$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 3F2OKOFxO/189H19Zv4QyIt6BHZ76jMvR7Bte+X5OB0= Subject key identifier: 0F:1E:31:B7:3A:8C:22:7B:50:45:0D:B8:40:A0:61:16:52:28:B9:38 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0681C6BEAADF79001EDD65D81E55B29FA6BA7B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0399 Signing time: Wed 23 Sep 2026 08:55:49 +0000 Manifest this update: Wed 23 Sep 2026 08:50:49 +0000 Manifest next update: Thu 24 Sep 2026 10:56:49 +0000 Files and hashes: 1: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 3: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: ZZlwd1Rj//451d4KeOwZPLpaH9dG9xelBxPATp2PMkg=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: ja3+U57yAGxxGr5Um51OCVQtaQ7uJbanl/ykt0EuLwg=) 5: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 6: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (hash: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:81:c6:be:aa:df:79:00:1e:dd:65:d8:1e:55:b2:9f:a6:ba:7b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Sep 23 08:50:49 2026 GMT Not After : Sep 24 10:56:49 2026 GMT Subject: CN=0F1E31B73A8C227B50450DB840A061165228B938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:e6:3e:be:08:34:32:9b:ff:1d:6a:8f:e0: 74:20:5a:eb:c8:90:1b:3f:13:d9:73:54:14:03:b0: ba:3c:c7:75:70:72:7a:2c:89:d2:16:25:be:2f:a2: f0:a1:9e:f4:33:a7:41:d3:49:0c:e5:2e:00:71:fe: 95:d5:ab:e1:0c:df:aa:ce:7e:7c:46:2b:31:ce:62: f0:16:4e:0d:31:c3:c8:47:30:e6:a8:5c:5b:cf:62: ea:ed:22:14:d0:c8:da:a3:1a:2b:ef:42:82:6d:36: b0:3c:02:ae:47:da:2a:2c:79:9a:cf:7f:d1:70:45: ec:3c:09:c4:c4:66:0a:96:ce:77:cb:77:c0:a1:ef: 2d:1a:ed:52:a2:b7:2b:c6:25:0a:95:d6:00:3a:24: 24:39:21:e1:90:9e:b9:1c:73:71:2c:4e:b0:9f:21: 63:ef:da:c2:f0:83:fd:db:14:15:ea:dd:34:f2:dc: 8a:18:13:54:ee:7d:d8:f8:40:07:d2:46:2d:0b:24: 8a:43:e5:c7:d8:20:a4:7f:74:f5:b8:69:28:46:74: 4b:2a:0a:fb:bc:36:dd:15:57:da:ef:3b:ff:2f:87: 97:ae:da:ee:1a:22:8e:36:9b:42:ad:d1:ed:8d:2d: cb:41:c8:7b:3d:9e:d3:4b:13:3c:86:09:ef:7f:b3: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1E:31:B7:3A:8C:22:7B:50:45:0D:B8:40:A0:61:16:52:28:B9:38 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:54:58:33:c5:ab:71:90:b5:e5:97:5f:32:92:49:99:43:7e: 83:6c:c3:56:92:6f:72:61:58:46:6d:cb:35:82:e5:33:be:54: 73:28:65:4b:29:2a:7c:8e:3c:a9:3a:23:25:aa:29:a1:30:92: 9f:15:fc:bf:17:ed:14:6d:e9:0f:c3:90:9b:df:6c:a5:93:41: c5:c4:1b:b2:78:71:a2:a8:de:b7:04:bb:49:37:f0:0f:a9:e2: 8d:23:74:06:f8:de:84:79:a7:30:b4:5a:bf:ef:6e:cf:18:c0: 21:ee:9b:69:3b:15:74:4e:fd:f0:cd:0d:77:66:e3:db:95:2b: e2:19:f3:d8:d3:dc:a0:fa:0a:5f:c3:6e:87:87:bb:2b:5e:f3: 9e:25:b9:0a:2c:2d:a1:17:ed:34:c2:81:4f:a1:15:f0:2a:1a: 9b:6e:e0:5c:a1:46:c2:da:cc:d5:d7:11:51:91:84:50:94:24: a1:ec:24:0d:fc:aa:62:a6:b1:e4:6e:16:f2:e2:55:45:0a:64: 90:c8:77:00:f1:d6:fe:36:bb:82:6f:65:b1:3c:b7:63:cd:91: fe:fd:34:40:03:2d:47:dc:4d:58:61:8b:5b:27:7a:d7:f9:eb: 85:2f:c9:75:cd:aa:b9:53:90:49:97:3f:39:db:54:d7:a0:b4: a3:52:6c:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBoHGvqrfeQAe3WXYHlWyn6a6e3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA5MjMwODUwNDlaFw0yNjA5MjQxMDU2NDlaMDMxMTAvBgNV BAMTKDBGMUUzMUI3M0E4QzIyN0I1MDQ1MERCODQwQTA2MTE2NTIyOEI5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8OY+vgg0Mpv/HWqP4HQgWuvI kBs/E9lzVBQDsLo8x3VwcnosidIWJb4vovChnvQzp0HTSQzlLgBx/pXVq+EM36rO fnxGKzHOYvAWTg0xw8hHMOaoXFvPYurtIhTQyNqjGivvQoJtNrA8Aq5H2ioseZrP f9FwRew8CcTEZgqWznfLd8Ch7y0a7VKityvGJQqV1gA6JCQ5IeGQnrkcc3EsTrCf IWPv2sLwg/3bFBXq3TTy3IoYE1Tufdj4QAfSRi0LJIpD5cfYIKR/dPW4aShGdEsq Cvu8Nt0VV9rvO/8vh5eu2u4aIo42m0Kt0e2NLctByHs9ntNLEzyGCe9/s3l3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDx4xtzqMIntQRQ24QKBhFlIouTgwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlRYM8WrcZC15ZdfMpJJ mUN+g2zDVpJvcmFYRm3LNYLlM75UcyhlSykqfI48qTojJaopoTCSnxX8vxftFG3p D8OQm99spZNBxcQbsnhxoqjetwS7STfwD6nijSN0BvjehHmnMLRav+9uzxjAIe6b aTsVdE798M0Nd2bj25Ur4hnz2NPcoPoKX8Nuh4e7K17zniW5CiwtoRftNMKBT6EV 8Coam27gXKFGwtrM1dcRUZGEUJQkoewkDfyqYqax5G4W8uJVRQpkkMh3APHW/ja7 gm9lsTy3Y82R/v00QAMtR9xNWGGLWyd61/nrhS/Jdc2quVOQSZc/OdtU16C0o1Js fQ== -----END CERTIFICATE-----Generated at Wed Sep 23 18:11:04 2026 by rpki-client