
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier: IlPnRLSdVGv0KWFPcwTw+iEOgL89jGKPLCXgXLrAMoU=
Subject key identifier: EC:F8:26:16:97:E3:2D:8E:9F:B0:E9:B2:7B:BF:A9:73:81:29:1D:FB
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 4B0F14A5F07B60AB5B2096F531EE13E4A5D1F5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number: 03E5
Signing time: Wed 25 Mar 2026 11:05:25 +0000
Manifest this update: Wed 25 Mar 2026 11:00:25 +0000
Manifest next update: Thu 26 Mar 2026 13:41:25 +0000
Files and hashes: 1: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=)
2: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: iYbYeABaHLvEtOgvj1kt3o4c20wi9RVGgEhxPxYefUg=)
3: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=)
4: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=)
5: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: JDtWvcwkcFwfS8VCb1zy7YF8Zp2kwnagm9OMk367GN0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0f:14:a5:f0:7b:60:ab:5b:20:96:f5:31:ee:13:e4:a5:d1:f5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Mar 25 11:00:25 2026 GMT
Not After : Mar 26 13:41:25 2026 GMT
Subject: CN=ECF8261697E32D8E9FB0E9B27BBFA97381291DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:66:be:94:d0:1d:08:9a:30:97:5f:94:4f:
c8:d2:c6:2f:f4:aa:91:b9:9e:f6:4b:8c:3b:13:a0:
08:de:95:b1:b2:bb:db:5a:10:18:4c:2e:dd:6a:1c:
40:26:6d:3d:de:3d:ef:54:56:28:7f:b6:e3:df:f4:
32:ee:6e:55:66:6a:fd:86:a3:13:95:54:62:7e:81:
29:b8:f7:07:7f:ef:c4:f8:f9:bf:42:45:03:4e:36:
02:db:da:58:84:cb:c9:24:bd:6b:44:80:3f:b9:b0:
e8:3b:fc:bf:43:07:02:cb:d2:76:6f:48:01:fb:df:
bf:7f:2b:39:e4:7f:6d:92:59:e9:29:81:77:63:05:
c2:41:a5:0a:a0:1a:cb:5d:3e:cc:4c:c9:cd:65:bb:
23:3d:9b:3c:9f:30:1b:b6:7a:fe:75:a6:1f:1e:50:
f1:00:36:48:cf:44:ca:8e:8b:0a:fc:31:0f:76:ab:
d0:dc:89:c9:bb:d6:84:2f:f4:04:d2:68:74:99:c9:
03:3c:ea:52:84:47:4f:f3:3e:af:c1:93:a5:d0:8c:
40:bc:a0:ca:03:0a:35:2c:f8:de:34:27:8e:a3:62:
a7:84:bb:af:e9:74:fe:da:95:5a:c4:5f:3c:8a:39:
e0:72:bb:5b:08:ad:26:12:e7:59:fa:4f:02:2b:5c:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:26:16:97:E3:2D:8E:9F:B0:E9:B2:7B:BF:A9:73:81:29:1D:FB
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6e:c2:55:23:2e:c9:9c:e4:cc:33:49:97:84:ce:e3:28:5b:
67:b0:bc:0f:ce:77:7d:0e:30:37:a4:a7:87:51:e9:b0:a0:76:
6f:3d:6a:0a:25:2e:9a:17:35:1e:be:9c:ec:4e:b8:d7:ef:5b:
12:77:79:af:1e:3d:ea:36:86:1c:d8:f2:fb:e7:9a:6b:4a:c7:
bd:47:ac:b6:83:4c:2c:2a:b0:58:c0:86:f5:6c:53:6d:c8:e2:
6d:12:75:0a:70:08:4c:03:77:26:9b:a3:7f:d4:30:39:f8:33:
49:cb:3d:f3:5c:de:5a:99:a0:fe:07:df:07:3c:59:55:ce:57:
a5:6e:da:2d:91:ca:d7:e8:44:fb:db:b7:8d:a2:7b:21:33:61:
13:eb:02:9c:01:87:5e:6f:fb:ab:8a:d5:63:b3:1f:aa:19:59:
7b:46:aa:97:40:c0:d6:47:32:57:20:c8:35:32:67:01:12:2e:
c7:49:b5:22:5f:41:2c:2d:ff:f6:bf:91:00:33:70:b5:18:14:
a5:90:47:fb:1e:4b:2b:fa:f8:55:fa:8b:a1:f1:b6:2e:d7:76:
b3:5a:21:e6:ec:17:13:3e:d4:4f:5d:61:dd:0f:8f:69:7b:8e:
35:0d:d6:00:76:bc:78:3b:93:20:94:e0:84:f1:d9:1a:29:96:
99:bd:ea:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSw8UpfB7YKtbIJb1Me4T5KXR9aQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh
MmU2ZmVmZTAeFw0yNjAzMjUxMTAwMjVaFw0yNjAzMjYxMzQxMjVaMDMxMTAvBgNV
BAMTKEVDRjgyNjE2OTdFMzJEOEU5RkIwRTlCMjdCQkZBOTczODEyOTFERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCccma+lNAdCJowl1+UT8jSxi/0
qpG5nvZLjDsToAjelbGyu9taEBhMLt1qHEAmbT3ePe9UVih/tuPf9DLublVmav2G
oxOVVGJ+gSm49wd/78T4+b9CRQNONgLb2liEy8kkvWtEgD+5sOg7/L9DBwLL0nZv
SAH7379/Kznkf22SWekpgXdjBcJBpQqgGstdPsxMyc1luyM9mzyfMBu2ev51ph8e
UPEANkjPRMqOiwr8MQ92q9Dcicm71oQv9ATSaHSZyQM86lKER0/zPq/Bk6XQjEC8
oMoDCjUs+N40J46jYqeEu6/pdP7alVrEXzyKOeByu1sIrSYS51n6TwIrXJPfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU7PgmFpfjLY6fsOmye7+pc4EpHfswHwYDVR0j
BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl
MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM
bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03
YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5
N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQm7CVSMuyZzkzDNJl4TO
4yhbZ7C8D853fQ4wN6Snh1HpsKB2bz1qCiUumhc1Hr6c7E641+9bEnd5rx496jaG
HNjy++eaa0rHvUestoNMLCqwWMCG9WxTbcjibRJ1CnAITAN3Jpujf9QwOfgzScs9
81zeWpmg/gffBzxZVc5XpW7aLZHK1+hE+9u3jaJ7ITNhE+sCnAGHXm/7q4rVY7Mf
qhlZe0aql0DA1kcyVyDINTJnARIux0m1Il9BLC3/9r+RADNwtRgUpZBH+x5LK/r4
VfqLofG2Ltd2s1oh5uwXEz7UT11h3Q+PaXuONQ3WAHa8eDuTIJTghPHZGimWmb3q
7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:33:25 2026 by rpki-client