
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier: qxk0UwiuSLVd/n6NREuNg7nSX3xfBZNhkceEK95pPig=
Subject key identifier: EA:40:55:BD:53:7E:F4:2D:45:A0:8E:A7:44:B9:9A:C4:13:77:11:F4
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 35C5787A34A1BDF3460DB6B7AEB31D71778A982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number: 62
Signing time: Fri 27 Mar 2026 22:40:13 +0000
Manifest this update: Fri 27 Mar 2026 22:35:13 +0000
Manifest next update: Sat 28 Mar 2026 23:34:13 +0000
Files and hashes: 1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
2: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
4: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
5: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: 8LsUGwRByi2TIIUKzFk5/nA8LfYqYbS0/sLzjMakDVI=)
7: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 23:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:c5:78:7a:34:a1:bd:f3:46:0d:b6:b7:ae:b3:1d:71:77:8a:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: Mar 27 22:35:13 2026 GMT
Not After : Mar 28 23:34:13 2026 GMT
Subject: CN=EA4055BD537EF42D45A08EA744B99AC4137711F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:5f:5b:d7:07:6e:f7:f3:3c:d4:a4:4a:9e:
38:fb:ee:eb:56:cf:9b:de:af:1b:ff:0f:6d:27:5a:
1c:84:b2:bb:e7:69:b6:9f:43:82:cf:b0:eb:0e:0c:
6d:4b:7e:74:02:6e:b9:f6:29:50:4f:11:82:8d:89:
b4:71:36:ec:d4:e7:80:0a:fd:33:ab:7c:e7:b3:ad:
96:12:99:10:11:47:81:06:80:e8:70:6f:7e:52:ed:
ac:a1:73:7e:60:2f:07:aa:bf:9d:17:9c:c3:45:71:
c5:45:ba:06:78:a5:9a:54:f8:23:b9:a0:6f:34:9a:
bd:d3:69:c5:7d:d9:15:38:b4:2f:ce:7d:e8:eb:77:
e9:b4:5d:37:a1:e1:8e:7c:fd:81:c0:1b:5f:fb:08:
77:e7:5d:49:02:de:fd:31:2b:5a:83:d6:df:49:d5:
8c:e4:b8:f1:4d:3f:dc:27:0a:68:3e:d1:52:ca:3e:
16:23:d7:6a:b3:57:d7:23:37:54:1e:17:95:dd:c2:
59:fd:67:c0:4f:4f:b1:de:f0:b1:e2:77:dc:00:07:
54:c9:3a:02:cf:39:27:0b:a1:0d:99:b2:cd:f7:5f:
a8:86:f5:c5:dd:5f:7e:00:68:fb:86:c9:a8:78:20:
a3:a4:ba:c7:24:fc:8b:55:3c:e8:a4:8b:c7:fb:ef:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:55:BD:53:7E:F4:2D:45:A0:8E:A7:44:B9:9A:C4:13:77:11:F4
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:60:6f:0e:ab:fb:80:f7:67:45:b3:f5:b5:d1:3f:c1:ce:
78:f0:e8:a2:e0:c5:20:c5:74:64:d5:74:ac:36:e2:e5:db:ba:
bf:e3:c1:c9:21:18:62:1c:68:a8:0c:7b:4f:fa:b1:24:94:51:
e4:73:0b:47:c8:a3:44:99:eb:ff:24:7f:9d:db:c7:f5:91:ab:
17:9a:84:ec:21:4a:fa:55:08:01:7e:c4:34:ed:84:58:ef:f9:
89:bf:37:33:c4:91:80:fe:05:0f:8f:40:55:51:ac:41:db:0f:
80:07:1d:8c:24:02:16:7d:12:22:f4:92:55:e6:d2:bc:32:f5:
86:dc:1d:9d:05:27:1d:a3:aa:d2:cb:18:4b:0e:df:9d:1c:9c:
6a:c0:96:6a:ed:0b:02:c7:ff:1a:eb:f1:09:d3:b2:4f:aa:cc:
bf:f7:e9:7e:e6:c2:79:62:c4:06:f0:e4:fa:a2:d4:87:e2:6c:
cd:55:a2:68:19:10:3e:ed:02:b5:46:86:66:2e:43:af:2b:05:
d3:b5:cf:ef:74:d2:a4:30:81:41:04:f5:94:e5:ad:a0:92:87:
e0:1c:8a:f0:79:0e:69:87:63:30:0d:e0:9f:15:c3:c7:cb:9d:
f3:73:63:7b:2a:bf:ca:7a:7c:d5:d6:d0:03:4f:ac:4f:70:8a:
21:20:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:35:16 2026 by rpki-client