$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: LF0Me50BkLzK3psPR3ZfxPxcAHYJVbv4guRRnQH9pGw= Subject key identifier: AD:F4:E2:8F:A9:AF:1D:D8:5E:D1:21:3E:C2:79:7D:BC:7E:8A:AE:11 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 3C9D6DEC8963942921A096596C7DF708B764253B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 05C9 Signing time: Wed 23 Sep 2026 18:10:53 +0000 Manifest this update: Wed 23 Sep 2026 18:05:53 +0000 Manifest next update: Thu 24 Sep 2026 18:53:53 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 2: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=) 3: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) 4: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 5: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: uvID7/u6FhKF7IEI2FqLbkIz9uwQqJ3cxV6vPtzIh4M=) 6: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 7: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 8: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9d:6d:ec:89:63:94:29:21:a0:96:59:6c:7d:f7:08:b7:64:25:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Sep 23 18:05:53 2026 GMT Not After : Sep 24 18:53:53 2026 GMT Subject: CN=ADF4E28FA9AF1DD85ED1213EC2797DBC7E8AAE11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:bf:5e:47:55:b6:d3:e5:bd:bc:92:a5:c7: 91:93:e3:c0:aa:41:aa:f7:02:ff:d5:6b:1c:f8:da: 91:31:a5:8d:1c:c5:7b:b9:43:e1:09:9b:d4:02:7b: fe:45:b3:ff:ab:e7:3b:99:b5:d8:27:0e:74:11:09: c3:86:92:74:98:82:7d:2d:7c:4c:5f:57:4e:d2:1d: e6:6b:9a:ee:4d:56:da:62:07:38:d7:ed:3f:84:80: 12:bc:4c:cf:ae:0c:aa:c5:66:ef:c9:62:6e:ee:7c: d9:32:70:57:ac:2a:bf:13:73:af:c7:93:f6:ad:cc: cd:a8:34:fd:29:12:33:37:6b:5f:28:5d:4b:e1:0c: 60:5c:e9:b0:a6:02:6d:68:a9:88:94:f8:d5:09:b9: 9a:59:63:2f:e2:d1:b6:30:6f:a7:86:f1:88:d8:a5: a3:21:55:79:10:ec:7f:64:ad:6b:bb:7c:01:fa:5e: c1:a6:81:f9:54:7a:28:8c:54:f3:48:cd:e5:7e:45: 83:98:d2:f7:e9:b3:1c:2f:18:8d:9e:a4:3d:65:20: aa:22:e9:5e:3f:57:d0:87:09:d8:01:a2:30:45:d8: 9c:2d:a2:2a:47:63:2b:18:5a:4c:0d:81:de:3f:a8: 90:28:69:88:12:6d:24:05:00:48:93:e5:6a:08:05: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:E2:8F:A9:AF:1D:D8:5E:D1:21:3E:C2:79:7D:BC:7E:8A:AE:11 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:c7:99:5a:07:5d:fc:1e:73:ec:b6:df:42:b1:3b:8b:7c: b5:9a:ea:07:0c:54:4e:2d:dc:ba:d6:bf:f0:0d:73:8d:9a:75: df:10:ae:06:d3:0f:9a:ab:0a:06:02:3e:26:b4:bc:27:f3:ec: ac:df:3e:dd:8b:40:34:cc:d3:f0:46:fb:1d:60:d0:a9:dd:78: ee:3b:c7:36:f1:95:55:c8:9e:af:6b:e7:13:09:aa:d7:fa:9a: 43:62:2a:0a:fa:97:2c:15:0b:bc:6e:1a:36:5d:fd:21:8e:60: 79:bb:f2:0a:0e:9f:cd:b5:06:b2:d4:73:e1:13:63:ef:6f:13: a2:ff:e6:8d:79:42:fa:65:2b:04:15:56:66:1f:c4:ec:7f:d5: c9:41:b9:5c:00:a1:eb:02:a7:5e:88:30:a3:a1:d0:06:55:7d: fd:c5:a1:8d:29:e0:52:20:fa:94:c8:00:1c:ee:ca:e1:57:8e: 83:9b:76:da:20:a8:c3:b3:fa:32:61:a4:4f:1e:2d:0c:14:ee: cf:9f:b3:88:57:1d:d9:d0:06:4c:af:fa:74:b0:44:7b:85:0f: 40:b0:c4:05:e6:a6:7a:72:c8:ee:e1:7a:c3:97:40:12:8a:02: f1:72:70:42:c3:01:9b:b3:d5:dc:60:61:c6:62:e2:29:76:64: dc:d5:2d:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPJ1t7IljlCkhoJZZbH33CLdkJTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA5MjMxODA1NTNaFw0yNjA5MjQxODUzNTNaMDMxMTAvBgNV BAMTKEFERjRFMjhGQTlBRjFERDg1RUQxMjEzRUMyNzk3REJDN0U4QUFFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDL9eR1W20+W9vJKlx5GT48Cq Qar3Av/Vaxz42pExpY0cxXu5Q+EJm9QCe/5Fs/+r5zuZtdgnDnQRCcOGknSYgn0t fExfV07SHeZrmu5NVtpiBzjX7T+EgBK8TM+uDKrFZu/JYm7ufNkycFesKr8Tc6/H k/atzM2oNP0pEjM3a18oXUvhDGBc6bCmAm1oqYiU+NUJuZpZYy/i0bYwb6eG8YjY paMhVXkQ7H9krWu7fAH6XsGmgflUeiiMVPNIzeV+RYOY0vfpsxwvGI2epD1lIKoi 6V4/V9CHCdgBojBF2JwtoipHYysYWkwNgd4/qJAoaYgSbSQFAEiT5WoIBRRZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrfTij6mvHdhe0SE+wnl9vH6KrhEwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyTHmVoHXfwec+y230Kx O4t8tZrqBwxUTi3cuta/8A1zjZp13xCuBtMPmqsKBgI+JrS8J/PsrN8+3YtANMzT 8Eb7HWDQqd147jvHNvGVVcier2vnEwmq1/qaQ2IqCvqXLBULvG4aNl39IY5gebvy Cg6fzbUGstRz4RNj728Tov/mjXlC+mUrBBVWZh/E7H/VyUG5XACh6wKnXogwo6HQ BlV9/cWhjSngUiD6lMgAHO7K4VeOg5t22iCow7P6MmGkTx4tDBTuz5+ziFcd2dAG TK/6dLBEe4UPQLDEBeamenLI7uF6w5dAEooC8XJwQsMBm7PV3GBhxmLiKXZk3NUt Ug== -----END CERTIFICATE-----Generated at Wed Sep 23 23:12:24 2026 by rpki-client