$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: RAzCm/eU2ZcZGRT7qgEQ+jIHnoTDwIdpdtcDWM1TZhU= Subject key identifier: CD:76:3E:32:64:C3:97:AC:80:51:1E:E8:6A:0F:42:9D:AD:50:7C:87 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 7FB7A8292936E972AF24C09FDA9982FAC8E04529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 04F1 Signing time: Fri 17 Apr 2026 03:14:42 +0000 Manifest this update: Fri 17 Apr 2026 03:09:42 +0000 Manifest next update: Sat 18 Apr 2026 05:46:42 +0000 Files and hashes: 1: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: hw28b1X68e6A/FAH7BsiNYDYErYJeMKtUee5QK3qpqY=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM=) 4: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: dEyrefnnKSg66lfx459XJ2SroTggGi4go9Zp+DRZdvU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:a8:29:29:36:e9:72:af:24:c0:9f:da:99:82:fa:c8:e0:45:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Apr 17 03:09:42 2026 GMT Not After : Apr 18 05:46:42 2026 GMT Subject: CN=CD763E3264C397AC80511EE86A0F429DAD507C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:9b:81:24:a1:0e:83:34:46:17:56:80:39: e1:7e:32:d9:27:5d:14:ef:13:82:44:f0:ff:49:15: 9b:b2:f7:ce:66:08:65:1d:c7:00:de:73:7d:e2:b2: 2b:d2:3d:21:92:e5:41:ea:65:cd:bd:eb:9b:a7:30: d3:fa:11:87:e7:2f:c9:7a:c7:96:6f:ba:34:8f:b2: a3:b8:ae:f2:f6:73:3f:fb:90:59:9f:f3:21:f1:3c: f0:23:af:8a:87:bd:9d:e9:7c:59:fe:ba:d1:57:f1: c3:2d:42:ed:78:4f:ad:57:6d:ca:9a:43:ed:2b:0d: 47:13:7b:9f:be:bb:c0:8b:fa:71:67:b2:ba:26:b4: 7a:b5:4b:51:01:a7:19:d8:63:fe:21:c9:99:80:69: f7:17:63:a6:04:8d:53:13:6c:21:e0:b4:e2:1d:6f: c1:1c:05:f6:cf:21:1e:b3:ee:f5:2a:e5:74:eb:65: 2f:13:9c:3a:9e:52:69:9a:d1:c9:11:65:e5:83:11: c9:70:27:2f:d6:78:ca:7d:fd:6e:18:e8:a9:8d:c0: 27:29:c5:19:01:02:c1:dd:50:06:c9:1d:12:cf:25: d5:a2:b3:0a:35:14:d3:d2:d6:55:10:bb:d6:63:44: c8:50:a6:32:4e:58:f3:b6:13:55:df:7e:fc:6b:ba: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:3E:32:64:C3:97:AC:80:51:1E:E8:6A:0F:42:9D:AD:50:7C:87 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:20:5c:9a:dd:50:67:03:2f:e8:17:ce:d1:7f:e5:38:1f:7b: 81:4b:6e:ec:28:bf:82:b2:73:fc:9d:3b:aa:17:fb:83:89:0e: 45:f6:67:ad:09:85:ca:31:81:57:55:b0:34:51:47:88:74:32: 05:0f:cb:fb:bb:bf:b4:e6:0d:8a:77:d8:58:57:1f:a2:0e:a2: 30:4c:91:1b:a7:86:d3:81:b2:37:e2:12:1f:24:71:dd:c5:35: 5b:ce:63:06:c6:4d:90:8f:2b:a7:78:8e:10:95:38:03:57:c0: f2:ac:31:d7:ef:c5:34:50:66:90:54:39:7d:fd:4f:07:09:9c: 57:22:8e:cb:cf:c9:4f:4a:dd:aa:27:05:1b:7e:6a:8d:dd:ca: 5e:3e:b8:c9:d8:7c:38:8d:63:79:f1:6f:68:9f:7c:b9:9b:0b: 92:04:22:74:00:53:3c:3c:09:4c:1f:53:31:55:0b:fc:3f:a8: 11:57:f0:90:db:1b:a3:95:3b:8e:55:3c:65:76:dd:45:63:a2: 5d:ad:94:ee:4a:63:22:89:74:49:8d:e1:ff:2d:0d:bf:a0:a5: 1b:b5:a3:7b:84:ff:6c:29:f7:df:98:8e:8c:12:74:62:3f:d4: c5:b6:32:b1:09:6b:24:a4:0c:4f:1d:b5:ba:22:cc:19:2a:dd: 19:79:91:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf7eoKSk26XKvJMCf2pmC+sjgRSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjA0MTcwMzA5NDJaFw0yNjA0MTgwNTQ2NDJaMDMxMTAvBgNV BAMTKENENzYzRTMyNjRDMzk3QUM4MDUxMUVFODZBMEY0MjlEQUQ1MDdDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpbpuBJKEOgzRGF1aAOeF+Mtkn XRTvE4JE8P9JFZuy985mCGUdxwDec33isivSPSGS5UHqZc2965unMNP6EYfnL8l6 x5ZvujSPsqO4rvL2cz/7kFmf8yHxPPAjr4qHvZ3pfFn+utFX8cMtQu14T61Xbcqa Q+0rDUcTe5++u8CL+nFnsromtHq1S1EBpxnYY/4hyZmAafcXY6YEjVMTbCHgtOId b8EcBfbPIR6z7vUq5XTrZS8TnDqeUmma0ckRZeWDEclwJy/WeMp9/W4Y6KmNwCcp xRkBAsHdUAbJHRLPJdWiswo1FNPS1lUQu9ZjRMhQpjJOWPO2E1Xffvxruq7HAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzXY+MmTDl6yAUR7oag9Cna1QfIcwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyBcmt1QZwMv6BfO0X/l OB97gUtu7Ci/grJz/J07qhf7g4kORfZnrQmFyjGBV1WwNFFHiHQyBQ/L+7u/tOYN infYWFcfog6iMEyRG6eG04GyN+ISHyRx3cU1W85jBsZNkI8rp3iOEJU4A1fA8qwx 1+/FNFBmkFQ5ff1PBwmcVyKOy8/JT0rdqicFG35qjd3KXj64ydh8OI1jefFvaJ98 uZsLkgQidABTPDwJTB9TMVUL/D+oEVfwkNsbo5U7jlU8ZXbdRWOiXa2U7kpjIol0 SY3h/y0Nv6ClG7Wje4T/bCn335iOjBJ0Yj/UxbYysQlrJKQMTx21uiLMGSrdGXmR Og== -----END CERTIFICATE-----Generated at Fri Apr 17 06:34:42 2026 by rpki-client