
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier: QtdLfSqavrMkAXUuJDRDYsg/YY8WS8L8/THzXfaxtbE=
Subject key identifier: 6E:FD:FE:E7:8B:1C:E8:FF:9E:73:2F:20:39:64:43:67:05:F9:B3:51
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 05F281489CC7A7F60583459A385A5EE9505CD35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number: 0624
Signing time: Sun 01 Mar 2026 12:46:40 +0000
Manifest this update: Sun 01 Mar 2026 12:41:40 +0000
Manifest next update: Mon 02 Mar 2026 16:06:40 +0000
Files and hashes: 1: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: vjH30L2I+9ooZfOMMgIhr/3sS8zgAR6RoO437oEvTNw=)
2: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
3: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4=)
4: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
5: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68=)
6: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: XgDvqjA1DUwIeQGus4KqsR+dQUTBQ2aN4efEM7LhMpY=)
7: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: P57/fYjckH7KO6Bmf2RAAe9o4ZEd5zcCF66fMAqMs84=)
8: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
9: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
10: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8=)
11: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: kL/USbewZ5F9rgl6OrE+AodqJSBjzH+0rgbH/DsidT0=)
12: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
13: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
14: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
15: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
16: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU=)
17: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
18: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: MXRlv5xAo/BF9Pc+8yjAPEOfs4iVkOfxpIdVxrgD3OQ=)
19: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
20: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
21: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
22: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f2:81:48:9c:c7:a7:f6:05:83:45:9a:38:5a:5e:e9:50:5c:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Mar 1 12:41:40 2026 GMT
Not After : Mar 2 16:06:40 2026 GMT
Subject: CN=6EFDFEE78B1CE8FF9E732F203964436705F9B351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:a6:6f:3d:af:d3:72:88:87:da:6d:e5:18:
b1:2c:87:5d:df:0d:a6:33:ff:22:0c:00:ea:0c:b1:
94:e9:af:00:99:b1:1c:55:7f:ea:ab:52:8c:f5:89:
1f:33:18:f0:d2:09:9f:73:aa:ef:f9:1f:a6:db:f7:
9b:02:75:f0:a7:9f:f2:3e:85:74:db:2d:99:48:14:
78:0c:89:ff:3e:a0:86:4e:4f:2c:33:2f:1b:60:a5:
02:7e:7e:04:e5:2a:3b:ae:48:f6:05:01:40:0d:f5:
a2:1f:43:bc:f8:ec:69:b0:b4:2a:ed:f8:41:05:de:
4a:12:f9:31:37:92:45:36:4c:7b:99:97:1d:61:97:
ec:a9:7f:77:07:d3:86:1e:07:5a:b6:00:5c:34:45:
c6:12:0b:fe:cd:81:34:1e:84:ae:c9:83:7d:e3:d4:
26:f0:9f:04:04:92:3d:f4:98:33:97:3b:7e:c1:89:
b4:da:b4:1f:2f:ae:8b:94:85:02:8d:a9:22:16:4b:
18:48:d0:02:4e:cb:9c:53:f7:c3:75:b0:4b:2e:9d:
23:75:c0:65:12:32:3b:db:03:18:9e:0f:58:56:03:
d8:1c:d0:86:d8:32:87:f1:67:51:7a:b5:55:fd:dc:
b6:d3:a0:db:76:45:97:36:fd:fe:0b:49:3c:18:b3:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:FE:E7:8B:1C:E8:FF:9E:73:2F:20:39:64:43:67:05:F9:B3:51
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3b:3d:88:7e:26:6a:55:2d:29:a0:c3:34:3c:66:7a:41:ed:
2b:94:eb:bd:09:25:41:29:36:cc:c2:d2:6e:a2:9c:dc:b8:25:
51:1b:ed:70:1a:c8:58:91:cb:e2:f7:f9:5d:b5:a7:fe:bd:97:
c0:ea:e0:a0:f9:c0:3b:7a:20:54:76:2d:81:33:74:09:13:6c:
2e:40:bd:85:03:1b:f2:65:ca:68:81:c9:e1:9b:7a:57:00:2e:
61:49:ac:1b:1a:b8:21:0a:58:3f:e0:c8:38:c4:ed:e8:e8:3d:
70:33:b2:26:e6:f3:42:83:ae:59:63:42:26:01:50:d2:05:fd:
67:c4:96:cb:26:d8:f3:09:b1:2f:99:d9:a3:7b:92:41:f7:51:
d3:6e:52:13:fa:da:35:cf:f5:e6:2f:7f:de:7e:7a:ec:3d:9c:
db:f6:93:b8:4b:c8:35:4e:fd:53:10:c0:db:7e:79:17:61:16:
80:74:4c:f4:67:56:f3:31:75:6d:59:56:c9:31:41:2d:54:c3:
0b:6f:ca:9e:8b:2f:04:20:22:c8:0f:3f:46:70:e0:25:ca:4a:
e4:35:75:6d:8e:eb:fe:d0:8a:99:07:8e:26:28:b8:4c:41:73:
b4:35:36:fa:d4:34:91:7a:b2:af:e9:54:32:e4:85:82:2a:83:
1e:80:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:49 2026 by rpki-client