$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: vXBx06YfR89NiWU2lMN+WZxsh8gOBzFINUqUZDchsEo= Subject key identifier: D1:1C:56:A9:38:54:0B:75:B4:7E:ED:EB:66:9C:75:EE:45:CB:0C:38 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 05753B48176024759601292725B7520C193B309F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 02C1 Signing time: Thu 16 Apr 2026 11:09:42 +0000 Manifest this update: Thu 16 Apr 2026 11:04:42 +0000 Manifest next update: Fri 17 Apr 2026 13:58:42 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: 8/++60jg7XtzmZ45FRECeqxUVy5048XlFvcQJYMNUjo=) 2: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI=) 3: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: ttSPLNkVmnmfbB1Jg0U4OFMRv4cZWxzTg6oBluFltrk=) 4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: A0BE1ZOOcbewuD1ilOvR3JKlZ6yPgONC6M59zKeCQ+4=) 5: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: Q4yUdFFGtrq1xUVDtHn0DoNWjht0ICRHxiUX7p+xRAQ=) 6: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 7: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: WuIyFXGDgkt2cltxoxT/RYao20HHu+r0Sn5rfpjFnHA=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 13:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:75:3b:48:17:60:24:75:96:01:29:27:25:b7:52:0c:19:3b:30:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Apr 16 11:04:42 2026 GMT Not After : Apr 17 13:58:42 2026 GMT Subject: CN=D11C56A938540B75B47EEDEB669C75EE45CB0C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:97:ba:da:fe:dd:87:cd:56:b4:2d:0c:7d: 0a:16:a2:15:5f:8c:18:b2:9b:1a:9c:39:95:98:76: 9e:11:20:a8:4b:00:63:04:e0:cc:85:b2:0b:18:76: 53:f0:71:82:74:51:a3:ec:6e:54:da:8d:88:9b:f1: 0d:c2:1a:25:8c:24:37:01:d7:14:fe:2f:0b:b6:bd: 8d:5e:51:a6:c4:3e:c0:cd:01:d2:28:30:d2:c7:61: 52:a4:39:c8:76:4c:25:e9:b6:99:6c:01:aa:78:a0: a9:1e:1b:4a:bb:cf:c6:d0:7f:25:1b:9f:e7:2d:a0: 35:e4:71:15:a8:69:f3:57:f4:99:a1:2b:18:b4:89: c5:1d:f6:f5:cb:c1:be:21:d7:a9:af:3e:5e:d7:48: 38:cc:09:7c:f8:86:9c:11:52:1f:6a:dc:ef:b1:96: fc:3c:f5:ff:b2:3d:cb:44:47:e3:3a:47:d1:be:ae: ea:60:28:7e:3a:e3:7a:a1:35:30:fa:90:40:24:9f: 7e:23:bd:2e:5f:ab:d0:22:e2:3f:31:d1:52:78:6a: 22:41:84:a2:54:29:4a:a8:18:e9:67:33:bd:11:cb: 2a:f6:39:ef:75:18:de:09:98:df:70:76:c7:e2:c1: 27:df:2d:82:a0:cf:8d:30:d2:3a:80:06:b4:63:86: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:56:A9:38:54:0B:75:B4:7E:ED:EB:66:9C:75:EE:45:CB:0C:38 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e7:f0:27:9a:5c:4f:0e:0a:2e:9a:c2:98:fc:e6:b3:a7:5e: 17:87:df:22:b9:4d:ed:f4:0e:63:46:e3:0f:80:06:51:94:a3: 87:62:f7:e6:ad:78:0f:4a:d1:32:4a:dc:05:0d:e4:ae:cc:26: 43:5f:e8:26:b8:f4:c6:89:b7:79:2f:b1:ab:2b:c6:ad:12:bc: be:2b:39:d4:db:8b:e1:48:38:29:d2:2a:c7:eb:ca:81:17:f7: c8:69:a3:25:f6:0c:d0:bf:f5:d4:a1:1a:4d:85:95:62:d1:63: 88:63:7d:fe:b2:95:4d:15:71:d9:64:bb:f3:3f:9b:40:8b:48: 4a:61:7a:e5:87:92:a2:12:23:1d:ad:a5:7a:e8:1d:48:2b:e1: 06:ec:9d:cd:de:de:23:81:5f:2a:7b:ca:aa:83:46:10:67:c6: d0:d0:d6:f8:1c:44:1a:39:cf:83:aa:4a:80:05:3f:91:d0:74: 04:b2:0d:74:b8:ee:ab:8f:46:02:71:cd:f8:9c:f4:aa:66:4a: e6:34:2c:af:98:7c:a7:ff:ef:e5:40:92:89:09:44:93:48:ec: 77:f6:dc:7e:ab:af:85:7a:41:ee:31:49:84:fe:7b:12:2d:cc: 20:f9:63:a0:68:82:28:94:3f:59:a5:48:b9:ba:11:65:67:b3: 6d:66:3b:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBXU7SBdgJHWWASknJbdSDBk7MJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNjA0MTYxMTA0NDJaFw0yNjA0MTcxMzU4NDJaMDMxMTAvBgNV BAMTKEQxMUM1NkE5Mzg1NDBCNzVCNDdFRURFQjY2OUM3NUVFNDVDQjBDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiZe62v7dh81WtC0MfQoWohVf jBiymxqcOZWYdp4RIKhLAGME4MyFsgsYdlPwcYJ0UaPsblTajYib8Q3CGiWMJDcB 1xT+Lwu2vY1eUabEPsDNAdIoMNLHYVKkOch2TCXptplsAap4oKkeG0q7z8bQfyUb n+ctoDXkcRWoafNX9JmhKxi0icUd9vXLwb4h16mvPl7XSDjMCXz4hpwRUh9q3O+x lvw89f+yPctER+M6R9G+rupgKH4643qhNTD6kEAkn34jvS5fq9Ai4j8x0VJ4aiJB hKJUKUqoGOlnM70Ryyr2Oe91GN4JmN9wdsfiwSffLYKgz40w0jqABrRjhqEnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0RxWqThUC3W0fu3rZpx17kXLDDgwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOfwJ5pcTw4KLprCmPzm s6deF4ffIrlN7fQOY0bjD4AGUZSjh2L35q14D0rRMkrcBQ3krswmQ1/oJrj0xom3 eS+xqyvGrRK8vis51NuL4Ug4KdIqx+vKgRf3yGmjJfYM0L/11KEaTYWVYtFjiGN9 /rKVTRVx2WS78z+bQItISmF65YeSohIjHa2leugdSCvhBuydzd7eI4FfKnvKqoNG EGfG0NDW+BxEGjnPg6pKgAU/kdB0BLINdLjuq49GAnHN+Jz0qmZK5jQsr5h8p//v 5UCSiQlEk0jsd/bcfquvhXpB7jFJhP57Ei3MIPljoGiCKJQ/WaVIuboRZWezbWY7 fA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:48:56 2026 by rpki-client