
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier: ZTdUrbbMz67YOBCPNWhUbxXjoXGSX/c0CTwIMQ8OHl0=
Subject key identifier: 45:74:C0:39:A6:33:64:30:B8:00:7B:2B:54:84:AC:21:CC:A5:9F:35
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 33E65194AA5E6A6BCB449FC7F147099EDC5D9344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number: 9F
Signing time: Tue 12 May 2026 12:55:45 +0000
Manifest this update: Tue 12 May 2026 12:50:45 +0000
Manifest next update: Wed 13 May 2026 16:33:45 +0000
Files and hashes: 1: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
2: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
3: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
4: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
5: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
6: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: U/KqjsyiUlY/9OEIvLbGgIWaUUCB74/iIGjz2wSPfWA=)
7: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e6:51:94:aa:5e:6a:6b:cb:44:9f:c7:f1:47:09:9e:dc:5d:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: May 12 12:50:45 2026 GMT
Not After : May 13 16:33:45 2026 GMT
Subject: CN=4574C039A6336430B8007B2B5484AC21CCA59F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:ca:16:3c:5d:14:7b:2a:7c:2e:26:04:21:
50:3d:4b:4f:07:67:40:09:8e:63:3a:7e:d9:a0:6d:
6e:af:4b:43:a7:b0:13:1e:52:f0:11:d5:48:74:95:
4a:c2:ff:01:cd:cf:1b:45:09:f0:ad:46:2a:53:d3:
47:15:72:bd:3d:08:27:54:55:d4:39:2e:fc:b0:83:
91:8a:38:17:c0:c0:ed:71:b5:05:db:70:8a:06:4a:
0a:37:64:05:a3:88:2c:67:1e:88:32:17:f3:c2:fd:
03:a7:60:f2:51:b5:df:ed:e0:fc:8e:46:05:cf:ae:
1e:a5:4c:8b:25:44:0a:c0:a4:81:c7:6f:83:d6:a7:
18:a8:79:4a:3f:8a:61:01:16:0d:26:2d:0a:0b:83:
7e:bb:50:7b:8c:f6:ad:28:e6:fa:4b:12:aa:1d:fb:
2f:ec:7d:43:8f:c7:67:43:77:f2:df:51:1b:1e:4e:
e3:e2:fb:b2:19:35:d4:ed:75:4e:9f:bc:fd:3b:84:
56:8f:7a:a6:d0:e1:9d:f9:cc:49:0c:95:68:90:bc:
77:a8:62:0e:7b:b2:82:1b:f2:f7:62:7e:25:72:f4:
11:d1:5e:62:ab:be:59:13:99:5f:5d:75:26:d2:7c:
45:d8:6d:d4:8a:7e:ea:d4:e5:e9:7b:6b:63:5c:9a:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:C0:39:A6:33:64:30:B8:00:7B:2B:54:84:AC:21:CC:A5:9F:35
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6f:ff:39:91:f0:1b:8e:81:50:47:05:dd:d1:8c:df:b7:3c:
27:86:3e:f8:03:4b:c5:f9:51:0e:90:18:7a:55:b8:38:02:ad:
32:73:9d:39:03:3a:76:89:59:7c:ba:db:ca:d3:e9:d2:fc:b6:
84:0f:3b:19:40:65:e6:32:3b:5b:22:a6:f6:b7:25:1c:7c:5c:
8b:2c:1a:4e:ec:a4:d4:eb:fb:32:0f:ea:76:0d:f0:dc:37:3b:
44:61:ab:9a:e5:c1:ff:c6:03:27:35:43:7d:3d:c3:eb:c6:b1:
64:a2:fe:f7:a7:93:c5:2d:2e:72:7e:b9:d0:3c:7a:df:fa:63:
dd:dc:e2:34:e3:8f:dd:d9:89:51:f3:6a:73:f9:b2:b8:29:6c:
79:e2:6d:91:20:9e:9f:22:55:86:18:15:2e:f8:84:e1:c9:31:
66:c9:4c:78:8f:cc:e2:3a:ba:61:96:55:9e:e3:7e:a0:e8:f1:
81:5f:b5:2f:e9:2a:af:f8:e8:14:cd:95:7c:9b:6e:c6:68:2b:
30:1f:d7:8f:84:4c:6d:c4:5a:20:fa:7c:ec:bd:d7:32:81:75:
e7:16:76:24:00:e5:95:75:cb:3c:48:9e:74:2c:9f:e6:e2:21:
e4:64:07:90:6b:83:63:02:3f:32:04:c2:5c:cb:6d:d7:4d:76:
09:81:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:22 2026 by rpki-client