$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: UErO0Ep6reTNqNhuOKuREqn+7q94luk91SiYqzPcwVg= Subject key identifier: 8D:F8:8A:55:C4:AC:9E:CF:6B:F4:08:EF:50:6A:9D:E9:A4:00:6B:77 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 0168264365FFD4D1B9DCC073E078D418155C65B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0479 Signing time: Sun 01 Mar 2026 10:36:17 +0000 Manifest this update: Sun 01 Mar 2026 10:31:17 +0000 Manifest next update: Mon 02 Mar 2026 11:25:17 +0000 Files and hashes: 1: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 2: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 3: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 4: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: EuZIlCQZVinYE7suQtK3Qfpl7cPT94JitDxvTgXVlVY=) 6: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 11:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:68:26:43:65:ff:d4:d1:b9:dc:c0:73:e0:78:d4:18:15:5c:65:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Mar 1 10:31:17 2026 GMT Not After : Mar 2 11:25:17 2026 GMT Subject: CN=8DF88A55C4AC9ECF6BF408EF506A9DE9A4006B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:ef:3f:a9:67:72:42:07:3f:45:af:f4:28: 4d:02:2f:71:bf:05:94:b8:67:59:e3:0c:af:90:e1: 86:8e:92:67:a6:bc:bb:28:01:76:1b:b0:b0:0e:0a: 7f:4f:87:a4:f0:3c:cb:42:66:14:26:3c:1b:7a:0a: 82:bd:f8:58:55:c1:f4:21:98:12:98:7d:c9:87:0f: 09:73:7a:07:df:4d:c6:6c:8e:06:0b:7c:a8:fa:0d: c2:c4:40:61:dd:54:1a:ed:6a:cf:29:bc:01:73:92: f7:9f:23:49:d1:a9:d8:d8:56:17:fc:6f:a1:85:34: 73:63:18:24:9f:43:9b:3a:71:9d:2b:77:08:87:bb: a4:02:37:e4:86:cd:5a:b0:cb:09:6a:60:7e:36:f3: fa:b7:d5:ae:b3:15:c5:49:04:fb:4a:03:ed:cc:10: ce:03:55:b8:82:ab:52:f8:49:9d:64:48:03:8f:f5: 34:9b:83:40:b5:86:90:2e:bb:fe:3d:2c:d1:0e:d5: 49:6e:4a:c8:19:8d:16:a9:fd:4e:3e:1e:92:91:d2: c3:24:d2:2f:01:90:6c:73:ad:8a:ba:61:42:88:62: 8b:aa:fd:9c:9e:f9:9e:2d:18:2c:1e:cd:0f:5d:3d: b6:56:7e:a8:25:b4:71:8e:7e:d1:36:91:cd:5c:40: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:8A:55:C4:AC:9E:CF:6B:F4:08:EF:50:6A:9D:E9:A4:00:6B:77 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:32:18:04:e9:bf:ed:94:4a:40:40:13:f7:19:a7:e3:a3:4b: d7:61:90:d3:0c:be:68:33:0e:18:e3:13:94:03:c1:e7:06:a5: 8f:a2:be:f8:60:07:e8:54:59:6c:8c:17:e6:5c:df:27:89:3a: cc:e5:30:71:30:8f:e6:0f:a2:d6:7f:80:e1:78:5f:0b:20:03: 20:a7:6a:96:12:e4:06:92:36:53:c3:e4:97:78:6e:3f:37:f6: 50:9f:2b:a5:d4:52:79:cf:24:e5:a1:c5:96:16:52:3d:7a:49: d6:d4:ec:1c:a3:c3:ff:be:be:0c:7d:85:73:f9:1b:69:21:cb: 4a:b1:d9:99:0f:06:aa:47:f5:ab:f9:85:8c:89:c9:48:3a:a3: 5e:55:52:22:15:48:a7:6e:29:0f:8e:91:9e:2e:95:2c:4e:27: 73:d3:b4:a1:9b:b0:f4:c4:4f:ce:2d:86:d3:3d:59:9d:9c:fb: b1:a8:8e:ab:72:cb:dd:38:eb:47:59:7b:f8:0d:62:4d:1a:76: 94:36:d0:7a:3c:d6:5c:89:68:ad:d3:8a:3d:24:9c:c2:52:62: 51:61:ee:1f:51:9c:17:6f:62:7d:59:08:04:5c:fb:ec:6d:6f: 5b:29:ca:80:bb:87:31:7d:e3:41:bd:c2:cb:46:ab:c7:d7:19: 77:bb:76:a4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAWgmQ2X/1NG53MBz4HjUGBVcZbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNjAzMDExMDMxMTdaFw0yNjAzMDIxMTI1MTdaMDMxMTAvBgNV BAMTKDhERjg4QTU1QzRBQzlFQ0Y2QkY0MDhFRjUwNkE5REU5QTQwMDZCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswO8/qWdyQgc/Ra/0KE0CL3G/ BZS4Z1njDK+Q4YaOkmemvLsoAXYbsLAOCn9Ph6TwPMtCZhQmPBt6CoK9+FhVwfQh mBKYfcmHDwlzegffTcZsjgYLfKj6DcLEQGHdVBrtas8pvAFzkvefI0nRqdjYVhf8 b6GFNHNjGCSfQ5s6cZ0rdwiHu6QCN+SGzVqwywlqYH428/q31a6zFcVJBPtKA+3M EM4DVbiCq1L4SZ1kSAOP9TSbg0C1hpAuu/49LNEO1UluSsgZjRap/U4+HpKR0sMk 0i8BkGxzrYq6YUKIYouq/Zye+Z4tGCwezQ9dPbZWfqgltHGOftE2kc1cQH1FAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjfiKVcSsns9r9AjvUGqd6aQAa3cwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODIYBOm/7ZRKQEAT9xmn 46NL12GQ0wy+aDMOGOMTlAPB5walj6K++GAH6FRZbIwX5lzfJ4k6zOUwcTCP5g+i 1n+A4XhfCyADIKdqlhLkBpI2U8Pkl3huPzf2UJ8rpdRSec8k5aHFlhZSPXpJ1tTs HKPD/76+DH2Fc/kbaSHLSrHZmQ8Gqkf1q/mFjInJSDqjXlVSIhVIp24pD46Rni6V LE4nc9O0oZuw9MRPzi2G0z1ZnZz7saiOq3LL3TjrR1l7+A1iTRp2lDbQejzWXIlo rdOKPSScwlJiUWHuH1GcF29ifVkIBFz77G1vWynKgLuHMX3jQb3Cy0arx9cZd7t2 pA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:36 2026 by rpki-client