
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File: 8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier: oQHA/Zsr1b88qE5oqkcJ/vGf05cXQq2Hy1NlIBQ9oKw=
Subject key identifier: 4D:11:02:7E:7B:41:0B:F6:71:5D:FE:39:D9:C1:4C:33:38:A0:94:4C
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer: /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial: 138405718F8AC9DE888A1165A3EC939EBD6C7D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number: C9
Signing time: Fri 12 Jun 2026 18:01:04 +0000
Manifest this update: Fri 12 Jun 2026 17:56:04 +0000
Manifest next update: Sat 13 Jun 2026 21:59:04 +0000
Files and hashes: 1: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
2: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
3: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
4: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: shJ2r0jf5elZW/pg8Yqf8bZVkroEbVr7WjUqWTM600g=)
5: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
6: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
7: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:84:05:71:8f:8a:c9:de:88:8a:11:65:a3:ec:93:9e:bd:6c:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
Validity
Not Before: Jun 12 17:56:04 2026 GMT
Not After : Jun 13 21:59:04 2026 GMT
Subject: CN=4D11027E7B410BF6715DFE39D9C14C3338A0944C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:a4:82:98:50:fd:e9:df:5f:67:81:93:65:
86:09:de:51:af:97:ee:0d:55:68:cb:ee:56:12:3b:
a4:5c:de:a7:4c:14:3c:98:8a:34:74:da:04:49:47:
20:94:67:0d:ec:00:04:db:85:7a:cd:cf:36:65:39:
de:53:c0:9a:75:2b:fe:17:b3:b3:bd:2e:2f:74:f7:
4d:fc:5a:d4:33:41:8e:82:a3:6f:3b:a0:f9:f8:cc:
87:2e:8c:2b:11:6f:af:27:14:87:50:a6:05:f6:8e:
49:61:5f:8d:54:16:74:ed:b2:48:02:be:30:c6:5f:
27:ca:91:24:ef:f9:ce:ef:1b:41:e5:b6:12:ae:91:
3d:bd:7b:06:f1:27:1c:bc:01:c4:73:ab:88:b5:a1:
f3:83:4c:72:01:67:30:84:f9:90:42:9f:de:8c:a5:
2a:42:d4:7a:90:8a:82:9f:55:99:10:b8:b2:94:2e:
23:4a:8e:ac:a4:f0:43:51:2b:b2:ac:3f:c4:f4:89:
ea:33:41:f3:d7:2b:c3:96:41:be:7e:f8:35:a2:5c:
01:db:f1:13:69:f6:5f:49:91:6b:99:92:c2:02:9b:
ec:ca:85:cb:b7:a1:70:a0:86:c2:f3:6a:e2:0d:81:
e5:36:96:45:5a:33:c4:05:c4:78:f1:d6:a4:1c:69:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:02:7E:7B:41:0B:F6:71:5D:FE:39:D9:C1:4C:33:38:A0:94:4C
X509v3 Authority Key Identifier:
keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:fc:4e:24:73:20:3b:12:86:1c:cf:60:5a:47:ea:89:23:
c6:5a:fe:31:7f:8c:d5:be:22:25:ae:42:53:69:b2:ff:d1:d1:
3c:cd:d9:59:18:d8:45:1e:91:e8:f5:1a:40:92:e1:7c:76:72:
42:d5:30:c6:75:3c:01:57:3d:00:d3:f2:1d:88:41:59:54:b3:
47:4d:02:82:33:0a:15:63:1d:37:dd:e2:d4:df:93:60:27:5b:
1a:f6:7d:dd:aa:25:69:da:2f:67:07:3f:04:a3:1e:00:86:e8:
d8:51:62:2a:6f:dc:71:c3:8a:b0:9a:9b:d7:7e:e7:be:39:45:
4a:58:99:02:36:f4:79:ab:6f:62:dd:32:c3:8d:c3:30:e7:6e:
34:86:bc:0b:56:b1:18:48:55:24:a5:9e:1d:4e:89:d9:80:60:
30:f4:f3:ed:04:37:fc:6f:2a:6f:36:51:94:d2:4f:dd:be:c8:
27:ce:70:de:a7:ae:6d:b4:81:ff:49:57:3c:38:cb:07:74:17:
e6:32:cc:22:87:86:e7:95:de:28:8c:d4:a1:f5:15:d2:ec:54:
ce:df:0f:ca:6f:ef:74:4c:1d:2e:02:db:5c:dd:06:1f:4a:3d:
cf:2c:50:fe:e5:79:73:32:5f:df:a2:2a:ef:8b:4f:03:bb:48:
41:e5:7e:71
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE4QFcY+Kyd6IihFlo+yTnr1sfWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3
NzQzOTczZDAeFw0yNjA2MTIxNzU2MDRaFw0yNjA2MTMyMTU5MDRaMDMxMTAvBgNV
BAMTKDREMTEwMjdFN0I0MTBCRjY3MTVERkUzOUQ5QzE0QzMzMzhBMDk0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dqSCmFD96d9fZ4GTZYYJ3lGv
l+4NVWjL7lYSO6Rc3qdMFDyYijR02gRJRyCUZw3sAATbhXrNzzZlOd5TwJp1K/4X
s7O9Li909038WtQzQY6Co287oPn4zIcujCsRb68nFIdQpgX2jklhX41UFnTtskgC
vjDGXyfKkSTv+c7vG0HlthKukT29ewbxJxy8AcRzq4i1ofODTHIBZzCE+ZBCn96M
pSpC1HqQioKfVZkQuLKULiNKjqyk8ENRK7KsP8T0ieozQfPXK8OWQb5++DWiXAHb
8RNp9l9JkWuZksICm+zKhcu3oXCghsLzauINgeU2lkVaM8QFxHjx1qQcaVARAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTRECfntBC/ZxXf452cFMMziglEwwHwYDVR0j
BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh
YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk
RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m
NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB
OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgP8TiRzIDsShhzPYFpH
6okjxlr+MX+M1b4iJa5CU2my/9HRPM3ZWRjYRR6R6PUaQJLhfHZyQtUwxnU8AVc9
ANPyHYhBWVSzR00CgjMKFWMdN93i1N+TYCdbGvZ93aoladovZwc/BKMeAIbo2FFi
Km/cccOKsJqb137nvjlFSliZAjb0eatvYt0yw43DMOduNIa8C1axGEhVJKWeHU6J
2YBgMPTz7QQ3/G8qbzZRlNJP3b7IJ85w3qeubbSB/0lXPDjLB3QX5jLMIoeG55Xe
KIzUofUV0uxUzt8Pym/vdEwdLgLbXN0GH0o9zyxQ/uV5czJf36Iq74tPA7tIQeV+
cQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:04 2026 by rpki-client