
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier: evfKwh0onAME93P6+ENtXikcQsfEpcsQIOTx8IQTkn8=
Subject key identifier: E2:9C:4B:D6:20:99:9C:B0:51:20:91:00:13:85:28:15:45:C4:E5:87
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 046D6FDA860713996228FEC47EF0BE170F51DC46
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number: 044E
Signing time: Fri 25 Sep 2026 05:32:17 +0000
Manifest this update: Fri 25 Sep 2026 05:27:17 +0000
Manifest next update: Sat 26 Sep 2026 06:48:17 +0000
Files and hashes: 1: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 55OIZeYx9lO5L3iwh+YJZa5YKyQFWW57WQGezPVY7YM=)
2: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=)
3: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
4: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: wegkFWU1EZA1Mssy7fb+d6ksiTZDv3iFQxERq0QAMF8=)
5: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
6: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls=)
7: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
8: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
9: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
10: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=)
11: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=)
12: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
13: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
14: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=)
15: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
16: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
17: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
18: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=)
19: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=)
20: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=)
21: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
22: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6d:6f:da:86:07:13:99:62:28:fe:c4:7e:f0:be:17:0f:51:dc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Sep 25 05:27:17 2026 GMT
Not After : Sep 26 06:48:17 2026 GMT
Subject: CN=E29C4BD620999CB0512091001385281545C4E587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:a9:ae:a7:b1:14:0e:84:20:af:6d:a3:88:
83:b4:91:cb:ba:42:cd:85:d5:8e:be:c8:85:49:5f:
83:68:90:be:36:a1:3b:f0:22:4d:fd:f7:e4:c9:f8:
af:88:22:5d:8c:eb:5b:e7:ff:93:02:34:95:5c:de:
12:53:24:37:52:6c:fb:35:56:dd:1c:a5:2e:74:82:
3c:a4:db:8a:0c:20:a9:6d:47:bb:86:28:4d:74:1c:
99:be:e6:78:94:39:a7:ed:cb:2a:c6:94:99:13:43:
e8:79:6c:13:09:d4:4c:17:11:7d:ed:4f:3c:97:24:
7d:cc:15:47:00:4a:6e:a4:b6:de:f7:19:a8:a8:16:
6b:87:ee:92:0a:00:01:3b:0e:1d:e3:39:7a:2d:03:
3c:4e:0c:c4:a5:38:e7:56:3e:4a:c3:d3:db:55:cc:
be:4d:05:36:74:9b:26:f6:52:62:a0:64:0a:a0:0a:
9e:d6:41:1c:38:1c:0b:cb:38:80:d6:fa:6c:c4:ca:
05:aa:c5:3c:a2:a9:22:da:5c:10:ee:d1:92:64:ab:
d1:48:44:b9:85:ff:0b:2f:ca:82:3e:be:ce:1a:dc:
d6:30:ce:14:47:3f:7b:e5:9c:7a:11:08:b7:61:58:
05:67:ef:ae:43:00:36:fc:af:ef:c9:f1:5d:b6:43:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:4B:D6:20:99:9C:B0:51:20:91:00:13:85:28:15:45:C4:E5:87
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:ab:aa:a1:a9:bb:68:70:aa:0c:20:43:d1:93:b6:80:6d:
b2:80:5f:bc:d2:f4:b8:21:9e:cd:1f:e5:7e:6d:c2:82:45:31:
80:8e:a4:67:45:9b:f8:50:7d:75:f6:e0:1d:07:11:84:dd:d1:
13:74:fd:01:4c:2e:30:a9:97:28:e2:53:b0:fa:9c:33:cf:a9:
e6:f4:b0:8f:55:ee:96:ad:6f:8f:98:1c:88:13:46:48:88:7f:
4f:e4:c6:16:e5:55:c7:1b:34:00:97:6f:14:5b:82:2f:9e:a3:
22:89:4b:c2:51:90:bb:46:95:3f:c3:6a:52:99:26:57:8d:4c:
9b:4c:0a:73:5b:ec:88:c3:3c:1b:a4:3d:ca:d6:e1:19:3e:75:
d2:49:f5:5c:bf:0d:7b:fd:d6:4b:fa:81:ab:df:a9:66:6f:5c:
5f:0c:7b:8f:0a:14:34:8a:8c:97:c9:5a:c1:3b:3d:ce:a1:46:
9c:24:47:6b:d2:6a:4d:fa:26:99:db:3b:68:01:77:38:31:b6:
f9:22:ba:ea:44:67:e3:2e:e5:5a:1c:95:9e:0a:f0:bb:73:b9:
60:0c:03:71:51:91:5e:b0:84:6b:40:05:df:96:14:33:26:32:
09:7f:21:33:bb:33:a8:48:f6:8a:83:4b:cd:fe:7a:ca:e2:94:
70:8c:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:57 2026 by rpki-client