
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier: BWTxOXKHHEVGETmb+X2AgxYkBiInZxYzWL+TmO3lU8c=
Subject key identifier: 7D:12:A5:8D:3E:9E:9A:3C:5F:6D:FF:E8:08:67:91:C0:25:C8:BD:3C
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 5B94194D3769FB09461FB12D78D3A56D89145D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number: 0485
Signing time: Thu 23 Jul 2026 09:17:53 +0000
Manifest this update: Thu 23 Jul 2026 09:12:53 +0000
Manifest next update: Fri 24 Jul 2026 09:56:53 +0000
Files and hashes: 1: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: gT5PwLX0BOHlbnGM/MjefPSJmmyt2UDhMOSNslALi0s=)
2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: T+zbNugzb1bsH98kHS+RI8JGsyekk0ffpARbCOfuE7Y=)
3: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=)
4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:94:19:4d:37:69:fb:09:46:1f:b1:2d:78:d3:a5:6d:89:14:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Jul 23 09:12:53 2026 GMT
Not After : Jul 24 09:56:53 2026 GMT
Subject: CN=7D12A58D3E9E9A3C5F6DFFE8086791C025C8BD3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:89:b8:a2:fd:33:b8:75:fc:24:8f:bb:3c:
1e:8a:9b:f3:28:5c:21:f7:7d:be:1a:d9:f4:b3:2f:
c1:77:c5:93:57:05:d0:29:fa:f7:a5:c3:b4:98:a5:
6a:b9:9e:34:de:21:5b:e5:d4:24:58:e5:e6:1b:0a:
36:54:5b:81:6d:e4:9b:2e:81:12:d1:9c:7a:38:d0:
90:38:f2:2a:b5:99:4e:0c:a2:e8:59:aa:10:ac:76:
77:07:ef:9b:44:ca:92:1e:7f:6c:12:75:42:76:a9:
9e:83:63:51:f7:82:f7:1f:e5:ac:17:6c:47:12:0b:
aa:fe:a6:78:bb:4e:12:6e:57:14:98:ca:78:b2:88:
4b:ab:3b:c6:77:b8:4e:cb:b7:51:e5:cf:0e:7c:e5:
9a:6e:5b:a8:fc:f7:50:a1:37:5b:bf:6a:6c:26:dd:
98:4d:ea:ac:24:cb:10:12:fd:ee:6b:40:df:7f:85:
9f:00:dd:ef:92:a1:c5:c6:6a:da:44:cb:d1:8f:5b:
94:2d:66:36:21:32:6e:04:c9:1b:37:c7:de:41:d2:
08:fd:25:61:3f:84:1a:1a:a2:86:73:36:91:d0:35:
0c:d2:6c:6c:ce:39:51:b3:a9:81:19:d6:b2:c3:27:
97:c0:2b:78:73:bb:50:ff:d9:07:36:eb:c2:65:97:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:A5:8D:3E:9E:9A:3C:5F:6D:FF:E8:08:67:91:C0:25:C8:BD:3C
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:84:e0:84:89:ec:92:e5:da:89:d4:e5:c2:ca:15:60:78:7a:
15:d7:4a:b5:ba:0b:21:bf:61:02:2e:24:f0:f9:1f:60:9c:e1:
f5:d0:fc:da:6b:b3:d9:7b:fa:75:a1:52:a6:73:b5:d7:54:9e:
1e:18:be:86:97:bb:e6:6b:39:f4:8c:98:49:cb:f9:5a:97:70:
00:34:c3:b9:39:cc:97:3e:ee:8a:44:1c:54:04:25:e5:ac:78:
a6:df:19:ec:14:b8:04:cd:25:a5:a4:f3:ec:a1:a7:5e:83:dc:
50:3f:83:1b:51:a9:9a:8f:b8:cb:34:67:d7:ce:d5:96:fb:a3:
3d:3f:ca:68:b4:77:c0:45:bf:85:a4:42:13:8a:ab:52:9b:52:
c3:f0:a6:e3:f7:d0:e0:65:3b:21:36:cf:03:d2:8b:5d:29:4b:
55:ca:5c:c1:bc:76:c9:b9:64:d3:9a:55:4a:86:93:d8:d7:43:
cb:46:b8:eb:97:31:a1:9e:0f:6c:34:d1:8a:a2:a6:07:92:65:
e2:26:93:a2:09:b7:8c:38:90:a9:3e:8e:17:46:85:7b:ee:81:
37:bf:23:20:d9:bf:f8:f9:42:60:29:89:03:11:0a:95:48:e5:
0f:86:15:ee:dd:59:14:b0:cd:61:9a:4c:e3:3d:12:04:16:dc:
f1:da:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:23 2026 by rpki-client