$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: gnTr0a6+vaCo6x6ZYc0bFqYjd3e9gtAxGsdd5hjIC0Q= Subject key identifier: C9:47:55:20:D8:E0:75:28:12:33:C2:36:21:E4:D9:AE:10:EE:94:45 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 21C29A89FFE289E6D4364C2FDBA4AE2451423B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 044E Signing time: Fri 12 Jun 2026 16:26:05 +0000 Manifest this update: Fri 12 Jun 2026 16:21:05 +0000 Manifest next update: Sat 13 Jun 2026 17:09:05 +0000 Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: 8rahj+tIpVg7O1b7poPom9kz6VL8GzJtYQ8ztOnLceo=) 2: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=) 3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c2:9a:89:ff:e2:89:e6:d4:36:4c:2f:db:a4:ae:24:51:42:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jun 12 16:21:05 2026 GMT Not After : Jun 13 17:09:05 2026 GMT Subject: CN=C9475520D8E075281233C23621E4D9AE10EE9445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:21:f3:90:97:f0:34:87:ef:5c:ef:c1:41: 9e:38:75:45:71:d8:d9:b7:8f:bb:8a:0e:97:c3:4d: 31:e2:0a:f9:3a:72:c8:f0:77:a7:49:6c:91:9e:5a: 46:f9:14:75:5b:21:a7:bf:44:66:0f:35:e6:b3:b8: 5f:2c:ff:03:61:14:32:2c:59:f5:de:a3:b4:5a:7b: 3a:ce:14:35:bc:17:57:1e:75:b7:a8:67:ac:6d:9d: 59:21:b9:67:9d:25:b8:67:bc:ad:07:93:0d:e5:39: 6a:58:94:20:eb:2b:39:c1:01:9f:a1:60:78:85:8d: ea:d1:06:ba:74:e8:0c:99:ac:4e:10:af:fe:48:8d: 33:67:e3:4c:3a:92:cc:15:b8:43:88:02:9d:f2:f6: dd:36:5c:0d:09:b1:20:4f:a6:22:16:32:0d:ae:a1: 73:2e:86:c5:f6:55:31:ca:5e:da:f2:0a:d9:65:69: 61:80:00:bf:6d:27:22:7a:2b:23:97:36:a1:91:67: 2e:b5:42:fd:75:c3:eb:40:8b:d0:3f:9a:cf:71:17: c6:ac:74:14:fe:b3:b8:d9:f9:86:45:ef:e7:a6:30: c9:fd:b6:8a:2d:3b:38:1a:bd:e7:7d:0c:ff:cd:d4: bb:04:fd:9b:66:cf:7b:22:35:0e:8f:79:d3:30:dd: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:47:55:20:D8:E0:75:28:12:33:C2:36:21:E4:D9:AE:10:EE:94:45 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:6d:cc:8b:58:af:b0:1f:90:23:79:11:e7:8b:32:89:10: c7:d9:ba:1d:4c:de:4c:c0:c4:04:b3:e8:c0:74:ac:6e:29:dc: 19:d2:04:96:ea:de:c2:09:85:ca:08:5b:43:ab:5d:fb:ef:ba: 05:04:64:8e:bc:85:ab:5e:25:a6:9a:3a:d6:17:79:f6:42:e2: 86:01:f2:20:09:20:47:a5:e9:e3:57:14:6b:58:bb:5a:a8:1d: 07:81:5e:a6:3f:51:c7:9a:a9:09:4a:27:86:94:21:07:c2:66: bb:94:b3:e4:b5:2a:f7:0d:9f:d8:c0:39:66:a6:1b:a5:6b:f2: ae:e9:b6:4c:3a:f2:b7:b8:09:ad:55:14:8b:1b:b8:7d:39:c0: 26:5f:94:8e:3e:5a:73:76:69:e2:88:ab:a2:69:d6:0c:23:0e: 70:64:45:7d:4d:f0:37:65:73:bf:db:5f:3e:cf:cb:4f:d1:de: f6:f0:b8:c4:f7:d6:47:37:71:4d:f9:56:36:dd:70:a4:b5:c0: 08:23:c4:48:11:5a:ac:a5:11:16:fb:5e:f4:f8:b5:56:f8:cf: a8:4a:9f:95:46:60:81:73:ac:23:c8:f3:04:c2:d2:54:e9:77: 8b:8b:14:b2:e3:c7:00:0b:17:91:ce:f7:79:5f:8a:93:2c:2f: ca:b7:44:e4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIcKaif/iiebUNkwv26SuJFFCO04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjA2MTIxNjIxMDVaFw0yNjA2MTMxNzA5MDVaMDMxMTAvBgNV BAMTKEM5NDc1NTIwRDhFMDc1MjgxMjMzQzIzNjIxRTREOUFFMTBFRTk0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1SHzkJfwNIfvXO/BQZ44dUVx 2Nm3j7uKDpfDTTHiCvk6csjwd6dJbJGeWkb5FHVbIae/RGYPNeazuF8s/wNhFDIs WfXeo7RaezrOFDW8F1cedbeoZ6xtnVkhuWedJbhnvK0Hkw3lOWpYlCDrKznBAZ+h YHiFjerRBrp06AyZrE4Qr/5IjTNn40w6kswVuEOIAp3y9t02XA0JsSBPpiIWMg2u oXMuhsX2VTHKXtryCtllaWGAAL9tJyJ6KyOXNqGRZy61Qv11w+tAi9A/ms9xF8as dBT+s7jZ+YZF7+emMMn9tootOzgaved9DP/N1LsE/Ztmz3siNQ6PedMw3bkhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyUdVINjgdSgSM8I2IeTZrhDulEUwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAltzItYr7AfkCN5EeeL MokQx9m6HUzeTMDEBLPowHSsbincGdIElurewgmFyghbQ6td+++6BQRkjryFq14l ppo61hd59kLihgHyIAkgR6Xp41cUa1i7WqgdB4Fepj9Rx5qpCUonhpQhB8Jmu5Sz 5LUq9w2f2MA5ZqYbpWvyrum2TDryt7gJrVUUixu4fTnAJl+Ujj5ac3Zp4oiromnW DCMOcGRFfU3wN2Vzv9tfPs/LT9He9vC4xPfWRzdxTflWNt1wpLXACCPESBFarKUR Fvte9Pi1VvjPqEqflUZggXOsI8jzBMLSVOl3i4sUsuPHAAsXkc73eV+KkywvyrdE 5A== -----END CERTIFICATE-----Generated at Sat Jun 13 08:57:46 2026 by rpki-client