
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier: 5ENuxaEaQBqo6w60xC1q9VEE/py6B1KkUYuMm7YYXzs=
Subject key identifier: AA:C0:47:B5:CD:2F:CF:1C:66:DA:B9:63:EC:CA:00:17:8C:DB:57:73
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 1012C5BA98C8D623D0020E4FA165FAB82C7F50E1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number: 0355
Signing time: Thu 26 Mar 2026 11:35:07 +0000
Manifest this update: Thu 26 Mar 2026 11:30:07 +0000
Manifest next update: Fri 27 Mar 2026 14:10:07 +0000
Files and hashes: 1: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
2: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
3: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
4: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
5: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
6: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
7: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
8: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
9: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: vsMJXs46KcU4rizVxIO04/pdyJQ1o41eyf28N3alBuk=)
10: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
11: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
12: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
13: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
14: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
15: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
16: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
17: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
18: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
19: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
20: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
21: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:12:c5:ba:98:c8:d6:23:d0:02:0e:4f:a1:65:fa:b8:2c:7f:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Mar 26 11:30:07 2026 GMT
Not After : Mar 27 14:10:07 2026 GMT
Subject: CN=AAC047B5CD2FCF1C66DAB963ECCA00178CDB5773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:6c:3b:b4:dc:58:f8:b4:af:d5:87:db:ce:
53:fd:07:94:7c:47:52:9f:dc:24:4b:cb:43:ed:e8:
be:e7:f2:61:68:29:70:c9:4d:4a:92:bc:b5:17:08:
22:f6:19:7f:87:8a:d7:b7:0b:fb:9f:d1:d2:96:ae:
64:a3:8f:3a:02:40:18:7f:a0:9c:e0:13:11:76:9a:
3d:1f:d8:fa:5a:fb:38:63:a2:8c:e8:e0:35:5d:01:
9b:97:ec:4d:46:4d:20:f1:e1:a7:db:28:2e:a6:ad:
83:15:5b:f8:c2:af:ae:9b:45:2b:d4:8b:7f:15:c3:
04:52:09:85:00:e7:01:62:9d:f0:b6:6e:7d:96:b0:
c4:56:a8:cb:52:45:9d:18:33:9a:74:9f:b1:a7:85:
24:27:fe:c3:26:43:19:a7:33:02:ee:79:b3:e4:e4:
92:ca:8c:f7:d2:c9:3d:bd:18:86:ce:bc:3b:14:20:
a9:37:33:7b:6a:3b:0a:82:0d:04:86:95:f4:e7:a3:
04:62:d5:db:da:36:86:2e:02:9a:3f:30:2a:ea:80:
db:17:84:b6:4d:aa:a8:1f:50:fc:4a:2c:1b:9f:86:
3b:a4:89:c2:c7:a8:88:8e:54:9c:86:c5:22:3f:23:
c3:62:a0:55:ef:65:a1:c1:0a:7a:40:20:68:17:8d:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:47:B5:CD:2F:CF:1C:66:DA:B9:63:EC:CA:00:17:8C:DB:57:73
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:77:7f:d9:c6:4c:97:40:7b:fb:58:33:42:4e:37:22:65:
02:e9:31:85:c3:b1:28:37:b0:4a:16:92:10:dc:38:fb:95:a5:
c5:4f:9e:a4:75:39:d6:0f:8b:ec:15:7d:9a:6a:18:b7:8c:e8:
b2:ee:34:35:36:4a:72:b3:83:2d:50:6c:d5:9f:28:cd:98:43:
fa:53:1e:85:bf:08:71:a5:1b:32:6e:72:2d:29:99:5a:dd:43:
88:71:50:5f:a0:d9:d5:c8:14:42:fd:b7:4b:a7:f5:0f:06:2f:
9c:6b:97:0f:d4:3b:f2:bd:c8:59:c8:e9:5a:fa:c4:a8:a4:f1:
df:76:88:33:20:c8:82:51:8a:28:ee:4e:e1:25:0d:74:59:eb:
b6:0b:b8:08:77:58:ca:db:25:f8:fe:8e:4b:0e:08:33:23:47:
ea:e7:44:d3:11:b3:9e:12:f5:06:09:40:16:13:c3:68:c9:a0:
76:e9:89:e8:bd:da:f8:f2:50:18:07:21:a1:47:e6:84:2f:b1:
fa:1e:4a:88:7f:d2:0c:cc:03:14:2c:e6:74:89:31:6a:8a:e4:
bf:a9:71:33:d9:90:e4:c8:57:48:34:75:3c:64:40:44:71:79:
05:c3:53:8c:13:84:4f:79:17:69:12:94:ed:56:8b:17:ca:f3:
89:5f:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:26 2026 by rpki-client