$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: CIcO54QUGhzfU3OoNvL5VbUO/RgM4qxhBNVfCi+L9u8= Subject key identifier: FD:29:28:CF:3E:D5:3A:1C:FB:F8:42:53:A6:80:72:A9:84:1A:CA:A7 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 2BC0E2A6C2A367ADFF75AAD2A88F5BD687243ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0467 Signing time: Wed 01 Jul 2026 09:24:07 +0000 Manifest this update: Wed 01 Jul 2026 09:19:07 +0000 Manifest next update: Thu 02 Jul 2026 10:09:07 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=) 2: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 5m3ab8Y3Gf0WtIJl/YwM6qYbbiHyEFZQ/voxBqtXE9k=) 4: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c0:e2:a6:c2:a3:67:ad:ff:75:aa:d2:a8:8f:5b:d6:87:24:3a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jul 1 09:19:07 2026 GMT Not After : Jul 2 10:09:07 2026 GMT Subject: CN=FD2928CF3ED53A1CFBF84253A68072A9841ACAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:91:e2:06:c3:29:0e:5f:de:49:e7:f2:c4: f3:80:12:bd:98:71:9d:09:fd:6f:8c:2a:72:b5:63: ba:ec:c8:25:97:b0:0a:8d:bb:16:72:07:58:6a:6e: 4f:2b:66:fc:5c:74:4a:ed:48:cb:8c:d1:5f:84:b5: 3e:72:32:f7:a0:2d:cd:40:e4:d7:1c:b7:b9:b3:71: c4:7c:f7:fa:8c:bc:1f:0b:fc:23:9c:6a:ef:99:59: 72:2c:49:06:c1:82:a0:94:3f:17:92:5a:b3:81:bb: 8e:13:57:a3:39:a2:61:df:5c:48:74:24:d1:ed:21: 27:bd:68:50:a0:5c:70:c9:b0:39:e9:11:48:a4:4b: f0:3c:f0:ab:92:e3:e4:85:d7:71:7c:fa:a9:a1:77: d1:02:00:12:37:ea:9c:c6:cd:85:bd:22:12:0d:88: ab:64:c7:c3:bf:51:eb:eb:b3:a3:68:90:f5:9e:17: db:5f:3a:84:f8:bb:f3:c7:71:00:39:20:91:42:dc: 08:63:2a:bc:0c:c0:61:f4:85:7d:19:76:3b:10:b6: 0f:ab:7f:c9:1c:7b:8a:43:b3:d8:cc:85:28:28:9e: 6f:89:9f:f1:87:07:e2:09:88:7e:73:4b:9b:8f:30: 0b:72:4b:28:a9:b0:7a:f1:89:36:98:1d:28:ac:18: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:28:CF:3E:D5:3A:1C:FB:F8:42:53:A6:80:72:A9:84:1A:CA:A7 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c4:4a:a1:66:76:47:99:e4:08:c7:55:71:a5:dd:e4:94:d9: a2:a7:d2:2b:09:70:b1:0c:3c:cc:f7:83:eb:6c:f8:21:51:00: 31:ce:00:65:17:b0:79:5b:b3:85:8c:9d:50:41:e7:90:0a:01: bb:51:e5:b3:02:43:07:3c:38:b6:d3:a3:3c:30:73:27:49:07: ef:ce:e3:3c:f5:54:f0:00:dd:33:09:01:18:97:8b:7f:a9:fc: 6e:5b:27:6b:95:20:c9:03:c5:10:ef:28:eb:99:41:53:4c:f7: ae:f5:00:48:78:3d:a4:66:0f:fb:e3:d4:c8:d7:08:62:8c:3b: 73:d5:fa:8e:75:bc:e1:5e:39:99:ad:89:53:6e:c1:7f:8e:eb: 67:f2:de:93:74:5a:a9:58:55:ea:2c:3a:bd:7f:2d:8e:32:95: bf:eb:a3:fb:89:36:35:12:39:7b:7a:1e:83:0a:0b:0f:09:cc: c3:5f:d7:1b:4d:5e:1f:a0:d5:32:c0:c6:aa:e8:96:40:84:70: 35:f8:bb:65:0c:7d:94:c9:9c:0f:25:93:46:74:a0:47:88:fa: 71:a7:59:7f:7b:60:4d:62:24:e3:3c:9d:01:8e:de:c6:f9:2d: 6d:c8:75:a8:99:c4:89:51:f1:8b:b6:5f:af:b1:6e:31:13:6b: 5c:71:e3:32 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK8DipsKjZ63/darSqI9b1ockOrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA3MDEwOTE5MDdaFw0yNjA3MDIxMDA5MDdaMDMxMTAvBgNV BAMTKEZEMjkyOENGM0VENTNBMUNGQkY4NDI1M0E2ODA3MkE5ODQxQUNBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJZHiBsMpDl/eSefyxPOAEr2Y cZ0J/W+MKnK1Y7rsyCWXsAqNuxZyB1hqbk8rZvxcdErtSMuM0V+EtT5yMvegLc1A 5Ncct7mzccR89/qMvB8L/COcau+ZWXIsSQbBgqCUPxeSWrOBu44TV6M5omHfXEh0 JNHtISe9aFCgXHDJsDnpEUikS/A88KuS4+SF13F8+qmhd9ECABI36pzGzYW9IhIN iKtkx8O/Uevrs6NokPWeF9tfOoT4u/PHcQA5IJFC3AhjKrwMwGH0hX0ZdjsQtg+r f8kce4pDs9jMhSgonm+Jn/GHB+IJiH5zS5uPMAtySyipsHrxiTaYHSisGGTZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/Skozz7VOhz7+EJTpoByqYQayqcwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasRKoWZ2R5nkCMdVcaXd 5JTZoqfSKwlwsQw8zPeD62z4IVEAMc4AZReweVuzhYydUEHnkAoBu1HlswJDBzw4 ttOjPDBzJ0kH787jPPVU8ADdMwkBGJeLf6n8blsna5UgyQPFEO8o65lBU0z3rvUA SHg9pGYP++PUyNcIYow7c9X6jnW84V45ma2JU27Bf47rZ/Lek3RaqVhV6iw6vX8t jjKVv+uj+4k2NRI5e3oegwoLDwnMw1/XG01eH6DVMsDGquiWQIRwNfi7ZQx9lMmc DyWTRnSgR4j6cadZf3tgTWIk4zydAY7exvktbch1qJnEiVHxi7Zfr7FuMRNrXHHj Mg== -----END CERTIFICATE-----Generated at Wed Jul 1 14:50:24 2026 by rpki-client