$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: WktOUhHmWThbs0bgR828xZcnWqLaO+G2I6Hf4RiMl4I= Subject key identifier: DB:87:D1:F0:B1:29:DA:E8:7D:E8:F8:C2:B5:71:EF:53:E2:F7:27:03 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 5FF2375D56B9CC483FBA1DCD74392F81ED45F5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 04B3 Signing time: Mon 02 Mar 2026 04:48:20 +0000 Manifest this update: Mon 02 Mar 2026 04:43:20 +0000 Manifest next update: Tue 03 Mar 2026 07:45:20 +0000 Files and hashes: 1: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 3: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: DoHbMrqmIqAl2ZzuUBJH/zvWkEmXNXG+xNEpv6OWfNM=) 4: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:37:5d:56:b9:cc:48:3f:ba:1d:cd:74:39:2f:81:ed:45:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Mar 2 04:43:20 2026 GMT Not After : Mar 3 07:45:20 2026 GMT Subject: CN=DB87D1F0B129DAE87DE8F8C2B571EF53E2F72703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2d:5c:28:46:28:40:67:91:18:c4:a9:ed:8d: 88:c5:e4:80:2c:c8:03:a0:2a:e5:2f:f0:12:08:f5: 23:6d:b6:94:54:c4:1d:b1:7b:e3:e6:7d:a0:42:bc: ce:de:f5:b4:87:48:e1:e5:b3:4e:f9:56:28:77:85: a0:ad:5d:0b:3f:b5:c7:d6:18:88:8e:69:2c:fa:3e: 5f:73:07:99:c0:a1:ee:a9:85:23:15:9f:7b:ea:2e: aa:95:5d:61:b2:90:48:80:8a:d4:10:95:ca:de:dd: 5a:f0:d6:c3:59:be:05:26:6d:c6:94:93:c9:eb:df: 78:4c:4d:fa:3d:ba:d6:f6:b1:4d:71:ba:43:2b:50: 67:d5:cf:cb:6c:7a:a5:8b:64:6e:8b:20:80:61:b6: e7:b2:d6:fa:20:c9:a5:c0:30:8e:ab:5c:4c:a3:0c: fb:3c:05:ec:d7:5d:a2:0c:ac:78:27:73:8c:af:05: 1b:4a:75:44:e3:65:ba:ef:49:30:65:02:d5:8c:05: 1c:a9:45:6c:46:e0:0b:e2:73:eb:e6:da:9f:ab:94: 95:47:f1:fe:eb:51:97:9e:27:66:45:bb:56:4d:4c: ae:61:4b:cc:ad:50:58:ef:05:80:2a:1c:64:cb:b0: 09:56:db:de:a6:da:18:5a:41:fe:53:e0:da:89:04: b0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:87:D1:F0:B1:29:DA:E8:7D:E8:F8:C2:B5:71:EF:53:E2:F7:27:03 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:71:c2:06:d0:31:73:f2:e2:f1:c9:74:72:73:64:9b:08: c7:a2:d5:50:91:47:36:35:75:d5:a6:59:c6:6b:d6:0e:33:33: d1:b0:71:ea:13:26:40:39:cd:4b:e5:a7:fb:b9:a2:a4:6a:7d: 32:c2:18:2a:3b:cf:4f:42:71:00:ea:ec:3c:a2:65:70:dc:a3: ba:4a:ce:a1:a7:72:71:f4:f7:e1:a9:e3:bb:4e:36:36:c1:88: f0:cc:bc:a5:30:08:b8:28:11:61:73:da:82:37:c7:57:eb:29: 0a:50:8a:17:e7:67:6c:8c:87:4d:e9:10:6a:d9:12:27:48:e3: 83:e3:09:45:58:d7:1a:39:8f:1c:51:9d:48:04:e5:b2:e5:39: 3c:17:2d:70:c3:69:c4:aa:f4:ce:1a:ea:1a:3b:d8:72:d1:30: b8:06:4d:62:ec:79:8e:ef:84:2f:24:07:6c:c2:7e:b0:39:d6: f5:21:f2:21:76:86:0d:c9:ac:f5:71:9e:26:18:d6:a6:dc:49: 03:dd:b2:3d:bd:33:e5:d9:33:bc:9a:f6:01:ef:20:98:11:92: 62:d6:9e:0f:a5:08:f5:2e:00:35:bc:d1:59:d1:69:48:a1:e5: e4:66:6f:2d:3a:fb:d5:e6:f5:0e:9f:5f:03:d6:f0:62:d2:d4: 69:35:07:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX/I3XVa5zEg/uh3NdDkvge1F9cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjAzMDIwNDQzMjBaFw0yNjAzMDMwNzQ1MjBaMDMxMTAvBgNV BAMTKERCODdEMUYwQjEyOURBRTg3REU4RjhDMkI1NzFFRjUzRTJGNzI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoLVwoRihAZ5EYxKntjYjF5IAs yAOgKuUv8BII9SNttpRUxB2xe+PmfaBCvM7e9bSHSOHls075Vih3haCtXQs/tcfW GIiOaSz6Pl9zB5nAoe6phSMVn3vqLqqVXWGykEiAitQQlcre3Vrw1sNZvgUmbcaU k8nr33hMTfo9utb2sU1xukMrUGfVz8tseqWLZG6LIIBhtuey1vogyaXAMI6rXEyj DPs8BezXXaIMrHgnc4yvBRtKdUTjZbrvSTBlAtWMBRypRWxG4Avic+vm2p+rlJVH 8f7rUZeeJ2ZFu1ZNTK5hS8ytUFjvBYAqHGTLsAlW296m2hhaQf5T4NqJBLAPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU24fR8LEp2uh96PjCtXHvU+L3JwMwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW5xwgbQMXPy4vHJdHJz ZJsIx6LVUJFHNjV11aZZxmvWDjMz0bBx6hMmQDnNS+Wn+7mipGp9MsIYKjvPT0Jx AOrsPKJlcNyjukrOoadycfT34anju042NsGI8My8pTAIuCgRYXPagjfHV+spClCK F+dnbIyHTekQatkSJ0jjg+MJRVjXGjmPHFGdSATlsuU5PBctcMNpxKr0zhrqGjvY ctEwuAZNYux5ju+ELyQHbMJ+sDnW9SHyIXaGDcms9XGeJhjWptxJA92yPb0z5dkz vJr2Ae8gmBGSYtaeD6UI9S4ANbzRWdFpSKHl5GZvLTr71eb1Dp9fA9bwYtLUaTUH RA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:59:08 2026 by rpki-client