$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: EEU8fEI/qx01IZB4r0br/FmrTsG+gATgPvn8KpWygnI= Subject key identifier: 39:13:52:B3:3A:A5:36:2E:1E:4A:AB:10:2D:8E:4B:0F:40:28:6F:32 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 5B8956946A6EE994A05C9861487A350E3A0C6CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 03EA Signing time: Sun 29 Mar 2026 07:26:33 +0000 Manifest this update: Sun 29 Mar 2026 07:21:33 +0000 Manifest next update: Mon 30 Mar 2026 09:33:33 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: I3d2A7DzypTenwkrfLokp3UkWlIriYPBcMI8MqrJIWA=) 2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:89:56:94:6a:6e:e9:94:a0:5c:98:61:48:7a:35:0e:3a:0c:6c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Mar 29 07:21:33 2026 GMT Not After : Mar 30 09:33:33 2026 GMT Subject: CN=391352B33AA5362E1E4AAB102D8E4B0F40286F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:32:37:7e:54:ab:27:b7:43:a9:de:d9:5a: c4:b8:e2:e8:14:c0:6b:b7:c3:d9:8f:84:c8:4c:97: 51:67:dd:32:5c:9c:2c:f3:6e:50:80:2f:81:1a:8a: 29:41:81:66:5d:c7:e9:8d:2d:ce:b2:41:fb:d7:28: 81:6e:fd:38:c5:5d:67:66:90:e9:97:17:76:03:e6: 28:0d:d9:e3:fb:7a:26:06:5f:b8:78:21:f7:63:99: ef:be:e8:d1:77:d6:a3:be:45:e9:61:6f:1f:13:69: 2e:b4:99:9b:9f:9d:3c:ef:5b:e6:d9:3a:d5:89:6d: 27:fe:ac:05:6c:2e:e0:7c:7e:a8:6a:e9:8a:0f:2a: 90:fe:39:ee:b4:65:e8:60:2f:d4:f3:1b:bd:51:d2: 2c:e4:81:90:a0:c6:a2:ca:c7:bd:47:d0:ad:dc:67: 2f:b6:1f:cd:21:6b:37:13:80:02:f4:13:55:fb:1f: c3:d7:a4:1b:bd:3f:de:b7:05:48:c8:17:49:16:b3: 6c:f6:29:c3:f6:02:1a:eb:35:ff:ec:cb:82:c7:a7: f3:28:c5:8a:0f:9f:77:4a:75:ec:57:ad:59:90:22: ab:63:86:7a:41:2a:7d:4f:d4:a9:04:20:fc:6e:ed: ec:fd:e0:c9:df:08:ba:50:17:e8:a2:80:3f:40:90: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:13:52:B3:3A:A5:36:2E:1E:4A:AB:10:2D:8E:4B:0F:40:28:6F:32 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:10:07:e3:62:82:3b:1e:3f:f2:43:62:2a:0d:e2:1a:c7:6a: c1:22:a6:81:fc:ab:cb:a9:40:1a:a4:17:24:92:6c:18:81:6d: 66:ee:76:7c:10:91:37:29:73:3e:f4:22:dd:65:87:f2:be:a6: 85:e8:3a:35:b4:28:10:59:46:1e:cb:64:0f:ab:b6:95:83:d9: 92:db:77:cc:c6:1b:43:d6:38:46:98:bb:32:2c:db:d0:be:2d: 27:cd:47:d2:b1:a9:72:7e:a2:b5:da:9d:de:59:11:e9:37:39: 87:5f:92:e2:55:1b:2c:36:ff:a6:bd:59:05:12:0b:65:17:f4: 98:0f:32:97:ab:5a:cc:9f:f6:94:0e:48:3d:73:9c:be:d1:bb: 48:66:68:cd:3a:d3:20:47:d5:6c:07:fe:f5:39:99:1e:88:73: 65:90:23:4d:63:b2:b3:c5:e5:91:0d:c8:30:1a:9f:ef:85:21: e7:80:2f:11:10:57:ed:1a:11:66:8c:1f:7d:d3:27:97:49:6f: 33:48:8d:7d:c9:77:d7:0a:a0:be:6a:3d:d0:e2:b8:42:e2:88: 76:8d:14:f5:9c:88:fb:83:28:fc:62:d7:eb:c3:1a:10:f5:1c: 64:fd:b2:4d:84:0a:e7:6d:f3:1e:5b:8d:c9:c6:30:73:ef:2d: 75:3b:a5:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUW4lWlGpu6ZSgXJhhSHo1DjoMbOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjAzMjkwNzIxMzNaFw0yNjAzMzAwOTMzMzNaMDMxMTAvBgNV BAMTKDM5MTM1MkIzM0FBNTM2MkUxRTRBQUIxMDJEOEU0QjBGNDAyODZGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTjI3flSrJ7dDqd7ZWsS44ugU wGu3w9mPhMhMl1Fn3TJcnCzzblCAL4EaiilBgWZdx+mNLc6yQfvXKIFu/TjFXWdm kOmXF3YD5igN2eP7eiYGX7h4Ifdjme++6NF31qO+Relhbx8TaS60mZufnTzvW+bZ OtWJbSf+rAVsLuB8fqhq6YoPKpD+Oe60ZehgL9TzG71R0izkgZCgxqLKx71H0K3c Zy+2H80hazcTgAL0E1X7H8PXpBu9P963BUjIF0kWs2z2KcP2AhrrNf/sy4LHp/Mo xYoPn3dKdexXrVmQIqtjhnpBKn1P1KkEIPxu7ez94MnfCLpQF+iigD9AkBy/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUORNSszqlNi4eSqsQLY5LD0AobzIwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBAH42KCOx4/8kNiKg3i GsdqwSKmgfyry6lAGqQXJJJsGIFtZu52fBCRNylzPvQi3WWH8r6mheg6NbQoEFlG HstkD6u2lYPZktt3zMYbQ9Y4Rpi7Mizb0L4tJ81H0rGpcn6itdqd3lkR6Tc5h1+S 4lUbLDb/pr1ZBRILZRf0mA8yl6tazJ/2lA5IPXOcvtG7SGZozTrTIEfVbAf+9TmZ HohzZZAjTWOys8XlkQ3IMBqf74Uh54AvERBX7RoRZowffdMnl0lvM0iNfcl31wqg vmo90OK4QuKIdo0U9ZyI+4Mo/GLX68MaEPUcZP2yTYQK523zHluNycYwc+8tdTul Ow== -----END CERTIFICATE-----Generated at Sun Mar 29 14:06:11 2026 by rpki-client