$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json) Hash identifier: 8fpr6YmMnCsOuZa3mACyT3OX8YimwzTQOwmNCzlTDkc= Subject key identifier: 2A:41:69:FC:C8:85:A4:F8:34:73:21:08:92:0A:2E:ED:3C:65:08:32 Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d Certificate serial: 51CDBAC0BDBB9DD22D978DEA1CD344128F297C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft Manifest number: 7D Signing time: Fri 17 Apr 2026 02:55:29 +0000 Manifest this update: Fri 17 Apr 2026 02:50:29 +0000 Manifest next update: Sat 18 Apr 2026 03:10:29 +0000 Files and hashes: 1: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=) 2: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=) 3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=) 4: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=) 5: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=) 6: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=) 7: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: aC3HSyeqhHfAuyrVRWFomTG+SCvXG1loj+aYdYwTHsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cd:ba:c0:bd:bb:9d:d2:2d:97:8d:ea:1c:d3:44:12:8f:29:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d Validity Not Before: Apr 17 02:50:29 2026 GMT Not After : Apr 18 03:10:29 2026 GMT Subject: CN=2A4169FCC885A4F834732108920A2EED3C650832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:d7:fe:63:26:38:5a:4e:84:64:51:26:05: 6a:97:6e:5d:1c:37:c4:26:3c:e7:39:18:e9:9d:46: 52:b6:69:65:09:24:41:a3:28:2f:cb:87:39:c3:f5: 46:7e:69:77:91:25:b9:75:36:58:24:c6:cd:81:36: 4d:0b:ad:3b:4d:aa:21:3e:05:de:26:03:b4:ed:20: 61:fe:eb:a6:25:3e:10:da:f1:a5:44:59:73:1d:ce: ee:d6:82:f3:50:60:b6:eb:a4:09:36:68:c1:da:67: f0:83:59:41:10:95:28:7e:00:5d:de:c6:5c:9d:23: ae:ef:e3:bf:78:c8:72:f4:de:10:9d:e2:c1:47:ba: 59:33:6a:54:30:d9:13:33:74:49:e1:42:94:77:66: 0c:35:8b:a5:fe:f4:84:ef:64:c7:30:f6:9e:06:bb: a6:b4:1e:42:22:0c:d0:f3:20:18:46:76:ed:41:d3: c3:6e:32:a0:02:be:a3:09:c1:9b:36:90:14:87:fb: 83:de:aa:73:0b:34:b7:ea:64:35:7e:b8:fe:f3:2a: a5:33:23:65:3c:2c:26:36:8f:c9:48:df:81:96:be: 45:ba:81:c9:7d:ee:c6:cb:1d:6e:6a:27:87:46:0f: 46:de:a3:80:18:20:8c:c9:88:7a:db:01:36:de:bd: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:69:FC:C8:85:A4:F8:34:73:21:08:92:0A:2E:ED:3C:65:08:32 X509v3 Authority Key Identifier: keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ef:f3:b1:e1:1b:bf:72:c0:9b:8b:3b:8f:1d:a2:4d:ff:c5: a1:d1:df:ac:e5:d1:f7:0e:0a:07:4a:fb:95:55:1b:5e:f1:b0: da:0e:a0:c1:a7:45:1b:d3:e0:7e:27:b0:81:9a:05:0a:82:63: e8:bc:b6:d7:aa:18:99:ea:23:53:9c:4a:cf:0c:aa:5c:1f:ac: 1c:63:5d:19:3c:58:ce:9d:9a:99:02:47:7f:9c:00:ba:76:59: 98:c8:2c:d3:45:91:9a:73:cd:93:20:fe:d9:c8:4f:c7:9c:00: 55:66:35:c0:6f:b6:31:9f:ac:61:5a:fa:ad:82:7d:d3:8c:45: 24:2a:64:c3:1f:6d:c4:aa:0c:ca:19:51:90:6e:b0:87:1a:3c: 98:95:06:a6:76:c3:6d:3d:e3:4d:de:07:01:06:12:ae:a0:cc: 9d:6f:94:e2:bc:15:b5:7f:5d:ca:9f:25:f1:ec:de:a1:bc:4a: cc:ee:f3:bc:c6:a4:68:87:b8:f5:4b:6f:19:5a:e7:fa:92:86: 40:c0:13:8c:ef:65:0d:16:54:12:b7:fa:31:a6:c9:77:5e:30: 1c:da:48:e9:b3:b9:79:cd:d7:e7:06:6b:55:2a:c4:11:e0:a8: 86:cb:b3:3d:1e:e5:01:41:e2:2b:1a:2d:f8:20:07:29:47:57: 02:77:0b:56 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUc26wL27ndItl43qHNNEEo8pfIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3 NzQzOTczZDAeFw0yNjA0MTcwMjUwMjlaFw0yNjA0MTgwMzEwMjlaMDMxMTAvBgNV BAMTKDJBNDE2OUZDQzg4NUE0RjgzNDczMjEwODkyMEEyRUVEM0M2NTA4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BNf+YyY4Wk6EZFEmBWqXbl0c N8QmPOc5GOmdRlK2aWUJJEGjKC/LhznD9UZ+aXeRJbl1Nlgkxs2BNk0LrTtNqiE+ Bd4mA7TtIGH+66YlPhDa8aVEWXMdzu7WgvNQYLbrpAk2aMHaZ/CDWUEQlSh+AF3e xlydI67v4794yHL03hCd4sFHulkzalQw2RMzdEnhQpR3Zgw1i6X+9ITvZMcw9p4G u6a0HkIiDNDzIBhGdu1B08NuMqACvqMJwZs2kBSH+4PeqnMLNLfqZDV+uP7zKqUz I2U8LCY2j8lI34GWvkW6gcl97sbLHW5qJ4dGD0beo4AYIIzJiHrbATbevVDHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKkFp/MiFpPg0cyEIkgou7TxlCDIwHwYDVR0j BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu/zseEbv3LAm4s7jx2i Tf/FodHfrOXR9w4KB0r7lVUbXvGw2g6gwadFG9PgfiewgZoFCoJj6Ly216oYmeoj U5xKzwyqXB+sHGNdGTxYzp2amQJHf5wAunZZmMgs00WRmnPNkyD+2chPx5wAVWY1 wG+2MZ+sYVr6rYJ904xFJCpkwx9txKoMyhlRkG6whxo8mJUGpnbDbT3jTd4HAQYS rqDMnW+U4rwVtX9dyp8l8ezeobxKzO7zvMakaIe49UtvGVrn+pKGQMATjO9lDRZU Erf6MabJd14wHNpI6bO5ec3X5wZrVSrEEeCohsuzPR7lAUHiKxot+CAHKUdXAncL Vg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:18:13 2026 by rpki-client