
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json)
Hash identifier: 0FP1Y8nZfTbHWyNYK3/YXQwYRSrb7KCMnYVCMBdEqRQ=
Subject key identifier: 0B:A8:76:5B:47:F9:57:4C:0F:64:12:64:EF:AA:1C:28:C3:0C:E0:CC
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 35DCFBB13D3CA51036745A4B538FE82D60EBC52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
Manifest number: 03E0
Signing time: Sun 15 Nov 2026 02:55:15 +0000
Manifest this update: Sun 15 Nov 2026 02:50:15 +0000
Manifest next update: Mon 16 Nov 2026 03:16:15 +0000
Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (hash: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=)
2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=)
3: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: zQnOo5bWsOVkkCjVfkLKbIaoTTyLInfHaZIksgfurF0=)
4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: cwEKlfu1Yi7wYCsjhdCTlSzruF8STuGjJiEWqY6jSb0=)
5: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=)
6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=)
7: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: ja3+U57yAGxxGr5Um51OCVQtaQ7uJbanl/ykt0EuLwg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dc:fb:b1:3d:3c:a5:10:36:74:5a:4b:53:8f:e8:2d:60:eb:c5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Nov 15 02:50:15 2026 GMT
Not After : Nov 16 03:16:15 2026 GMT
Subject: CN=0BA8765B47F9574C0F641264EFAA1C28C30CE0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:53:79:bf:72:a6:64:aa:de:5c:4a:15:8d:
8f:d9:5e:fb:b1:9c:d3:be:cd:0c:20:96:c3:a7:2d:
1a:40:76:02:ea:71:96:b4:68:ff:57:6c:ba:1c:a2:
23:65:e6:88:0a:ce:ce:a8:a1:85:62:95:2f:77:db:
63:10:0c:6b:ce:b1:0e:a4:24:da:88:c6:a5:c7:9c:
33:d8:91:90:b8:e1:82:cf:9c:c0:e5:a4:72:87:3e:
33:17:23:9a:a5:0a:dc:c2:1d:a1:35:b6:aa:f2:2d:
88:37:20:2c:e3:3d:78:a5:77:4e:d6:65:52:54:c3:
28:94:a9:14:10:3c:85:2c:96:9a:98:0d:ad:75:b2:
da:e8:4f:f8:4f:5b:06:21:15:f6:8a:f9:17:45:8e:
19:e9:93:55:88:7d:68:8d:69:92:e7:e0:58:d6:5f:
b9:88:1c:1b:c3:69:37:94:fb:3c:e0:2b:4c:da:1e:
36:c7:93:f6:32:5a:d3:73:66:3d:7a:f9:24:55:96:
3d:e1:52:a6:7f:b8:3c:57:54:10:aa:04:32:8c:c4:
b9:68:ff:75:23:71:d2:00:7e:ad:d2:8e:8e:10:c3:
d8:89:40:49:b6:48:4e:44:ca:99:5c:25:25:83:11:
cd:6a:1b:03:b6:5c:a3:da:69:f1:f4:26:6f:22:ab:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:76:5B:47:F9:57:4C:0F:64:12:64:EF:AA:1C:28:C3:0C:E0:CC
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:35:17:72:3d:ef:4f:7c:61:df:83:0c:dc:19:4d:3e:c9:
2b:33:e0:59:6d:9a:7e:09:fa:dd:7e:02:15:28:0f:10:e5:10:
73:24:40:43:12:dd:ea:6c:f1:75:cd:f9:ea:05:8e:b7:69:46:
d8:59:72:90:2d:72:af:e4:4c:e0:47:0d:70:9a:81:ba:3b:f1:
87:4d:4c:46:f7:d4:15:1e:32:42:28:1e:6b:55:60:1a:45:70:
ea:a8:31:e3:45:21:30:a9:e2:ad:e3:fe:6d:30:68:14:3b:7d:
47:8f:ce:c3:c7:cf:80:76:92:ef:8b:3e:3a:8e:20:6d:c1:d5:
08:b1:35:aa:d5:cf:d3:17:4d:72:48:2d:46:ca:b6:41:4a:87:
f4:51:f7:39:43:39:21:13:9d:0b:1e:28:06:83:31:ed:a4:24:
c7:90:93:a6:84:58:d7:1c:d6:b1:97:7c:cb:d3:98:2c:bc:48:
23:40:25:9b:99:0a:39:8e:51:e5:9d:db:2c:54:28:8b:b5:90:
7a:55:65:2f:f9:12:22:53:8d:4a:f4:a4:2b:d5:0d:51:db:10:
29:ab:67:57:f6:72:ed:ff:18:86:a8:d6:35:5f:5d:6d:93:09:
e3:5a:03:96:10:78:3e:8f:97:3a:0e:ac:9e:56:b8:e5:f7:d7:
bb:0e:31:fd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNdz7sT08pRA2dFpLU4/oLWDrxSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx
ZTAxNzYwODAeFw0yNjExMTUwMjUwMTVaFw0yNjExMTYwMzE2MTVaMDMxMTAvBgNV
BAMTKDBCQTg3NjVCNDdGOTU3NEMwRjY0MTI2NEVGQUExQzI4QzMwQ0UwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2lN5v3KmZKreXEoVjY/ZXvux
nNO+zQwglsOnLRpAdgLqcZa0aP9XbLocoiNl5ogKzs6ooYVilS9322MQDGvOsQ6k
JNqIxqXHnDPYkZC44YLPnMDlpHKHPjMXI5qlCtzCHaE1tqryLYg3ICzjPXild07W
ZVJUwyiUqRQQPIUslpqYDa11stroT/hPWwYhFfaK+RdFjhnpk1WIfWiNaZLn4FjW
X7mIHBvDaTeU+zzgK0zaHjbHk/YyWtNzZj16+SRVlj3hUqZ/uDxXVBCqBDKMxLlo
/3UjcdIAfq3Sjo4Qw9iJQEm2SE5EyplcJSWDEc1qGwO2XKPaafH0Jm8iqyG/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUC6h2W0f5V0wPZBJk76ocKMMM4MwwHwYDVR0j
BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj
ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0
QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i
ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5
Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNo1F3I97098Yd+DDNwZ
TT7JKzPgWW2afgn63X4CFSgPEOUQcyRAQxLd6mzxdc356gWOt2lG2FlykC1yr+RM
4EcNcJqBujvxh01MRvfUFR4yQigea1VgGkVw6qgx40UhMKnireP+bTBoFDt9R4/O
w8fPgHaS74s+Oo4gbcHVCLE1qtXP0xdNckgtRsq2QUqH9FH3OUM5IROdCx4oBoMx
7aQkx5CTpoRY1xzWsZd8y9OYLLxII0Alm5kKOY5R5Z3bLFQoi7WQelVlL/kSIlON
SvSkK9UNUdsQKatnV/Zy7f8YhqjWNV9dbZMJ41oDlhB4Po+XOg6snla45ffXuw4x
/Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:26 2026 by rpki-client