
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier: AI0Sxi45/1+zz9EFQpB9Vr60BFTwHCwCLnWzqMGydz4=
Subject key identifier: E1:A9:50:88:ED:BD:6B:9D:43:82:1C:D1:7E:30:70:F9:AA:24:CF:6C
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial: 1B5EC730066CFE227F57019652548FC1B9D37D65
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number: 011A
Signing time: Wed 26 Aug 2026 17:28:35 +0000
Manifest this update: Wed 26 Aug 2026 17:23:35 +0000
Manifest next update: Thu 27 Aug 2026 19:17:35 +0000
Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: +pcbmXdvuHRnRS+KG7NWCxGPrGFbD2Rn6zYKUSOUTsk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5e:c7:30:06:6c:fe:22:7f:57:01:96:52:54:8f:c1:b9:d3:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Validity
Not Before: Aug 26 17:23:35 2026 GMT
Not After : Aug 27 19:17:35 2026 GMT
Subject: CN=E1A95088EDBD6B9D43821CD17E3070F9AA24CF6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:94:e6:8d:43:e7:e1:af:fa:1f:95:c1:27:
1b:c4:f9:2e:28:69:0a:b6:0a:ae:20:5b:1f:c8:cf:
83:1c:a8:30:e8:5f:90:13:75:3b:6c:6d:01:28:84:
a9:02:7b:a4:be:12:b9:90:4d:fa:4a:ff:6e:bf:f6:
21:43:76:91:66:0c:25:22:c9:f3:af:d6:9f:46:90:
66:23:b6:96:33:99:7b:97:6f:69:52:15:d5:ca:53:
e2:53:32:be:44:63:7f:e9:1a:96:0e:8e:aa:11:45:
b7:a2:f6:da:94:a2:7b:c6:14:d7:fc:e7:46:af:e2:
d8:73:ac:8a:5c:b6:9b:52:8e:84:2d:34:79:09:53:
91:22:82:e0:1c:5c:f9:68:af:0e:d6:6f:3e:a4:ac:
4b:92:0b:08:f8:14:d2:40:8d:08:32:22:45:97:fe:
ea:17:fe:c1:06:cc:4d:43:d0:7e:de:f0:2b:1d:21:
4a:f8:d1:a0:e6:d7:28:88:c6:f7:9c:5a:90:d7:f5:
1b:28:52:cf:5b:37:ee:13:1a:e1:52:59:be:ab:18:
6a:d1:83:c8:bc:e4:4d:6c:f9:3e:57:93:57:59:9d:
62:79:03:92:94:c6:d9:3f:5c:33:26:c7:73:14:60:
76:9b:43:35:13:94:47:0c:a6:90:fc:3c:6b:f2:fb:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:50:88:ED:BD:6B:9D:43:82:1C:D1:7E:30:70:F9:AA:24:CF:6C
X509v3 Authority Key Identifier:
keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:26:9b:b1:10:f8:77:c0:26:f2:e0:09:01:69:c0:f1:df:c2:
73:a8:ea:28:c1:95:1b:c5:0b:30:48:87:53:de:10:9c:61:42:
68:b8:ee:2f:b5:a2:15:3d:0a:63:2b:5a:9f:55:1b:e2:75:34:
33:bf:41:c2:6e:a9:33:f1:fc:11:e3:87:cc:ab:d0:73:b1:7d:
f7:ca:06:e0:2c:41:6d:9b:b7:7a:b8:25:ae:28:71:10:eb:4d:
6b:45:f1:7f:62:cc:58:1b:b0:c4:d9:49:dc:c8:90:ed:89:59:
55:d2:5d:86:f5:c1:b2:21:e5:6e:26:6e:e2:f8:c8:a9:2a:6b:
26:c3:2a:13:bf:a0:72:c4:9e:79:5e:dd:16:d2:cc:ca:e7:6a:
f8:37:f3:bb:93:b4:8c:42:d5:90:97:91:34:c9:d3:26:9b:c3:
6e:56:02:35:b3:4f:db:e7:4b:d8:ff:ef:97:b9:40:d4:42:a4:
9c:22:04:2c:45:14:74:cd:3b:c0:d0:a5:46:8c:f5:9f:7d:85:
0e:ea:26:ca:17:5d:34:1c:f8:f2:2a:33:8d:63:2c:dc:c9:7e:
9c:69:2d:49:1d:ac:ee:35:73:6b:02:93:98:86:5c:bb:e8:39:
18:01:13:87:54:e8:7f:b4:da:0c:6c:31:1b:62:33:70:0e:63:
91:ea:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:09:33 2026 by rpki-client