
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier: xwgtXTttIGqTvm8ZFnUMIMrd5Z79DylilRzHtJr0sRM=
Subject key identifier: E6:48:38:11:39:4C:85:7F:E6:46:84:59:8C:07:D1:8F:8B:32:1A:10
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 24660492E41EE112C877FE82DBD44835D273D5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number: 0154
Signing time: Fri 25 Sep 2026 03:12:22 +0000
Manifest this update: Fri 25 Sep 2026 03:07:22 +0000
Manifest next update: Sat 26 Sep 2026 03:22:22 +0000
Files and hashes: 1: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
2: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
3: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
4: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
5: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: UeCacqkEcB0+vbYb3AJRf2Gl1fPar9qiGbsC5+VbNFI=)
7: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:66:04:92:e4:1e:e1:12:c8:77:fe:82:db:d4:48:35:d2:73:d5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: Sep 25 03:07:22 2026 GMT
Not After : Sep 26 03:22:22 2026 GMT
Subject: CN=E6483811394C857FE64684598C07D18F8B321A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:a5:7b:76:ef:ac:73:59:1d:2c:ac:67:0e:
fc:21:35:bc:90:7c:8c:dd:be:23:8c:23:76:22:3f:
ee:4c:4e:65:70:0e:80:f4:43:58:2c:2c:af:92:5c:
90:97:55:44:5b:2f:aa:1c:77:be:30:b5:1b:e0:19:
8c:83:30:fc:8b:4d:9b:b7:b4:33:86:0d:b4:3f:f2:
6e:01:c6:8d:74:df:e0:28:77:f4:1b:b3:59:4c:d9:
4b:00:c6:f2:04:19:da:d9:51:4a:d8:38:98:a0:c1:
b2:a2:05:50:19:1b:1e:fd:e9:63:12:71:05:12:92:
d9:31:9b:6b:9a:38:0b:6c:a9:0b:73:54:81:f1:06:
1c:44:b3:46:5c:c1:c2:a5:1f:1b:45:25:3e:04:9d:
d0:95:7f:a9:24:76:be:74:aa:a2:da:a4:95:2c:a3:
6b:26:6d:34:95:2c:3a:1c:e7:8c:9f:96:3a:55:94:
05:bf:ae:cf:35:11:cc:7a:f1:a4:df:16:c9:3e:73:
03:af:98:91:61:61:d8:f7:23:21:86:7c:70:f8:dc:
8a:ca:4c:14:cc:02:88:d1:76:de:61:d6:9e:39:66:
f6:01:01:2d:ca:9d:da:db:d8:c0:1f:91:95:19:9f:
e9:54:a8:7a:c8:be:ea:4d:80:69:48:a9:8f:14:9e:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:48:38:11:39:4C:85:7F:E6:46:84:59:8C:07:D1:8F:8B:32:1A:10
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:33:42:11:fa:e8:16:72:a5:fb:e9:5e:55:7f:52:c2:ac:d2:
1f:57:e3:05:73:c9:4f:5f:f1:3a:96:e5:7a:21:f9:30:5a:e4:
ed:f5:60:2f:6f:ba:85:ca:e8:b6:a1:e5:46:da:12:95:38:86:
79:ac:87:99:09:22:32:6b:4d:54:c5:42:ed:d7:bc:f8:32:a2:
05:07:9f:90:c5:96:97:6d:ce:dd:e6:5d:d7:e4:86:88:39:a7:
e6:b0:6d:39:d9:cf:15:7c:a2:d4:e2:65:e8:9b:1d:71:65:c3:
52:68:96:1e:fe:74:75:18:e6:e1:f4:f3:bc:17:3c:53:e3:44:
b8:2f:24:0e:a8:82:e7:b4:35:f9:eb:b4:f3:48:19:42:21:7c:
4e:79:24:e9:68:8a:03:82:88:44:ad:53:f0:57:4e:59:c7:9f:
a5:d8:9d:7f:dc:91:c5:82:e1:aa:d0:57:0a:5a:40:c1:f1:25:
d0:25:dc:ef:a2:09:d2:55:94:6a:07:53:07:61:2d:cd:81:1b:
51:09:5e:a8:42:b8:85:d2:d3:0d:08:c5:0e:b3:d6:e0:11:81:
ab:f6:ed:16:e9:7e:7e:3d:fb:3c:e1:54:cd:58:4f:88:34:d2:
0b:82:8e:98:5a:ea:65:0b:56:86:e6:c9:f7:72:13:f3:27:79:
8a:0a:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:04:56 2026 by rpki-client