
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier: OirinRDF5cY6LkPaoXrUhr3M292BOYGjb91/cxIGN2s=
Subject key identifier: D6:CC:91:95:E7:3B:52:CA:BC:84:30:41:FB:DE:C8:94:BE:B2:41:E4
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial: 0A85E7B4D75178754BCF5F243426835A5AC3218C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number: 015A
Signing time: Sun 11 Oct 2026 21:58:05 +0000
Manifest this update: Sun 11 Oct 2026 21:53:05 +0000
Manifest next update: Tue 13 Oct 2026 01:20:05 +0000
Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: 4Y9sZ8gY2l7fCDa/2GP7TFCvzJIRSD7t3UeXxNivQgU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:85:e7:b4:d7:51:78:75:4b:cf:5f:24:34:26:83:5a:5a:c3:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Validity
Not Before: Oct 11 21:53:05 2026 GMT
Not After : Oct 13 01:20:05 2026 GMT
Subject: CN=D6CC9195E73B52CABC843041FBDEC894BEB241E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:9d:f2:fe:4d:08:12:34:3b:18:9d:b1:10:
59:37:31:0c:c3:c2:fb:ae:50:85:c4:17:d7:d5:08:
d9:d1:8b:24:a9:2a:17:22:e3:23:55:78:6a:4c:8a:
cf:6e:0d:ef:61:0b:47:c8:b0:01:c5:db:83:8e:85:
4e:07:13:cd:e8:86:e9:62:98:cd:5c:f8:46:c4:7d:
83:2a:39:5c:78:01:43:41:d6:85:3e:e9:6a:1a:0d:
64:52:08:08:88:3b:a6:bd:ff:6f:48:df:de:1f:6f:
ad:99:44:57:4b:88:ec:16:44:fa:f9:89:59:cb:58:
93:ce:1e:c0:00:67:10:b6:9f:3d:82:97:e9:de:ff:
e4:a7:0a:b0:9a:66:37:3a:ae:7e:39:23:04:16:32:
e7:38:1c:b0:76:0e:81:b9:f2:5a:5c:d4:1e:e6:65:
9a:14:30:e2:c9:c7:74:65:17:04:3e:97:28:d5:d9:
8c:33:c0:24:dc:9e:0b:93:66:3f:85:d4:72:e6:d5:
da:23:63:b3:06:fb:07:5a:5b:98:b4:23:c6:97:da:
fd:e6:79:ad:30:21:bd:4a:99:56:40:71:09:85:f8:
74:e4:19:48:42:76:f3:eb:7a:d7:39:e9:5b:63:fd:
2a:c8:f6:01:66:71:f3:89:8f:84:f3:5e:b5:29:76:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:91:95:E7:3B:52:CA:BC:84:30:41:FB:DE:C8:94:BE:B2:41:E4
X509v3 Authority Key Identifier:
keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:87:35:d1:d8:33:79:39:d9:8c:5f:08:61:8b:e8:8f:e0:60:
0e:4e:cb:fb:97:8f:36:92:3a:6b:31:cb:de:9b:cc:f2:9a:09:
d5:f6:10:19:3e:fe:59:05:89:23:4d:27:f1:56:28:8b:4d:7c:
f5:54:ce:e0:5a:f9:40:93:84:b1:38:c5:8a:c0:7f:7a:82:4e:
a7:61:08:af:cd:6e:34:39:a9:fa:31:e8:b6:d0:2e:18:27:dd:
40:96:98:58:73:d3:fd:fd:95:2d:3d:ab:cf:b0:69:d1:f4:9e:
bd:c0:d8:99:d9:1b:07:94:81:91:2a:ea:00:c4:46:40:34:d6:
99:a7:cc:6f:6e:ff:c4:bb:ac:2e:ed:26:14:0f:d7:99:2a:12:
0b:b8:6a:ff:67:4c:06:7b:f4:bf:a0:2c:ec:5a:66:9f:0a:55:
8a:93:b6:71:d6:1a:e3:7e:98:82:34:66:08:76:d1:fb:77:00:
8e:ec:43:37:3f:91:cc:df:aa:0d:fc:57:ba:cc:c2:2b:90:74:
aa:68:01:9f:2a:39:e2:a2:f8:95:d3:10:66:83:51:2d:f9:4a:
a8:9d:38:65:88:f9:33:93:9f:cd:99:b4:e9:ce:55:34:72:f7:
12:b7:0e:8f:bf:4f:67:6d:2b:ea:de:b9:09:2c:e9:24:87:bd:
d5:0e:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:25:31 2026 by rpki-client