$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: zc37YkMB/lXt7pzkTbbsH94sE/w7M1fS2WHbYQ52YYY= Subject key identifier: 13:68:AF:4E:C8:6E:37:14:A2:CE:16:18:FC:39:73:1D:4C:5A:76:7B Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 6F19F05358731014AF43C984C907BBE20D6F0225 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 9B Signing time: Tue 16 Jun 2026 16:21:56 +0000 Manifest this update: Tue 16 Jun 2026 16:16:56 +0000 Manifest next update: Wed 17 Jun 2026 18:39:56 +0000 Files and hashes: 1: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=) 2: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) 3: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=) 4: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=) 5: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=) 6: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: Y0Sk6oAxPEzDrbVarQgtuwVbK3HJvTMY4Ct3rFQslRM=) 7: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=) 8: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 9: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 18:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:19:f0:53:58:73:10:14:af:43:c9:84:c9:07:bb:e2:0d:6f:02:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Jun 16 16:16:56 2026 GMT Not After : Jun 17 18:39:56 2026 GMT Subject: CN=1368AF4EC86E3714A2CE1618FC39731D4C5A767B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:39:30:40:68:7d:1d:70:ac:ea:a0:16:04: ef:5d:ce:34:3b:f9:cc:9a:26:fd:ed:80:84:ea:a1: 81:4c:3c:e8:3c:34:4d:03:32:d7:fe:64:ba:71:b4: 62:09:f2:1d:58:90:9f:23:35:1c:0b:1b:9a:1f:96: 5f:4e:17:f5:b5:09:a7:38:b8:a1:f5:9a:12:dd:27: 4e:ec:a3:96:14:12:d8:d3:91:12:20:21:2b:fd:11: 1f:39:c9:ae:bf:22:8c:a0:10:a3:43:aa:bc:66:65: 55:08:af:13:e4:89:3b:24:f2:99:a2:0c:0e:cb:7c: 3b:e8:bf:4b:28:dd:78:f6:e1:51:e6:32:db:97:e4: eb:56:fc:18:31:bc:26:db:41:59:23:7e:2b:67:15: 7b:d7:51:ef:ad:e7:f8:58:17:e2:a1:91:49:5d:16: cf:f1:0a:03:e2:99:f3:0b:ad:a8:40:39:ba:87:33: c4:62:d9:a5:f4:03:ad:5c:a9:d0:63:4d:4e:86:24: 3d:f4:68:74:26:77:5a:80:b3:c6:d8:9c:58:b0:dd: cf:ae:55:0c:1f:61:a2:39:a1:70:fe:53:2f:55:d6: e5:61:13:72:64:2e:88:c4:a0:c8:0f:0e:09:fb:22: 7b:b6:35:9a:75:c4:2b:20:2c:1b:23:83:20:b4:7b: 8e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:AF:4E:C8:6E:37:14:A2:CE:16:18:FC:39:73:1D:4C:5A:76:7B X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:56:1c:69:14:5b:9e:a9:bf:3a:bd:58:e1:3f:c1:1d:f2:56: 1c:95:d5:43:ac:60:8f:9b:72:79:e7:c1:74:34:56:25:7a:ee: 56:97:e1:9a:76:7a:fe:d9:67:36:0b:a4:d6:c9:55:2c:c0:db: 87:a2:25:a2:34:8b:22:94:f4:cc:7e:e3:bc:f1:fa:b3:d1:13: 69:02:51:b2:72:d2:bc:e5:75:c8:fd:1f:ae:58:10:34:61:f3: 3c:2f:e4:02:bd:ff:46:d3:cb:cc:cc:ee:36:9f:64:d9:9d:27: 2a:96:90:02:3c:7f:f1:c1:87:2e:81:fa:f7:e8:71:34:8d:76: 65:0b:6b:3c:92:87:2f:d1:0e:bf:c7:48:80:ee:b0:e0:52:50: c9:de:cc:2c:89:10:95:cf:1e:be:60:a4:d8:b7:a2:0a:4a:a7: 7f:b7:28:37:3e:fa:09:4b:d5:fc:fb:23:49:1e:4a:59:55:20: ec:ff:8e:30:f7:75:87:b6:99:19:7f:3c:23:b5:83:30:29:14: 55:f6:ac:9b:90:e3:47:e5:85:f0:d6:a0:4a:8c:ec:80:21:21: b6:2c:32:cb:2c:bd:08:3d:bb:e8:f9:be:7f:2f:b2:a4:8a:07: b3:c1:8f:b0:13:52:62:10:ee:88:1b:28:83:c0:0b:25:2f:f7: 66:2d:9c:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbxnwU1hzEBSvQ8mEyQe74g1vAiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjA2MTYxNjE2NTZaFw0yNjA2MTcxODM5NTZaMDMxMTAvBgNV BAMTKDEzNjhBRjRFQzg2RTM3MTRBMkNFMTYxOEZDMzk3MzFENEM1QTc2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgDkwQGh9HXCs6qAWBO9dzjQ7 +cyaJv3tgITqoYFMPOg8NE0DMtf+ZLpxtGIJ8h1YkJ8jNRwLG5ofll9OF/W1Cac4 uKH1mhLdJ07so5YUEtjTkRIgISv9ER85ya6/IoygEKNDqrxmZVUIrxPkiTsk8pmi DA7LfDvov0so3Xj24VHmMtuX5OtW/BgxvCbbQVkjfitnFXvXUe+t5/hYF+KhkUld Fs/xCgPimfMLrahAObqHM8Ri2aX0A61cqdBjTU6GJD30aHQmd1qAs8bYnFiw3c+u VQwfYaI5oXD+Uy9V1uVhE3JkLojEoMgPDgn7Inu2NZp1xCsgLBsjgyC0e47nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE2ivTshuNxSizhYY/DlzHUxadnswHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASVhxp FFueqb86vVjhP8Ed8lYcldVDrGCPm3J558F0NFYleu5Wl+Gadnr+2Wc2C6TWyVUs wNuHoiWiNIsilPTMfuO88fqz0RNpAlGyctK85XXI/R+uWBA0YfM8L+QCvf9G08vM zO42n2TZnScqlpACPH/xwYcugfr36HE0jXZlC2s8kocv0Q6/x0iA7rDgUlDJ3sws iRCVzx6+YKTYt6IKSqd/tyg3PvoJS9X8+yNJHkpZVSDs/44w93WHtpkZfzwjtYMw KRRV9qybkONH5YXw1qBKjOyAISG2LDLLLL0IPbvo+b5/L7KkigezwY+wE1JiEO6I GyiDwAslL/dmLZzF -----END CERTIFICATE-----Generated at Wed Jun 17 11:19:34 2026 by rpki-client