
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json)
Hash identifier: 6e/sWATMDA4FfUaBfdOmdkwomT3yFcWkIgYzYZBlIVo=
Subject key identifier: 22:56:C7:C5:D4:B7:E5:C8:A5:B2:65:1D:F1:38:DF:BB:14:AF:D6:F7
Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Certificate serial: 4D334870C66F2B3D0FD430C775E6EC90275A2046
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
Manifest number: 026D
Signing time: Sun 11 Oct 2026 16:24:18 +0000
Manifest this update: Sun 11 Oct 2026 16:19:18 +0000
Manifest next update: Mon 12 Oct 2026 16:39:18 +0000
Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: i5dSR0nVVtTYBPLXP2rjNNS7wdxADfEpr0+HI9rH1lo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:33:48:70:c6:6f:2b:3d:0f:d4:30:c7:75:e6:ec:90:27:5a:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Validity
Not Before: Oct 11 16:19:18 2026 GMT
Not After : Oct 12 16:39:18 2026 GMT
Subject: CN=2256C7C5D4B7E5C8A5B2651DF138DFBB14AFD6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:31:8c:9e:32:c1:e3:96:b6:23:12:72:0a:
57:4f:9a:09:c0:8a:38:df:24:09:db:12:42:7d:e0:
75:f5:46:41:99:fd:a7:e5:8a:61:4d:a6:62:b3:35:
fc:e2:9e:60:f7:a5:b2:b4:cb:2c:d1:6d:35:d0:66:
2c:59:dc:79:23:62:60:1f:7e:f9:aa:cc:42:0a:5c:
cc:42:34:c6:9c:74:16:af:7c:9c:a5:bc:ba:eb:d6:
81:69:6d:33:03:5d:f6:a5:5e:f8:05:f5:80:61:b5:
7f:55:83:c1:f5:24:84:12:8c:42:86:dc:43:9b:34:
8c:ab:30:ec:bf:9c:75:03:52:1b:d4:f0:a2:7f:7f:
b6:8a:0b:ce:68:03:a6:0f:12:f7:fe:2c:00:4e:bf:
91:57:50:31:63:17:e0:25:26:1d:6c:fb:d7:36:59:
a2:9a:ef:a1:9f:14:65:c7:e4:4d:66:8d:8e:64:f5:
93:a0:e4:07:5b:8a:58:8c:f5:e1:25:67:38:2b:f4:
60:d1:7d:f5:38:90:b8:af:da:66:d7:c2:e6:7a:a7:
34:98:cc:cf:48:3f:2f:ed:ba:30:09:c7:83:ea:a1:
71:c6:f3:92:96:7c:79:0c:c9:ed:b2:c9:b6:67:88:
35:23:14:88:b4:79:a0:28:a3:c6:53:08:d1:ce:35:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:C7:C5:D4:B7:E5:C8:A5:B2:65:1D:F1:38:DF:BB:14:AF:D6:F7
X509v3 Authority Key Identifier:
keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:17:9c:56:7f:bd:62:19:ef:65:9c:a1:27:23:9f:cd:bd:
23:82:20:9a:6e:2e:10:93:b5:52:f0:48:f2:a9:d6:9c:1a:bf:
dd:7d:58:c5:73:f2:3a:58:4c:39:e5:90:65:ba:44:3a:87:e3:
6a:c8:b6:45:8a:4b:2e:02:f7:fa:be:b4:a8:b4:ff:c8:67:dc:
98:f2:3a:67:b9:16:10:4a:ad:c7:90:dc:c4:6e:9a:16:c2:a7:
cb:86:57:86:00:bd:d3:e9:b0:56:56:ee:29:5d:ea:5c:67:61:
cb:97:c4:60:18:24:b1:06:07:ec:ff:cd:41:00:42:f3:f0:1e:
d1:1e:f5:cd:36:f1:81:9e:e9:28:cf:9f:32:98:30:5f:7d:8c:
48:6a:db:14:67:d2:b1:51:b1:2c:39:88:17:b4:fe:c7:87:b1:
4e:ef:07:3c:f2:f0:2a:76:a6:a0:97:ee:c3:2e:33:8f:e6:68:
92:9c:5a:0b:ed:cc:63:28:30:f6:2c:44:6c:f9:a6:ef:da:cc:
97:81:dd:67:2f:db:55:7f:f4:f2:09:a1:ee:b2:58:b7:3b:a8:
1d:00:7c:0b:e0:99:a1:97:54:66:4c:6e:39:15:c5:f1:75:4f:
dd:67:e5:4b:03:b8:d9:e8:17:d2:56:b2:47:a3:92:a2:1b:b6:
c7:15:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:27:04 2026 by rpki-client