
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier: Sadj7TZMGMlaNYHQb7OevXC9f4lmGKETGRlA9elzOk0=
Subject key identifier: 3A:54:7F:5A:84:5D:CD:1C:95:0C:AE:15:6D:BF:5E:6C:CC:DE:D3:B4
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 0BF561BB467996473185C36ADF54E151BAC9BDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number: 06EB
Signing time: Sun 26 Jul 2026 22:03:13 +0000
Manifest this update: Sun 26 Jul 2026 21:58:13 +0000
Manifest next update: Mon 27 Jul 2026 23:09:13 +0000
Files and hashes: 1: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
2: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
3: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
4: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
5: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: /DmT9jDgPBJnORjXPqoO2OikZb1TZUdRaJAnGGErjQc=)
6: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
7: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: 5YJLPDaGqAiDF0G+tUXhPNg3tA1r1b/VO1ZV0rM38dQ=)
8: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: WTJQYj4kO8Tl738Oa1dFz0b2fCNqs4KUQg06eTa2Ut4=)
9: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: k9/Ch376K2xC47DoFkOrbQT45cHpJzonkazNFrVSeRg=)
10: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: +/mIlEx3xxWoZl+krpHUaeIjRRfIayd7cektA0/iFpI=)
11: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
12: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: q68rGtvPxTIjEDPvv2TVoJliNz54C+gDFrWRdJOsUl4=)
13: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
14: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: CUCiF/k585/9iZ4cIVeL+uZRs3sFRlr/XXX+Til3tEw=)
15: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
16: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
17: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
18: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: l2moL/0n3AUQ5cZa8s9n/aY4gBFkHmTPj+K3TgDTaaI=)
19: 36322e3139322e3137352e302f32342d3234203d3e2039303039.roa (hash: tnNyChr4oxUcnojqJuMajG3DuagFZQP9gO2VaWpCSS0=)
20: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=)
21: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: yLC1oKoMdjJrSS42z4vH04rNWh8jStXc4dl58WWWeFU=)
22: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: KdtoWFKZmupxeYv8ZtH2UnlJsLJFh2Np3sbeCuilvNs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:61:bb:46:79:96:47:31:85:c3:6a:df:54:e1:51:ba:c9:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 26 21:58:13 2026 GMT
Not After : Jul 27 23:09:13 2026 GMT
Subject: CN=3A547F5A845DCD1C950CAE156DBF5E6CCCDED3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:f8:bd:39:ca:e2:d0:af:1d:4d:44:77:17:
84:50:be:71:43:92:c7:9f:25:c0:83:b1:01:6d:47:
fe:49:a5:1b:7e:a1:02:11:8e:a7:e8:35:6f:65:36:
cc:0e:91:73:40:09:d1:1d:94:e8:3f:f8:1e:e5:7f:
dd:b2:ef:f4:34:b6:15:e1:7f:08:c3:2c:ef:ca:26:
57:4f:ac:2a:ec:7e:78:a8:3e:e0:5a:b4:4b:84:d4:
01:05:88:0a:72:89:4f:49:af:b5:68:e4:91:df:12:
43:2c:ae:7b:24:21:3a:8a:f4:68:c7:2b:2d:b3:3b:
0c:58:cc:1c:e6:d6:c7:7a:b9:73:02:17:ff:3c:70:
0d:f8:77:b6:44:be:63:3f:91:6b:a9:ca:aa:5b:26:
85:67:a0:ae:0d:2a:02:22:87:6a:5b:a2:1f:dd:53:
92:cd:b2:6e:36:d1:4d:c0:87:5e:16:bd:df:a5:0d:
c3:81:d1:da:a3:fa:2d:3c:e3:6b:95:6c:c2:e4:fb:
36:ad:98:14:84:63:f1:63:61:0c:a7:af:04:35:dc:
65:a9:c4:59:fa:3e:c6:3d:b7:7b:98:0e:38:79:fa:
29:21:43:28:f0:85:ca:2d:20:ea:34:79:a5:8a:f0:
85:0b:28:76:14:68:cd:21:de:0b:cc:0b:7a:8c:25:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:7F:5A:84:5D:CD:1C:95:0C:AE:15:6D:BF:5E:6C:CC:DE:D3:B4
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4f:9e:bc:ba:85:27:f5:b5:eb:34:40:8c:1b:84:b2:22:63:
f7:1f:a1:6c:62:55:1c:f5:cd:8a:93:a3:00:45:7f:d5:e9:7c:
80:ef:62:18:4e:94:d2:23:b8:22:e5:a0:5e:74:eb:b1:51:2a:
50:f1:ac:87:73:d4:ec:02:49:4e:04:e3:b7:ed:ee:6e:3d:61:
e2:5c:5c:d8:e1:3b:de:48:f8:d4:44:73:01:00:55:eb:77:b1:
d0:7d:3c:9d:27:c3:b0:6f:a3:2b:63:fe:be:d1:ff:5b:81:ce:
c6:2d:d2:05:cf:22:d5:e5:d1:69:3e:8c:04:f0:85:0b:8c:b8:
f3:fd:53:29:b7:75:6b:e7:ab:90:1c:5c:95:50:6e:a9:8c:a9:
ce:3b:31:e4:3c:34:e4:bf:f4:43:74:4f:15:bb:e3:dd:0d:b3:
8a:db:04:fb:5e:81:31:e2:b4:3a:f1:e0:2b:07:63:d8:52:e3:
ac:cf:16:b0:07:8e:b4:d3:02:82:1e:c3:cd:de:dc:61:3f:51:
ff:af:d9:f6:6c:0e:47:0b:f0:c5:44:33:e7:10:b2:1f:f3:18:
6a:d3:d8:7c:b6:0c:bf:69:6e:75:fa:19:1c:aa:27:85:58:fa:
15:34:c0:58:9c:37:3f:34:a4:da:6e:5f:57:1a:73:cb:7a:8c:
06:b8:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:07:26 2026 by rpki-client