$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: uXnx3L6JQWk8XrTYT/Ly1msuJVvLrerxoUlHWPoRBAc= Subject key identifier: E9:30:00:99:28:F6:26:6A:B6:BF:0A:FE:B6:E9:99:02:32:6E:7C:84 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 4AAE5F699126ADC0EC6ACED36B25F9BFAC286D93 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 017B Signing time: Sat 18 Apr 2026 17:49:33 +0000 Manifest this update: Sat 18 Apr 2026 17:44:33 +0000 Manifest next update: Sun 19 Apr 2026 20:20:33 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: 3xp0MBJvTUmbB2c86oKxeYuuGw/bZuUNvs8PXdcb4cQ=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 20:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ae:5f:69:91:26:ad:c0:ec:6a:ce:d3:6b:25:f9:bf:ac:28:6d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Apr 18 17:44:33 2026 GMT Not After : Apr 19 20:20:33 2026 GMT Subject: CN=E930009928F6266AB6BF0AFEB6E99902326E7C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:df:95:a1:f9:de:e5:4b:b4:7f:c0:09:75: 9c:ce:ef:08:76:d9:a0:32:9e:d7:10:d2:b9:02:e2: 82:a6:ad:b9:aa:0c:16:ad:d6:df:b8:4a:bc:2a:fd: 2a:57:88:1d:85:1e:77:a5:66:3d:d6:04:af:cd:62: e1:c8:84:20:78:83:fe:f0:13:c4:c1:f7:c6:78:f2: 01:1d:45:8a:b0:16:ef:01:76:bb:d4:3d:af:ea:79: 6e:a1:f0:b1:4c:51:91:91:ca:0d:7c:ee:67:5f:b4: ac:88:d1:37:34:61:ea:cc:1b:3f:35:65:b9:d1:83: 76:e1:4d:05:c5:20:70:91:06:69:7a:fe:5c:67:56: 25:bc:ce:53:90:d0:04:01:ed:12:60:ae:bd:6e:88: 2b:ff:28:74:6b:e3:cd:ee:34:d5:f2:c4:e0:87:63: 35:da:b9:2a:3f:de:81:c0:c5:58:66:60:03:b3:47: 01:ce:dc:25:ce:58:f0:9a:e6:b4:32:c6:dc:a4:62: 33:c4:5a:5e:3c:2c:f3:c6:e6:33:4d:0b:7e:f4:45: 50:f4:da:6e:fb:3c:e7:27:f4:8f:7d:16:1a:92:a4: 6e:cc:7d:ce:6a:9e:f5:9e:68:70:89:a7:85:9b:47: 5f:ca:c4:25:0e:17:d0:f5:a6:4c:5f:5d:1d:14:d1: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:00:99:28:F6:26:6A:B6:BF:0A:FE:B6:E9:99:02:32:6E:7C:84 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:aa:7a:32:f5:d7:a6:9c:a5:56:85:81:02:92:9f:2f:5c: db:fa:aa:40:70:cc:4d:82:2a:5c:7c:4e:48:92:ad:1e:28:c9: e1:cf:30:14:00:25:e4:54:ae:ea:e6:b4:34:74:93:50:ac:ab: 2d:ba:d6:97:98:f4:36:a8:39:55:d4:b1:98:72:c1:6f:e0:de: 73:a0:09:08:0f:61:93:60:a2:a6:52:e5:d6:97:54:96:91:52: 40:2c:9d:28:d0:1d:2d:bd:14:44:de:e3:0f:23:b3:9e:86:06: dc:48:8b:89:de:40:d6:e4:ca:7f:90:6d:00:50:b4:31:74:b9: 7c:a0:51:3e:2e:4b:01:d0:ad:e6:d4:d1:c0:46:3b:49:4e:bf: f7:bd:a6:47:ff:d0:ea:2b:f4:da:cf:ea:d5:02:9e:e2:78:c1: 1a:6b:be:ba:e5:ac:32:cb:73:01:56:24:8a:5e:64:a1:c2:1e: fd:e1:04:bd:06:d1:e2:e6:86:8d:08:9a:eb:b2:67:4b:f0:dd: 74:bd:0d:47:e4:6b:1c:ed:dc:19:b2:f7:63:0b:d9:46:bb:0f: bd:90:34:d1:1c:f3:48:4a:13:ed:fd:6d:5b:09:5b:cf:37:43: 82:2e:b0:5e:50:5e:cb:1b:df:8d:68:dd:9d:a3:8e:cf:0a:f0: d4:e1:c0:65 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSq5faZEmrcDsas7TayX5v6wobZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjA0MTgxNzQ0MzNaFw0yNjA0MTkyMDIwMzNaMDMxMTAvBgNV BAMTKEU5MzAwMDk5MjhGNjI2NkFCNkJGMEFGRUI2RTk5OTAyMzI2RTdDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kd+Vofne5Uu0f8AJdZzO7wh2 2aAyntcQ0rkC4oKmrbmqDBat1t+4Srwq/SpXiB2FHnelZj3WBK/NYuHIhCB4g/7w E8TB98Z48gEdRYqwFu8BdrvUPa/qeW6h8LFMUZGRyg187mdftKyI0Tc0YerMGz81 ZbnRg3bhTQXFIHCRBml6/lxnViW8zlOQ0AQB7RJgrr1uiCv/KHRr483uNNXyxOCH YzXauSo/3oHAxVhmYAOzRwHO3CXOWPCa5rQyxtykYjPEWl48LPPG5jNNC370RVD0 2m77POcn9I99FhqSpG7Mfc5qnvWeaHCJp4WbR1/KxCUOF9D1pkxfXR0U0UQHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6TAAmSj2Jmq2vwr+tumZAjJufIQwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMxKp6 MvXXppylVoWBApKfL1zb+qpAcMxNgipcfE5Ikq0eKMnhzzAUACXkVK7q5rQ0dJNQ rKstutaXmPQ2qDlV1LGYcsFv4N5zoAkID2GTYKKmUuXWl1SWkVJALJ0o0B0tvRRE 3uMPI7OehgbcSIuJ3kDW5Mp/kG0AULQxdLl8oFE+LksB0K3m1NHARjtJTr/3vaZH /9DqK/Taz+rVAp7ieMEaa7665awyy3MBViSKXmShwh794QS9BtHi5oaNCJrrsmdL 8N10vQ1H5Gsc7dwZsvdjC9lGuw+9kDTRHPNIShPt/W1bCVvPN0OCLrBeUF7LG9+N aN2do47PCvDU4cBl -----END CERTIFICATE-----Generated at Sun Apr 19 12:51:17 2026 by rpki-client