
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json)
Hash identifier: vGw44YWNDjyKVR0k+gsuKtbDnj8x8aW+6/ITte/L/UA=
Subject key identifier: 93:F2:08:56:16:EE:07:8E:7E:4B:D7:8C:2C:AE:06:6A:E8:CE:71:7D
Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Certificate serial: 05B38314249EB354E7DC1B2D94FD2D1360B309D7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
Manifest number: 0392
Signing time: Tue 28 Jul 2026 12:25:24 +0000
Manifest this update: Tue 28 Jul 2026 12:20:24 +0000
Manifest next update: Wed 29 Jul 2026 13:17:24 +0000
Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: C6hqMYO+iDZ7yOYpNiILUpTct4heoXWQfOXqZh+8IPA=)
2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: YgD4FXqTWmPFPjeYHziBG/J6IaO/Hxlen1UWzQrfC/Y=)
3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: /APvQtIczoMdPeFgS8yLWOSzDbhA86h5Cc1N87vUKRI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl
rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b3:83:14:24:9e:b3:54:e7:dc:1b:2d:94:fd:2d:13:60:b3:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Validity
Not Before: Jul 28 12:20:24 2026 GMT
Not After : Jul 29 13:17:24 2026 GMT
Subject: CN=93F2085616EE078E7E4BD78C2CAE066AE8CE717D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:91:be:a1:97:74:aa:e7:fa:42:20:a7:10:
f6:f8:5f:13:bd:4a:48:c2:f9:8b:21:8c:9a:be:ae:
45:f5:6c:17:85:22:11:65:98:f9:85:86:68:d3:b1:
d4:55:76:ef:b1:b3:d2:d8:00:87:b8:2e:16:2d:8b:
f0:7a:e0:c5:d9:92:66:b3:dc:5d:27:79:4f:ed:65:
fd:22:1a:76:74:6d:5a:8b:60:0a:f4:58:71:b8:e7:
08:94:47:38:29:1e:32:82:9a:22:16:95:e1:8a:bc:
83:c3:d4:f1:2f:7c:37:87:a8:1e:b6:c6:14:91:53:
b8:c9:ce:d5:cb:47:4b:ba:0a:27:0b:ab:eb:ff:9b:
66:da:43:de:8f:85:de:df:43:74:83:bc:f0:4d:8f:
aa:62:73:56:de:d8:9a:e5:2b:f9:74:97:23:59:6a:
ea:11:98:db:88:56:d6:be:f2:a0:ff:39:28:45:f3:
b1:b2:91:d7:c5:b4:b7:90:bc:b9:f6:73:d4:bc:64:
43:f5:d6:33:dd:db:90:52:b9:41:fb:56:e0:bc:61:
1d:0a:4e:e6:7b:bb:01:35:d3:80:31:3e:ee:12:f8:
ca:58:5a:6d:97:05:7b:0d:39:cf:75:5f:f4:1c:d5:
09:cc:4c:91:d4:db:c0:0f:3c:20:b2:e6:bb:a9:cd:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:08:56:16:EE:07:8E:7E:4B:D7:8C:2C:AE:06:6A:E8:CE:71:7D
X509v3 Authority Key Identifier:
keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:7c:f2:a2:50:5a:59:f1:e6:3e:3c:de:a4:24:3e:c1:73:
83:c0:f4:94:1c:9f:e0:fd:e9:dd:00:2c:11:ce:37:40:36:b3:
42:ac:4c:1f:0f:12:aa:5e:db:47:70:30:10:13:2c:55:bd:7e:
b6:54:6a:27:47:cb:d0:b9:a2:be:e5:2c:e4:62:69:35:e3:33:
e0:6c:cb:00:a7:87:36:8e:c2:d7:d5:53:98:3a:8c:57:2b:bd:
07:22:34:83:e1:58:78:d7:49:b5:90:0c:a6:32:d5:eb:fb:66:
ac:90:6a:a4:b6:2b:6d:bc:d0:f6:6e:db:47:99:84:59:bf:f1:
b7:1b:6d:11:ec:4a:3a:e8:ce:49:04:35:b4:21:25:7a:64:15:
3e:5a:6f:d8:ef:e7:a5:6f:22:99:57:e8:2f:61:2a:f8:a4:e0:
17:15:9b:00:b4:c9:8c:66:76:a3:1e:31:52:d5:d0:7a:5e:e8:
53:73:2f:d1:5f:1c:87:89:03:53:83:dd:02:0b:e6:d9:2b:08:
39:77:35:e3:c7:ef:22:9e:eb:a2:ac:9f:0f:0d:c0:32:d8:2c:
d7:a5:74:17:1b:c9:ab:e5:e7:b5:e3:eb:d5:27:f1:9d:0c:e4:
9b:56:d9:fd:c8:4b:21:5a:ee:13:89:67:1f:f1:f8:b9:fa:f7:
96:9f:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:33 2026 by rpki-client