
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier: v6HylyHiHwde55DtuCSSkSUDDhSUZdsV2jB3pusAoUk=
Subject key identifier: 9C:44:76:58:A3:B3:E1:A6:82:3A:61:C7:EF:A8:45:FF:80:64:47:E3
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 1DCCA6D50D76C16227757E8C277BEBFF37F1A8BA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number: 03D7
Signing time: Mon 29 Jun 2026 07:05:16 +0000
Manifest this update: Mon 29 Jun 2026 07:00:16 +0000
Manifest next update: Tue 30 Jun 2026 08:03:16 +0000
Files and hashes: 1: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=)
2: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=)
3: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
4: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
5: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
6: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: hN4TPaErcxG+v3ZaEmYXvaFkga00gi9gsVLXSr8vhHE=)
7: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
8: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=)
9: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
10: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
11: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
12: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
13: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=)
14: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
15: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=)
16: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
17: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=)
18: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
19: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
20: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
21: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
22: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cc:a6:d5:0d:76:c1:62:27:75:7e:8c:27:7b:eb:ff:37:f1:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Jun 29 07:00:16 2026 GMT
Not After : Jun 30 08:03:16 2026 GMT
Subject: CN=9C447658A3B3E1A6823A61C7EFA845FF806447E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:a9:da:00:09:e6:1c:b2:b8:3d:73:4a:59:
a3:6e:74:d5:27:15:83:df:cc:ff:93:35:33:3d:14:
28:3d:91:55:f0:ef:49:d5:ed:d3:65:58:3e:2d:0d:
0f:b5:63:53:7f:70:1b:c9:cf:22:ee:3b:a6:ad:00:
29:4a:63:f6:1f:b7:03:73:8c:ba:d9:f5:b1:59:8e:
c2:27:9b:1e:c2:20:d7:da:6c:0e:8d:63:47:15:05:
b4:02:7d:be:19:88:7c:bd:9d:b0:d7:91:5d:c8:13:
ee:71:07:f3:1f:8c:5f:01:4c:5b:30:bd:b8:63:cb:
d4:5f:84:1a:ab:a7:e4:b4:66:2b:f6:8d:68:89:63:
38:8c:77:71:00:a5:5d:2b:68:63:bb:e0:35:63:d0:
74:b9:80:a8:22:d9:b7:ac:b3:d7:1c:57:7b:e9:31:
19:8b:a2:e6:e1:2a:b6:22:44:4b:39:6e:03:7e:c5:
fe:bc:13:62:6b:25:56:4f:5a:9a:a5:95:19:20:dd:
21:02:19:37:f1:b7:eb:f2:eb:76:21:92:f8:6a:0f:
df:0f:e7:0e:92:57:c6:6c:46:38:b6:3d:89:37:34:
ee:ca:e0:a5:f7:54:76:7c:73:4d:f0:f8:69:fc:07:
c4:1a:cc:49:92:8a:9d:b0:fd:95:a3:ff:9b:bd:08:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:76:58:A3:B3:E1:A6:82:3A:61:C7:EF:A8:45:FF:80:64:47:E3
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:87:ac:48:f3:c4:a4:32:15:bf:ce:72:d0:f4:5c:96:ff:bf:
05:41:5f:e3:fe:11:db:47:12:bc:7e:a3:9c:fb:1c:68:ad:40:
4f:f8:e5:f9:8c:dc:72:bc:a8:30:9c:e0:7e:71:0b:f8:47:15:
f1:7e:6d:9d:ef:2f:2c:9b:0e:da:ca:17:dc:e3:a0:8e:3c:cc:
43:92:9d:d6:e5:8b:45:09:29:98:41:60:3e:a1:48:dc:86:1f:
d2:69:e9:bb:0b:34:06:0b:67:1f:04:39:75:06:22:fd:9b:c1:
ed:dd:1a:f9:f7:9a:9b:d9:45:a2:e1:c4:73:19:ea:35:74:b8:
35:83:f3:aa:4f:4d:57:b3:e2:51:d5:bb:99:9e:8b:98:1a:dd:
f6:80:85:a1:21:d9:38:dd:3c:e4:d8:b0:0f:0e:c2:c4:8b:57:
84:92:cd:cb:c6:25:35:33:53:ac:b1:5c:6c:12:1e:69:f4:95:
ca:d9:58:09:d3:bc:7d:42:29:94:03:93:f5:ce:5a:15:f1:3f:
81:fc:63:e9:4f:11:ee:02:87:8d:02:58:6b:6d:24:0b:4a:b2:
d2:b2:b4:10:01:f2:49:3c:ed:9d:91:a3:77:3d:6b:86:14:b2:
4d:2b:b9:cd:51:c4:8a:43:44:20:60:f7:65:88:f3:65:1d:73:
5f:c8:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:14 2026 by rpki-client