$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: 8tzLtVCmtP4wW7dvKCFtZOoO4tVv72QVGGoFctF7kXk= Subject key identifier: 89:09:B7:75:1B:AA:17:B2:39:87:15:F8:DB:E7:84:5E:AC:47:D8:40 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 0D54E13827CEE11AC07B3E939B46FDF84417E31A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 013B Signing time: Mon 02 Mar 2026 00:20:47 +0000 Manifest this update: Mon 02 Mar 2026 00:15:47 +0000 Manifest next update: Tue 03 Mar 2026 01:21:47 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: YqywcJFPJx1YqnI9HiqZRAmviDhgErfal52I6wqgTKU=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: hR947RLO80MjAy1fUiecS1oEpdE+fjwemP68Afa7Bvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:54:e1:38:27:ce:e1:1a:c0:7b:3e:93:9b:46:fd:f8:44:17:e3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Mar 2 00:15:47 2026 GMT Not After : Mar 3 01:21:47 2026 GMT Subject: CN=8909B7751BAA17B2398715F8DBE7845EAC47D840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:67:71:f4:03:a6:8c:11:49:e0:27:58:fb: bc:e7:2d:66:66:d0:66:77:3b:9f:b7:8f:7c:15:5d: e5:18:28:cf:78:19:7d:39:dc:ca:d9:6c:c1:3d:50: 54:0c:05:bb:16:a2:4a:32:73:d3:38:ed:af:ee:f3: ad:ff:d2:c8:97:a3:08:71:e2:62:7f:54:15:f6:cb: fe:c3:45:89:85:ac:ee:bc:68:e7:58:87:81:b9:41: 06:33:a5:34:65:6b:32:01:6b:ec:09:1b:a7:9b:e4: 3b:0f:30:69:c6:f1:28:f8:57:4f:a7:4d:bb:6b:22: 81:52:bc:a7:b5:c7:59:a7:fc:7b:4e:c8:7f:60:0e: 45:3c:b1:59:cf:dd:17:63:aa:a0:db:b0:5c:35:f9: db:58:2c:df:7a:55:38:7a:13:3f:8e:09:30:a6:f3: ba:2c:41:ef:a7:3d:f1:38:06:aa:3e:1f:93:64:5a: d5:0e:f7:94:e2:cf:fa:79:50:f6:d8:c9:99:a0:6b: 67:a9:67:3c:67:c1:79:30:b3:41:c6:7f:6b:51:c5: 7a:cf:3a:a2:54:69:90:c2:2f:ae:28:8b:d1:2a:ec: c7:73:bd:45:7d:d5:f0:34:3a:b4:bb:b2:1d:b4:a0: ac:27:3e:a0:b4:92:a5:ae:2d:b3:20:e8:f3:dd:76: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:B7:75:1B:AA:17:B2:39:87:15:F8:DB:E7:84:5E:AC:47:D8:40 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:be:bd:3f:67:73:82:08:c9:05:54:77:f1:5c:52:8a:86:96: 39:ea:fa:e8:9c:98:e3:34:55:9e:83:4c:bc:61:07:4f:f1:13: 15:af:0e:12:20:b0:b7:24:6e:82:81:b4:a3:6d:df:54:f5:b1: 76:97:e8:75:63:e7:69:cd:50:b7:54:ec:27:74:e2:e6:a9:f7: fb:ba:cf:44:7b:36:4a:86:02:5d:97:63:7a:60:7f:d6:41:99: 51:b3:35:49:bb:c6:2a:6a:00:fb:58:2d:cb:1d:88:f5:05:73: f7:66:2a:d0:8a:f5:13:d3:c1:2d:91:f6:a7:29:6c:e4:85:d0: 34:22:f8:ad:74:a1:77:c2:ba:3c:de:92:ca:c9:2c:ae:cc:a7: 5e:a7:b2:47:da:5c:0f:fa:b1:d7:91:d8:95:5b:f8:bc:b1:47: c8:4c:c1:83:f9:e1:73:ce:d5:17:04:73:da:93:32:a8:37:84: 90:24:25:17:22:0d:f2:b9:c6:cd:e1:f0:bd:08:a0:81:23:a2: 96:81:11:ca:7d:e9:b5:81:57:c5:3b:ae:33:c9:b3:01:90:3d: 55:dd:43:c8:a9:a4:75:e1:8e:75:a4:b8:78:56:22:3e:ca:c3: d4:c4:cc:87:a1:3a:34:dc:11:6b:4f:ce:1e:17:24:68:4d:b8: cd:37:05:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDVThOCfO4RrAez6Tm0b9+EQX4xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNjAzMDIwMDE1NDdaFw0yNjAzMDMwMTIxNDdaMDMxMTAvBgNV BAMTKDg5MDlCNzc1MUJBQTE3QjIzOTg3MTVGOERCRTc4NDVFQUM0N0Q4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSWdx9AOmjBFJ4CdY+7znLWZm 0GZ3O5+3j3wVXeUYKM94GX053MrZbME9UFQMBbsWokoyc9M47a/u863/0siXowhx 4mJ/VBX2y/7DRYmFrO68aOdYh4G5QQYzpTRlazIBa+wJG6eb5DsPMGnG8Sj4V0+n TbtrIoFSvKe1x1mn/HtOyH9gDkU8sVnP3RdjqqDbsFw1+dtYLN96VTh6Ez+OCTCm 87osQe+nPfE4Bqo+H5NkWtUO95Tiz/p5UPbYyZmga2epZzxnwXkws0HGf2tRxXrP OqJUaZDCL64oi9Eq7MdzvUV91fA0OrS7sh20oKwnPqC0kqWuLbMg6PPddkTPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiQm3dRuqF7I5hxX42+eEXqxH2EAwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3vr0/ Z3OCCMkFVHfxXFKKhpY56vronJjjNFWeg0y8YQdP8RMVrw4SILC3JG6CgbSjbd9U 9bF2l+h1Y+dpzVC3VOwndOLmqff7us9EezZKhgJdl2N6YH/WQZlRszVJu8YqagD7 WC3LHYj1BXP3ZirQivUT08EtkfanKWzkhdA0IvitdKF3wro83pLKySyuzKdep7JH 2lwP+rHXkdiVW/i8sUfITMGD+eFzztUXBHPakzKoN4SQJCUXIg3yucbN4fC9CKCB I6KWgRHKfem1gVfFO64zybMBkD1V3UPIqaR14Y51pLh4ViI+ysPUxMyHoTo03BFr T84eFyRoTbjNNwWz -----END CERTIFICATE-----Generated at Mon Mar 2 07:11:50 2026 by rpki-client