:d6:41:f3: d7:32:1e:21:4c:65:d5:25:e1:fc:95:68:ff:51:67:43:5b:78: 77:78:12:34:8f:a2:e9:8d:b0:5d:1a:36:fa:b6:ec:fc:1d:74: 1e:2c:c6:31:72:45:8e:4b:53:b5:69:ad:cf:fa:9b:c0:bc:25: 3f:2b:9c:a1:39:c7:e3:aa:8e:5e:da:4b:18:f5:b2:a7:93:b0: a1:a8:22:1f:53:1a:e4:08:90:da:49:c2:5d:b5:d3:36:4c:e2: b8:0a:c5:3c:d8:7f:67:14:5b:1c:00:e2:d2:9e:86:79:f0:e9: 61:a2:e6:b3:9a:2f:93:00:73:e3:f3:07:f3:b3:d4:fb:25:32: f5:2f:c9:e7:65:ae:7d:ca:b2:b0:a8:7c:23:cb:7b:04:17:21: ee:0b:b3:68:c3:36:17:d0:a7:80:dd:49:30:5c:f7:01:dd:6a: 76:1a:fb:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDDFoO26/JWUjM7GPbHd20kAEL5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjEwMDMwNzIwNDRaFw0yNjEwMDQxMDAwNDRaMDMxMTAvBgNV BAMTKEYxRjNGQjBFQThGOEUxREVBRjQzNzQwNjM3MUEzN0I2RUNDMUREQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0L350PGPwlFithEKvIrPFd1sh qF6JUNsuorKDoIreEO8zPQZod4WA8+Q+GEFggR2RUcoK5Nzb7jI5YX12dfSyuQJk w+1yFbXrW8lmcLeFXx3hlzE+01hDZfY2wZvNMmRRN+HLpAGLc8X3OZU1/PzphCEP Tiy3cxMrQKrbdrvvIcm/7i8FGtup5LcdSW9+TWvNcOPtcqA7/Ou9JVtbcxnPO4kN 2KyCHxQhfcsKU8QM9P2RV7hGO6+bgSbuxffhelT7YXPTk/b8PaYwEURvtoiBPu3Y 90wxuSLNHIAKHscrDaPoV8RDI9zcE/lvQ/bocl1ishoxEJ0F3x3Bf2nrz99PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8fP7Dqj44d6vQ3QGNxo3tuzB3a4wHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZeFDK IXjKhl+YIm6YakdwxHBgcVFb6Lag/8UwKmxYVU0rX/xdQsGJSXWWOCLbJZ5TTxs4 b/QhrVPEAuTEXlR0y9DoVyb+LxrJj7WJlcwa8RX3pUTpsPbWQfPXMh4hTGXVJeH8 lWj/UWdDW3h3eBI0j6LpjbBdGjb6tuz8HXQeLMYxckWOS1O1aa3P+pvAvCU/K5yh Ocfjqo5e2ksY9bKnk7ChqCIfUxrkCJDaScJdtdM2TOK4CsU82H9nFFscAOLSnoZ5 8Olhouazmi+TAHPj8wfzs9T7JTL1L8nnZa59yrKwqHwjy3sEFyHuC7NowzYX0KeA 3UkwXPcB3Wp2GvuD -----END CERTIFICATE-----Generated at Sat Oct 3 13:05:15 2026 by rpki-client