$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: HkhpIrX0aL1sYEWx8pQaDJmZNiZcZ12y8A1a1QBaWUo= Subject key identifier: F9:6C:31:F6:0F:AF:95:54:77:A0:5F:11:63:39:A5:F8:DA:A1:72:8C Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 52A8E4B7FE1E84581083D49B7E49106233C394A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0397 Signing time: Mon 21 Sep 2026 17:40:46 +0000 Manifest this update: Mon 21 Sep 2026 17:35:46 +0000 Manifest next update: Tue 22 Sep 2026 21:20:46 +0000 Files and hashes: 1: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: LH3qwxx3cFGEc2nT11lVGioc4VsEH2u028n8n+GZTy8=) 3: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: ja3+U57yAGxxGr5Um51OCVQtaQ7uJbanl/ykt0EuLwg=) 4: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: ifyEdtBW0BhdKWJrpJ6bYfBeNzyrtZtj9JtftvgAsco=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: ghBFXodZrxcoDfs5Jc1khBo/kxzwhA68hA1uaGY9sOM=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323139313339.roa (hash: 1Vl9oWFR11Yoo0iTLsVc/HDIQkucPHAPz/peYfql2NQ=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a8:e4:b7:fe:1e:84:58:10:83:d4:9b:7e:49:10:62:33:c3:94:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Sep 21 17:35:46 2026 GMT Not After : Sep 22 21:20:46 2026 GMT Subject: CN=F96C31F60FAF955477A05F116339A5F8DAA1728C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:11:6a:0c:fe:0d:9c:9f:db:42:1a:6c:26: 86:05:8c:fe:3f:ec:17:b8:74:65:73:17:cb:2a:0a: ee:67:55:0b:7d:5c:74:9d:4d:3a:b6:27:83:de:2f: 3f:2a:26:5b:af:1c:1e:cb:20:1a:33:18:db:c6:83: fd:55:f7:b4:19:69:75:64:98:ee:66:75:a2:12:3a: 3f:a0:ef:57:15:cf:43:07:b9:82:be:99:d2:f8:95: 44:c0:f2:83:9e:75:ac:67:ea:c3:d1:25:e3:8c:bc: 0a:6a:d1:da:95:32:3e:29:7a:f6:d5:8f:00:c7:aa: e7:48:cd:78:b7:5c:ae:d1:16:fe:cc:87:51:11:09: 95:67:c7:2c:ca:93:30:20:43:d0:cd:31:88:3c:40: 16:1c:68:de:6e:15:e3:09:e7:86:10:f3:2c:8a:a3: 0c:43:8c:42:39:cd:c1:cc:06:dc:27:09:b4:6d:2d: e2:0b:b7:f7:01:74:05:dd:96:fb:98:00:cb:d0:bd: d5:f1:92:7c:73:60:d2:6e:20:c4:a4:25:eb:dd:e2: 88:11:bf:ab:08:f3:91:81:fd:49:ae:e5:77:fd:50: f9:a6:48:d3:67:7a:17:73:c2:13:0d:af:e5:2f:c0: a8:3f:a9:19:89:d8:7c:91:c8:65:0c:eb:aa:d5:44: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:31:F6:0F:AF:95:54:77:A0:5F:11:63:39:A5:F8:DA:A1:72:8C X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:78:cf:67:e8:8d:8d:1b:41:f4:6c:77:39:d1:bc:bc:8c:bf: ea:8f:20:d6:4f:b4:e0:b7:2d:2f:01:12:0a:e5:70:cd:21:bf: 73:70:50:8e:c4:f3:51:d5:ad:fe:73:31:cc:d1:29:1c:72:1f: 67:bd:c8:fa:49:0a:6b:fc:12:36:75:30:35:3f:b4:86:65:80: 08:2f:6e:ac:4d:c5:0a:83:75:6d:9c:42:01:4f:62:b4:8b:01: df:8e:0e:d0:f1:6e:5a:9e:96:5d:00:c2:41:82:d3:b9:f1:74: 41:47:8b:a1:ce:af:bd:cc:1d:9f:89:65:8d:63:fc:e4:8e:c3: 48:7b:48:4f:a6:e1:19:fc:96:72:0e:a1:0f:11:54:34:3c:68: 27:57:58:e6:8f:51:29:c2:ab:90:19:79:4d:a4:ec:0e:e5:6a: fd:19:2a:8b:43:7e:f6:30:5d:81:09:1c:ef:e8:b9:57:83:d2: a6:e7:38:86:f4:d8:84:ad:7c:76:60:52:bb:1f:37:6c:ee:76: 4b:18:11:09:ba:78:f9:e8:71:f6:68:f0:0f:48:93:0d:e0:51: 14:1f:99:c3:0a:87:7b:d2:70:d0:0a:6c:fb:fc:f6:22:04:68: de:55:1d:21:36:62:78:f4:40:d0:76:68:72:fe:82:57:7f:78: 61:55:05:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUqjkt/4ehFgQg9SbfkkQYjPDlKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA5MjExNzM1NDZaFw0yNjA5MjIyMTIwNDZaMDMxMTAvBgNV BAMTKEY5NkMzMUY2MEZBRjk1NTQ3N0EwNUYxMTYzMzlBNUY4REFBMTcyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChiBFqDP4NnJ/bQhpsJoYFjP4/ 7Be4dGVzF8sqCu5nVQt9XHSdTTq2J4PeLz8qJluvHB7LIBozGNvGg/1V97QZaXVk mO5mdaISOj+g71cVz0MHuYK+mdL4lUTA8oOedaxn6sPRJeOMvApq0dqVMj4pevbV jwDHqudIzXi3XK7RFv7Mh1ERCZVnxyzKkzAgQ9DNMYg8QBYcaN5uFeMJ54YQ8yyK owxDjEI5zcHMBtwnCbRtLeILt/cBdAXdlvuYAMvQvdXxknxzYNJuIMSkJevd4ogR v6sI85GB/Umu5Xf9UPmmSNNnehdzwhMNr+UvwKg/qRmJ2HyRyGUM66rVRIgBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+Wwx9g+vlVR3oF8RYzml+NqhcowwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3jPZ+iNjRtB9Gx3OdG8 vIy/6o8g1k+04LctLwESCuVwzSG/c3BQjsTzUdWt/nMxzNEpHHIfZ73I+kkKa/wS NnUwNT+0hmWACC9urE3FCoN1bZxCAU9itIsB344O0PFuWp6WXQDCQYLTufF0QUeL oc6vvcwdn4lljWP85I7DSHtIT6bhGfyWcg6hDxFUNDxoJ1dY5o9RKcKrkBl5TaTs DuVq/Rkqi0N+9jBdgQkc7+i5V4PSpuc4hvTYhK18dmBSux83bO52SxgRCbp4+ehx 9mjwD0iTDeBRFB+ZwwqHe9Jw0Aps+/z2IgRo3lUdITZiePRA0HZocv6CV394YVUF zQ== -----END CERTIFICATE-----Generated at Mon Sep 21 21:58:13 2026 by rpki-client