$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json) Hash identifier: cjUiIYSEaStvmOnemngRMSZfXczzXuttYjkvTMCP8ac= Subject key identifier: FD:27:62:CF:10:CE:96:6F:B6:78:C0:BC:F1:46:22:43:26:7F:4B:D1 Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Certificate serial: 25012885289AA015B0831A7609A8549452BD292D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 19:37:44 +0000 Manifest this update: Wed 25 Mar 2026 19:32:44 +0000 Manifest next update: Thu 26 Mar 2026 20:42:44 +0000 Files and hashes: 1: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: EXOXnOoFSd7NPAVzGVqVC7MuXmVliOKAJCsJbIqst6A=) 2: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=) 3: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=) 4: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:01:28:85:28:9a:a0:15:b0:83:1a:76:09:a8:54:94:52:bd:29:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90 Validity Not Before: Mar 25 19:32:44 2026 GMT Not After : Mar 26 20:42:44 2026 GMT Subject: CN=FD2762CF10CE966FB678C0BCF1462243267F4BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:83:b5:17:1f:17:30:d8:72:0c:c5:c6:8c: bf:cc:0e:3d:ab:3c:06:67:23:5b:ff:b3:0b:b3:46: 6f:a5:91:89:e8:39:16:47:e1:b8:58:8f:cd:ba:1a: 50:e5:26:d5:ca:ad:c6:df:bb:73:ba:dc:87:2e:45: 8f:0a:01:6c:42:65:df:66:03:cb:b9:77:81:c6:6c: 1b:49:cf:6e:b3:10:43:aa:29:68:f8:12:14:00:41: 3a:17:a0:8c:4a:b4:3a:f1:7b:71:e8:c7:84:de:81: b6:fb:e2:e5:09:d3:64:b3:40:43:18:70:41:9a:ab: 09:15:3d:c2:3b:58:1f:7f:37:50:68:f6:01:f1:d5: f6:b0:85:56:e0:da:3d:34:41:40:4a:e9:ea:83:9d: d3:34:9a:c9:50:87:6e:f5:4b:35:5a:2e:e4:ff:aa: d4:3c:3e:08:05:f7:c4:7a:33:fc:10:b0:8f:ad:4d: 9b:a6:59:5f:99:89:c7:f0:e9:93:bc:26:f0:73:f8: 46:db:19:ed:68:57:ec:eb:f0:14:70:70:4b:5a:87: 65:05:25:fd:36:92:cd:83:c0:bb:3e:bb:ff:ef:48: f2:2a:f1:46:e2:d3:9b:f1:10:b5:cc:1a:51:95:6e: b3:7c:aa:8b:d0:84:9b:b7:96:ce:92:61:63:bf:6f: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:62:CF:10:CE:96:6F:B6:78:C0:BC:F1:46:22:43:26:7F:4B:D1 X509v3 Authority Key Identifier: keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:94:03:2f:36:03:8c:1e:86:06:b6:36:3e:17:cd:3a:9b:20: 94:15:c0:08:15:12:7f:ec:bb:cf:37:20:67:b0:41:bb:bb:ef: 89:67:02:6e:2a:cb:98:88:7b:24:d8:f5:f3:a8:3c:a7:8e:eb: 10:de:81:c2:dd:f3:de:77:ec:ce:c1:6b:0c:33:bf:9f:ab:18: e0:da:81:d9:b1:c9:d2:11:5c:8a:0f:ff:6f:86:90:f0:b3:69: 09:d6:6c:ea:3c:1a:b7:48:f1:e3:55:cc:c4:bc:6e:61:d8:d7: 20:28:2d:7e:80:e8:95:16:62:60:dc:99:d7:44:e3:4f:68:90: 13:e0:18:25:4f:73:ed:69:b8:c4:85:69:cc:81:6d:ba:fa:63: c1:aa:9f:b3:e8:16:d8:fb:bd:12:b3:45:66:e9:75:ab:a0:79: 32:08:17:ff:38:87:7f:7f:ec:91:b5:7c:20:94:b7:9b:9f:6e: 6e:f5:e5:51:c2:c7:cc:69:73:81:46:55:ca:61:14:ad:e8:e0: 8a:58:d4:98:e7:9a:d2:bb:b3:94:cc:2b:8a:f8:25:a2:0d:b9: db:ef:09:5f:9e:29:f0:8e:d2:e0:67:50:1a:df:26:53:bc:16: 7a:00:fe:0f:2b:d0:14:20:5b:bc:77:2a:18:d3:b5:d6:e7:f9: cd:96:05:80 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJQEohSiaoBWwgxp2CahUlFK9KS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2 NDg0MkM5MDAeFw0yNjAzMjUxOTMyNDRaFw0yNjAzMjYyMDQyNDRaMDMxMTAvBgNV BAMTKEZEMjc2MkNGMTBDRTk2NkZCNjc4QzBCQ0YxNDYyMjQzMjY3RjRCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9oO1Fx8XMNhyDMXGjL/MDj2r PAZnI1v/swuzRm+lkYnoORZH4bhYj826GlDlJtXKrcbfu3O63IcuRY8KAWxCZd9m A8u5d4HGbBtJz26zEEOqKWj4EhQAQToXoIxKtDrxe3Hox4Tegbb74uUJ02SzQEMY cEGaqwkVPcI7WB9/N1Bo9gHx1fawhVbg2j00QUBK6eqDndM0mslQh271SzVaLuT/ qtQ8PggF98R6M/wQsI+tTZumWV+Zicfw6ZO8JvBz+EbbGe1oV+zr8BRwcEtah2UF Jf02ks2DwLs+u//vSPIq8Ubi05vxELXMGlGVbrN8qovQhJu3ls6SYWO/b4fXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/SdizxDOlm+2eMC88UYiQyZ/S9EwHwYDVR0j BBgwFoAURz8ghbve4lh1vaeP5EaavWSELJAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzIvNDczRjIwODVCQkRFRTI1ODc1QkRBNzhGRTQ0NjlBQkQ2NDg0MkM5MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5 MzktOTVlOS0wMDc3YjgwYjRmMGUvMC80NzNGMjA4NUJCREVFMjU4NzVCREE3OEZF NDQ2OUFCRDY0ODQyQzkwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Y4MTJkM2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8yLzQ3M0YyMDg1 QkJERUUyNTg3NUJEQTc4RkU0NDY5QUJENjQ4NDJDOTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBlAMv NgOMHoYGtjY+F806myCUFcAIFRJ/7LvPNyBnsEG7u++JZwJuKsuYiHsk2PXzqDyn jusQ3oHC3fPed+zOwWsMM7+fqxjg2oHZscnSEVyKD/9vhpDws2kJ1mzqPBq3SPHj VczEvG5h2NcgKC1+gOiVFmJg3JnXRONPaJAT4BglT3PtabjEhWnMgW26+mPBqp+z 6BbY+70Ss0Vm6XWroHkyCBf/OId/f+yRtXwglLebn25u9eVRwsfMaXOBRlXKYRSt 6OCKWNSY55rSu7OUzCuK+CWiDbnb7wlfninwjtLgZ1Aa3yZTvBZ6AP4PK9AUIFu8 dyoY07XW5/nNlgWA -----END CERTIFICATE-----Generated at Thu Mar 26 01:45:10 2026 by rpki-client