
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier: vl5g6yi7fbriQDRDNneQOt57StiFrFFkff5AHCjbo7c=
Subject key identifier: 8C:89:4B:CB:9B:35:64:F1:B1:35:F5:42:2B:40:B3:6D:DE:23:65:B7
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 44C36321B5FB2AA66CB9B10F2D7FB5B95EC325BA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number: 0447
Signing time: Sun 20 Sep 2026 03:07:17 +0000
Manifest this update: Sun 20 Sep 2026 03:02:17 +0000
Manifest next update: Mon 21 Sep 2026 03:46:17 +0000
Files and hashes: 1: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
2: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 2UDjxG4RlvjPmviPQqGqAVVrCPWdscmfmRM0j7DODko=)
3: 326131343a373538313a343835363a3a2f34382d3438203d3e20313530323439.roa (hash: +BTOyGnB3/SY/p8Ckxmoo0odwD52ixx8ttyy1kP23KM=)
4: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: fNKVMMPiiUgfbMZ2Oos538UVQ2g0QakPLvgkCLIakls=)
5: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
6: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: GiP4GD8ggd65aZhgm+mIHhBgcxctP4oM9yKA+INTEK4=)
7: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: Yud6VyEfzu6bUn3ZGGTJfpmlFiOU2yKLbFt5IH7TKH4=)
8: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: iVSqmJC3EENf/XVlR6YpWn7MgLMOJzCIs/ETJKcPCZ0=)
9: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: MBbahVlOUY0BFTONMtnmzy3HTHvtjPISBdqoM0Cyb4U=)
10: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: 8xEoc2WbgF3aR/A4BmGA/5swJlN4eULU8RI9MBQf5A8=)
11: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: a74YsL1qU7MZs6Id2KBnat9Mk42FfInZrWbOj9uOpkE=)
12: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: JCFWJgEKOIfNC/UVmwFEJVNgIuAfElA5+DwW/Ff9XGw=)
13: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: C+V4kSeLDw3sO8d40Phfc7PlZ5G8vdBgrmtSr5gkXYw=)
14: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: TeM7Pek2amM1UgjzSeE/qaGScbmirVVYpr/gbbLkRM4=)
15: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 6pSA0kSz3996g9/BXeNESbR6lV0s0HcQ+D2Slss3z5w=)
16: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 55OIZeYx9lO5L3iwh+YJZa5YKyQFWW57WQGezPVY7YM=)
17: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: wlujEilvSGoE2xmgZ9r1cOQVVwj+z/fdPDzPxBXeMcU=)
18: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: OJXw4bailhln27dAWvZZO7aSgL/bQWfg+Oqf5sYF+sE=)
19: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
20: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: 7mp0zmnlMvREYQITFuGqaUnQo4881uWLywgG1Fg4GUU=)
21: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: W5Heh9gse8mKUAV/4KyRLY8JwjKj+jz/mhW/8Nexm6w=)
22: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: uI3jA+jOZWiuSTKGNtgoM/ozXWdST0/ghNl1XegpnkE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c3:63:21:b5:fb:2a:a6:6c:b9:b1:0f:2d:7f:b5:b9:5e:c3:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Sep 20 03:02:17 2026 GMT
Not After : Sep 21 03:46:17 2026 GMT
Subject: CN=8C894BCB9B3564F1B135F5422B40B36DDE2365B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:ee:52:af:a2:40:2c:3c:6a:c8:10:51:c5:
71:2c:a6:24:b4:46:50:c0:b5:5c:3e:9c:be:cf:b7:
ea:f3:33:0f:1e:fe:aa:98:00:e7:c6:76:eb:09:45:
8f:13:c0:99:fd:97:b7:85:a0:95:98:28:66:22:43:
d8:c3:e9:f9:be:7d:7e:3d:df:fa:c2:05:e8:9b:15:
50:94:3a:60:01:c0:e6:be:1a:74:7a:57:32:8a:9c:
70:90:67:cb:96:11:39:e1:6c:fe:b6:ab:74:ab:e5:
64:08:1f:37:6a:9c:41:0f:29:c3:6b:0d:3d:8a:d0:
f5:97:5a:62:cd:cb:5f:8b:80:ae:d7:36:27:c3:2c:
fe:ca:ac:75:d0:35:b4:c6:9a:35:64:16:16:77:27:
6c:cf:39:16:58:2b:21:60:70:a7:13:b0:53:e1:b0:
1a:37:02:e1:d1:03:cb:f2:74:28:a8:81:c9:b7:f7:
e6:29:1e:38:16:d0:3a:b2:d1:9d:99:2d:a4:3f:5a:
04:f4:5b:79:0a:5e:dc:a4:cc:ae:22:e5:32:47:59:
b2:5b:45:09:55:30:a5:16:ec:04:c1:bc:bd:ef:db:
04:02:e3:ee:e7:11:f0:1c:00:d4:fb:cd:8d:6f:26:
a6:52:ce:b5:6c:99:06:8b:05:77:6f:e5:16:18:30:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:4B:CB:9B:35:64:F1:B1:35:F5:42:2B:40:B3:6D:DE:23:65:B7
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:94:fc:0c:02:b9:6b:92:5a:a5:df:b2:2b:87:c7:2d:91:
a9:bb:e4:c3:b1:40:66:b6:8d:3d:df:c3:cf:47:27:8e:fb:9a:
b5:56:6e:e9:17:46:02:6d:0e:24:2e:7f:ed:46:89:47:c3:1f:
59:45:cb:07:ba:b3:f7:c0:09:86:92:77:ee:05:e3:d2:81:f1:
cb:58:61:9d:f3:7e:75:6f:42:a8:1b:8c:32:2c:46:7c:bf:c3:
5d:bf:cf:bf:46:5d:9a:c4:ba:ee:e1:c4:08:be:f4:e4:b7:fd:
17:db:95:03:a5:40:ee:93:f6:3c:79:79:5a:e8:4e:2f:5e:db:
46:d1:f6:f8:e3:95:5a:a5:3a:c2:d3:9c:6c:bb:4e:79:66:2e:
5b:5b:5d:15:78:5c:71:01:a2:71:db:3b:28:64:be:ba:4d:3a:
10:ac:0a:69:a3:3d:ed:88:a9:df:ac:fc:79:53:2d:30:0b:59:
ba:e7:a2:0f:f2:92:d5:97:84:0f:0e:9b:f1:86:c9:19:e5:99:
70:1f:8e:46:64:a8:0d:44:e5:9b:25:f9:62:e7:83:c2:56:1e:
f9:ee:8b:4e:6d:0f:e2:e9:05:de:38:a8:0d:03:40:80:ea:29:
45:69:d8:e9:58:ab:ed:7c:b4:61:7f:01:23:46:93:67:24:b9:
3b:0c:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:49:33 2026 by rpki-client