$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: kDeE5U/tIzb1Gig6/V160L6AZaC5jpgHXrMH/BLC8Q8= Subject key identifier: 1F:AC:73:18:14:15:A5:07:8F:44:CD:EA:35:57:70:73:AE:5E:BD:7D Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 4D2A242EF27538CD3F9D2337B87F29046987BE9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 05C5 Signing time: Sun 20 Sep 2026 15:45:44 +0000 Manifest this update: Sun 20 Sep 2026 15:40:44 +0000 Manifest next update: Mon 21 Sep 2026 18:19:44 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e20313937353238.roa (hash: Ebzg/MjqohTGeKwDaLunRaMiyaIF5yHH/QdRNJ9uULY=) 2: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: VPxXAfnyDBYtCdJZVUe2mTV9wegSkCH8F7xYezfoz+E=) 3: 34352e3134362e3136302e302f32332d3233203d3e20323133303031.roa (hash: J60EsWIeYN4a4peosqQOm0lgQhTjR5G5qC6zOtaqQT0=) 4: 34352e3134362e3136332e302f32342d3234203d3e203338313336.roa (hash: 2UoYMc+T3VQ81nJuKfdlMgklJP2lCeK6kVAd1Zef4f8=) 5: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 6: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 7: 34352e3134362e3136332e302f32342d3234203d3e20343031373736.roa (hash: vOmOz2BugVIPRfW7G2v3UGhcWNCUu83kIhIIM2fnK0w=) 8: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: XTDJATGz+5Q73NiC1c/IBrS41alzR60OgjqgVHPK5mY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 18:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2a:24:2e:f2:75:38:cd:3f:9d:23:37:b8:7f:29:04:69:87:be:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Sep 20 15:40:44 2026 GMT Not After : Sep 21 18:19:44 2026 GMT Subject: CN=1FAC73181415A5078F44CDEA35577073AE5EBD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:63:26:a4:7d:ad:ad:04:3c:bd:85:c0:e0: 5e:7a:c3:0c:22:f7:de:25:86:68:8b:26:a4:46:f6: b2:5f:ac:e3:39:51:cb:38:1a:36:e0:c0:69:77:c6: e9:33:3f:4a:5e:eb:50:a2:4b:f0:2f:a2:89:66:0b: 16:53:0c:63:f4:31:e5:41:7e:ba:fb:d5:44:75:45: f1:10:3d:c9:7f:fb:ad:ab:5e:91:d6:83:08:1e:49: 11:61:6c:e0:fe:99:45:8d:c3:d6:81:9e:a0:ba:e6: 98:68:25:5e:73:9c:4c:35:ad:7a:a1:47:62:3f:d0: e8:17:0e:80:1f:ce:b7:39:c1:3f:3f:16:99:b6:33: 60:cf:72:73:02:3a:ef:5a:9f:b2:d2:c0:83:44:bf: 86:fc:ef:c5:fc:99:11:b3:20:50:a9:29:33:d9:b9: c2:b2:7b:16:c7:15:c7:18:8e:74:96:3e:3b:04:20: 47:70:1d:e4:87:a1:e8:0a:45:37:ef:d9:b9:e7:7a: 3a:79:9c:92:41:4b:a0:6c:0a:6f:26:22:fc:3e:8e: 14:fd:17:f3:32:e4:aa:34:b6:5b:d5:03:8d:23:4a: f1:99:fd:2b:d7:1f:86:a6:a6:0d:c3:d4:8a:f7:88: d0:34:45:3d:9c:6f:61:15:a6:8e:bf:80:87:ab:e5: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:73:18:14:15:A5:07:8F:44:CD:EA:35:57:70:73:AE:5E:BD:7D X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ec:d0:d8:02:18:d1:e9:e4:5c:a4:df:3d:05:57:36:4c:4e: 45:65:c5:6f:37:ac:a7:0c:f6:f6:62:f2:da:9b:9a:41:b9:6c: 1b:2c:1b:84:68:c3:0f:8b:26:e5:f9:34:00:80:d0:7c:c0:29: e8:66:18:65:0a:14:01:ce:23:09:52:65:80:9f:05:74:02:13: aa:b0:c1:38:df:18:a9:ea:e9:74:b3:4e:70:eb:e1:05:6c:d5: 31:68:9a:2f:d8:b5:de:59:54:19:8a:d8:dd:b6:aa:5c:89:b5: 82:45:ec:62:0f:f9:0f:58:c8:5c:d0:5f:58:0c:0c:64:f9:59: e7:4a:9c:1b:ea:e3:1c:71:50:1b:35:c7:64:9b:d2:5f:ee:c9: ea:e5:a8:01:8d:39:4d:13:a5:b8:93:f2:7d:e2:f8:90:28:49: b7:42:66:1c:dd:26:4e:53:2d:91:29:aa:32:92:5b:da:bb:ba: ea:1a:fa:68:f8:bd:6e:0b:60:6e:57:f9:d0:94:ba:6e:02:aa: 1b:72:64:97:99:bb:a4:39:d3:b8:e4:0c:17:14:86:42:f1:7b: b3:35:f5:6d:b0:cf:97:32:20:88:38:97:db:67:d5:bf:97:23: dc:1c:26:61:e5:2f:81:dd:dd:a0:a6:90:51:a9:93:cd:22:53: 52:9b:8f:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTSokLvJ1OM0/nSM3uH8pBGmHvpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA5MjAxNTQwNDRaFw0yNjA5MjExODE5NDRaMDMxMTAvBgNV BAMTKDFGQUM3MzE4MTQxNUE1MDc4RjQ0Q0RFQTM1NTc3MDczQUU1RUJEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVmMmpH2trQQ8vYXA4F56wwwi 994lhmiLJqRG9rJfrOM5Ucs4GjbgwGl3xukzP0pe61CiS/AvoolmCxZTDGP0MeVB frr71UR1RfEQPcl/+62rXpHWgwgeSRFhbOD+mUWNw9aBnqC65phoJV5znEw1rXqh R2I/0OgXDoAfzrc5wT8/Fpm2M2DPcnMCOu9an7LSwINEv4b878X8mRGzIFCpKTPZ ucKyexbHFccYjnSWPjsEIEdwHeSHoegKRTfv2bnnejp5nJJBS6BsCm8mIvw+jhT9 F/My5Ko0tlvVA40jSvGZ/SvXH4ampg3D1Ir3iNA0RT2cb2EVpo6/gIer5eSVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH6xzGBQVpQePRM3qNVdwc65evX0wHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+zQ2AIY0enkXKTfPQVX NkxORWXFbzespwz29mLy2puaQblsGywbhGjDD4sm5fk0AIDQfMAp6GYYZQoUAc4j CVJlgJ8FdAITqrDBON8YqerpdLNOcOvhBWzVMWiaL9i13llUGYrY3baqXIm1gkXs Yg/5D1jIXNBfWAwMZPlZ50qcG+rjHHFQGzXHZJvSX+7J6uWoAY05TROluJPyfeL4 kChJt0JmHN0mTlMtkSmqMpJb2ru66hr6aPi9bgtgblf50JS6bgKqG3Jkl5m7pDnT uOQMFxSGQvF7szX1bbDPlzIgiDiX22fVv5cj3BwmYeUvgd3doKaQUamTzSJTUpuP Gg== -----END CERTIFICATE-----Generated at Mon Sep 21 10:42:25 2026 by rpki-client