
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier: 2J3QMJksOTjuYhw11gRVC0aqFEHSsU/vJuBRHC9lhd8=
Subject key identifier: 50:4A:65:EB:BF:F3:8A:48:02:F0:E3:B6:5E:E4:CB:F2:BA:F7:B5:CB
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 604DCCD4CC7C73F52BCAA38F8F6D486F7DC1F14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number: DD
Signing time: Sat 27 Jun 2026 19:26:18 +0000
Manifest this update: Sat 27 Jun 2026 19:21:18 +0000
Manifest next update: Sun 28 Jun 2026 21:29:18 +0000
Files and hashes: 1: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
2: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
3: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
4: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: VVBiMbAh8Dd14g6MWf6C8D3ieBUQFqOdq43lrgEUIko=)
5: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
6: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
7: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4d:cc:d4:cc:7c:73:f5:2b:ca:a3:8f:8f:6d:48:6f:7d:c1:f1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: Jun 27 19:21:18 2026 GMT
Not After : Jun 28 21:29:18 2026 GMT
Subject: CN=504A65EBBFF38A4802F0E3B65EE4CBF2BAF7B5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:23:40:5e:94:9f:9d:b8:fd:0f:43:a8:93:
1c:15:cc:19:be:24:f0:c2:60:7b:42:3f:f2:34:39:
62:4d:fe:79:71:e4:56:eb:ef:e2:e2:ea:33:07:bf:
4c:f6:fc:6b:ae:0a:c2:90:c2:ca:58:4d:3d:6c:38:
ba:bc:a3:50:f6:11:98:d5:6a:57:2c:e7:24:71:df:
54:eb:6e:56:f1:68:c6:ef:81:13:bc:e0:3a:b1:8a:
99:54:56:bf:72:1e:2f:ae:f1:12:8d:44:47:80:49:
01:20:04:88:be:9e:48:a0:fb:c5:2e:d6:29:21:6d:
e9:f3:97:ad:d9:b8:1d:fe:75:cd:10:7f:51:19:5a:
bb:dc:e6:92:fb:1c:22:c9:a2:4c:6e:c6:6e:f0:98:
4e:42:d0:73:51:29:cf:92:c7:18:19:79:27:e8:34:
04:df:58:e4:29:d7:5a:65:7e:82:79:4e:28:09:53:
a4:f2:b9:08:71:8c:cf:48:d5:4c:c0:88:46:8f:2b:
ec:54:16:5d:2a:95:2a:b3:1a:a5:15:eb:82:5c:c8:
29:22:fa:e0:97:c9:00:e3:4a:39:ab:08:67:45:19:
05:e5:55:f7:ba:e4:ca:48:f4:be:f7:51:ac:2a:02:
cf:a8:b0:c8:66:4e:9a:4d:62:f4:5b:da:05:00:b8:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4A:65:EB:BF:F3:8A:48:02:F0:E3:B6:5E:E4:CB:F2:BA:F7:B5:CB
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:39:35:96:14:ca:51:1e:57:b2:44:ec:4e:f2:7b:f6:35:
aa:da:73:f7:8b:b7:38:41:20:d2:63:3d:0c:4d:92:b4:60:45:
c0:d5:bd:ef:f6:0f:43:a1:0c:53:41:30:53:83:d3:6c:64:3b:
1a:46:59:34:0a:c5:75:0c:0a:48:14:8e:dc:d1:04:00:d1:23:
2d:84:e9:11:13:d1:0c:f3:7f:a5:b8:c8:04:93:94:60:52:f1:
ce:81:9c:0a:e0:b5:14:1e:fc:c7:fc:54:c5:d0:a0:87:ee:69:
68:b9:59:71:9d:fa:88:89:d4:04:03:5e:14:10:85:05:77:e9:
bf:bc:f1:ac:ee:61:fb:78:9f:3c:68:ce:c2:b9:ac:57:8c:d3:
85:23:4e:62:27:c4:db:e1:d5:f6:a2:59:92:eb:df:ba:c6:90:
30:d0:5d:a0:57:52:a0:91:59:6f:b5:8d:ba:24:3e:10:9a:1b:
f6:aa:53:d0:ab:8a:96:7b:a6:14:39:7b:43:08:25:03:0a:df:
f0:07:7a:92:d9:da:6d:88:ad:b3:06:3d:71:12:07:b6:8b:7b:
be:dd:42:06:98:3b:41:f6:cb:75:f6:61:bd:76:5f:4b:46:02:
fd:70:c2:49:9c:a3:2f:4e:04:3f:31:18:70:2d:c7:cd:f5:da:
d6:a9:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:29:07 2026 by rpki-client