Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier: ZskecFk8CDmFrNlBi6tJ6PhU5c7hyMJqx+bR+BjLlqI=
Subject key identifier: 76:5C:51:6A:CB:CE:2A:03:F4:2E:A2:14:E1:29:83:07:B2:02:51:93
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer: /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial: 0E4BBC6A3BCAA450FD9AEF03F8CA24F14FF921EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number: 9D
Signing time: Mon 27 Apr 2026 13:57:38 +0000
Manifest this update: Mon 27 Apr 2026 13:52:38 +0000
Manifest next update: Tue 28 Apr 2026 14:27:38 +0000
Files and hashes: 1: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
2: AS51396.asa (hash: Ag1PfaLtRy9+TbB8iOAOFyNktjcS18gOWa2fcY7BlE8=)
3: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: el4Dwa6lOQTu/w9XvoOpR4nlb0A8ChchHSTCve1gPN4=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4b:bc:6a:3b:ca:a4:50:fd:9a:ef:03:f8:ca:24:f1:4f:f9:21:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Validity
Not Before: Apr 27 13:52:38 2026 GMT
Not After : Apr 28 14:27:38 2026 GMT
Subject: CN=765C516ACBCE2A03F42EA214E1298307B2025193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:4d:23:a7:30:07:d7:ed:1f:f7:39:05:eb:
a7:db:b2:1b:dc:dd:de:40:5e:95:5a:e8:c4:b3:3a:
56:32:35:09:51:e7:8c:6a:b9:5a:8b:45:79:58:1d:
1a:e1:5b:b1:01:72:95:16:d9:9d:3c:34:fd:7b:bf:
72:44:d9:51:1a:85:62:b6:4e:be:7f:58:0a:84:d6:
c9:ef:b3:34:5d:4e:e5:f9:5e:9f:12:e1:10:09:c5:
4c:f3:07:96:22:e3:4e:d0:80:c6:95:71:f3:52:c7:
3a:ba:72:b5:73:56:fd:67:94:c0:68:f5:15:ff:8a:
b0:39:cc:d0:69:8b:1b:96:a4:4c:68:c7:15:93:b6:
4a:95:3e:0f:f6:dc:4f:99:1e:54:4a:0b:3c:ce:93:
15:9e:05:2c:84:b3:81:e4:3f:7a:15:b6:ef:b3:ab:
05:94:46:24:a3:43:a2:c0:37:bb:0c:c1:b6:81:f3:
24:87:1e:76:72:91:e0:8c:63:85:07:1c:4d:c3:93:
20:c0:40:0c:28:82:01:df:38:28:9b:51:61:a2:b1:
9e:61:d2:36:19:be:e5:04:de:f0:c0:2b:77:c6:de:
3f:75:b4:0c:99:35:fc:28:4e:6a:7c:dd:33:5e:48:
4b:78:d3:7b:b0:c1:b5:80:ad:a2:42:9c:fc:d4:b7:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5C:51:6A:CB:CE:2A:03:F4:2E:A2:14:E1:29:83:07:B2:02:51:93
X509v3 Authority Key Identifier:
keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:59:6f:53:6f:36:ae:3e:ce:ad:68:35:3f:e8:0a:bd:9a:
18:da:15:44:e2:24:39:cf:74:03:4a:23:d0:72:12:51:fd:1e:
6e:ea:9f:87:55:6e:93:9e:97:43:d5:95:ee:81:76:e5:53:2e:
f2:ee:69:0f:98:27:63:e7:40:b2:db:8c:90:96:bc:1c:d0:08:
82:91:89:b8:e0:c4:5f:79:c7:0b:29:83:4f:03:95:5a:ad:65:
38:7b:da:92:c5:1d:91:c4:b1:9d:0a:04:0d:23:58:87:e0:e1:
3b:bd:7b:af:da:3c:2c:f7:05:98:b9:5e:a3:03:cb:b6:2e:4a:
b3:d1:0a:2c:ca:e8:50:33:15:c2:71:1e:17:a3:12:94:64:a3:
96:f7:40:d9:46:9c:2e:fc:f4:f2:fc:e5:ac:15:17:70:40:c1:
fc:34:a0:3a:9f:68:5c:02:d1:06:37:94:94:4b:fc:a3:f2:18:
4e:ee:ca:f1:2b:00:a9:7f:8a:4e:36:c1:6a:d8:21:35:3e:18:
5c:5f:eb:1a:ba:bf:4d:43:9c:d5:23:81:22:22:7c:fe:50:26:
80:01:b1:de:b1:fe:98:b0:c6:66:08:c4:46:96:35:5f:d4:18:
ab:1e:1b:5c:86:9f:b6:75:c5:f1:bd:ed:6d:ef:28:de:3e:e5:
03:80:46:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:03:56 2026 by rpki-client