$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: OvWIEaESmtIPU+SoqGoyGVOQAyzcLkRcL5YBb8QvctM= Subject key identifier: 1B:D2:38:14:9F:AC:0A:BE:85:F8:FB:1E:22:6C:0C:B3:BB:00:FE:93 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 4F7074762EA9D870E19766552EFB22F27D97D054 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 0C Signing time: Sun 01 Mar 2026 16:42:57 +0000 Manifest this update: Sun 01 Mar 2026 16:37:57 +0000 Manifest next update: Mon 02 Mar 2026 19:24:57 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 2: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 3: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: v9FctOMfT5QyC0H6ymqF8VD2tn7jQntVtaCxw3rTKHw=) 4: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:70:74:76:2e:a9:d8:70:e1:97:66:55:2e:fb:22:f2:7d:97:d0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Mar 1 16:37:57 2026 GMT Not After : Mar 2 19:24:57 2026 GMT Subject: CN=1BD238149FAC0ABE85F8FB1E226C0CB3BB00FE93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:c9:18:ee:f7:48:53:cc:64:6c:45:83:4f: c7:06:d9:a8:9a:a9:dc:c5:2d:fb:3d:5b:b6:e5:57: 91:56:61:56:46:88:40:c3:ab:f4:66:8d:a6:10:a6: ec:94:cc:67:0d:1d:93:3f:cf:b5:cb:9e:6d:4f:fd: fd:bc:2b:35:3b:eb:37:66:2a:85:ac:dc:eb:9d:db: bc:5d:9b:d3:95:ff:b6:d0:47:8b:7d:6b:aa:e6:0b: cd:fa:1a:2e:78:d0:a4:82:34:52:c2:ee:4c:69:77: aa:a9:a1:d1:8c:42:ba:ce:ec:c4:be:a1:19:49:7e: e1:6e:a5:b6:a0:98:c8:37:82:bb:5d:58:91:7e:1b: d4:dc:29:b2:1d:f7:1a:75:fc:00:52:17:e7:e9:79: 33:86:b9:ac:f2:10:a4:ea:8b:0e:ee:be:6a:c8:1c: a9:15:f3:b9:ec:74:ea:02:f1:ac:58:fa:53:07:ab: 7f:12:7b:22:41:07:b6:76:6a:c8:33:a7:29:da:4b: 93:2c:0b:45:04:e9:5d:4a:40:6f:d3:ab:4d:23:bd: 47:55:e6:09:f5:1a:0a:d3:4c:9a:fd:a4:42:7f:23: 80:35:52:68:91:03:18:f9:1c:2c:5b:19:ae:70:6e: 53:01:0a:d8:4f:65:06:69:69:18:b9:97:09:24:12: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:38:14:9F:AC:0A:BE:85:F8:FB:1E:22:6C:0C:B3:BB:00:FE:93 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:fa:61:b7:15:97:9f:1c:fe:c4:5b:d4:e2:57:48:75:58: 19:3d:1c:2e:64:f4:f4:5a:be:9b:b3:35:d1:dd:d3:64:28:89: 01:17:d8:4e:af:5f:a7:79:d6:31:29:cb:b7:b8:ac:e9:69:91: b5:c9:7b:d1:a4:d4:e8:13:1e:4e:35:10:e0:1d:73:5e:45:7e: 2a:02:bf:79:4f:3c:63:af:87:a1:09:dc:14:6f:76:9c:46:bd: 47:52:f6:be:46:a4:a5:5a:de:43:15:99:43:2f:3e:c2:4a:84: 6b:cc:f1:3d:2d:5e:db:df:a7:58:f2:e3:22:ca:42:b3:d0:7e: 80:8a:9f:5a:30:7d:65:2a:e8:22:5c:3b:66:d5:53:18:cc:b3: f2:6b:38:f9:e7:c6:5a:e0:b0:1a:a8:52:ad:1f:ae:51:e8:21: 9d:34:a1:4b:e1:a7:a3:bf:79:fe:1e:83:41:9b:32:12:a4:61: 3f:5a:f4:ed:9b:27:1f:12:f1:b0:ce:89:78:f1:e9:9a:08:d9: 1b:4c:27:a5:f2:a3:94:47:ca:53:5a:b5:66:24:66:e7:2a:c6: 7d:2b:57:34:fb:2a:58:de:61:e5:0f:a9:47:e4:45:8b:a5:f2: 10:47:95:dd:c8:5d:7c:45:24:18:27:3e:dd:32:02:61:25:af: 86:47:3c:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT3B0di6p2HDhl2ZVLvsi8n2X0FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjAzMDExNjM3NTdaFw0yNjAzMDIxOTI0NTdaMDMxMTAvBgNV BAMTKDFCRDIzODE0OUZBQzBBQkU4NUY4RkIxRTIyNkMwQ0IzQkIwMEZFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrMkY7vdIU8xkbEWDT8cG2aia qdzFLfs9W7blV5FWYVZGiEDDq/RmjaYQpuyUzGcNHZM/z7XLnm1P/f28KzU76zdm KoWs3Oud27xdm9OV/7bQR4t9a6rmC836Gi540KSCNFLC7kxpd6qpodGMQrrO7MS+ oRlJfuFupbagmMg3grtdWJF+G9TcKbId9xp1/ABSF+fpeTOGuazyEKTqiw7uvmrI HKkV87nsdOoC8axY+lMHq38SeyJBB7Z2asgzpynaS5MsC0UE6V1KQG/Tq00jvUdV 5gn1GgrTTJr9pEJ/I4A1UmiRAxj5HCxbGa5wblMBCthPZQZpaRi5lwkkEuFLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUG9I4FJ+sCr6F+PseImwMs7sA/pMwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa7fph txWXnxz+xFvU4ldIdVgZPRwuZPT0Wr6bszXR3dNkKIkBF9hOr1+nedYxKcu3uKzp aZG1yXvRpNToEx5ONRDgHXNeRX4qAr95Tzxjr4ehCdwUb3acRr1HUva+RqSlWt5D FZlDLz7CSoRrzPE9LV7b36dY8uMiykKz0H6Aip9aMH1lKugiXDtm1VMYzLPyazj5 58Za4LAaqFKtH65R6CGdNKFL4aejv3n+HoNBmzISpGE/WvTtmycfEvGwzol48ema CNkbTCel8qOUR8pTWrVmJGbnKsZ9K1c0+ypY3mHlD6lH5EWLpfIQR5XdyF18RSQY Jz7dMgJhJa+GRzyQ -----END CERTIFICATE-----Generated at Sun Mar 1 21:46:58 2026 by rpki-client