
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
File: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft (raw, json)
Hash identifier: gXwUp0oBIMxTIa3Zzs+VTWupnDs0igOrWai6vLmBVRs=
Subject key identifier: 48:50:3C:D8:69:A7:16:2B:5F:21:6D:FC:2C:8A:89:96:5F:33:99:A6
Authority key identifier: 0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
Certificate issuer: /CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Certificate serial: 5178937AA88FB46C423DCF0025949E47C7AFAF5F
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
Manifest number: 18
Signing time: Sun 22 Feb 2026 22:59:19 +0000
Manifest this update: Sun 22 Feb 2026 22:54:19 +0000
Manifest next update: Tue 24 Feb 2026 00:21:19 +0000
Files and hashes: 1: 0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl (hash: MzKpk5iKX1n8t/CGtd+3jK3+swKeLBnRyO8a/FnMsmA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 00:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:78:93:7a:a8:8f:b4:6c:42:3d:cf:00:25:94:9e:47:c7:af:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B3B68A206B6AF84A34AA1B7632E99AB06F52077
Validity
Not Before: Feb 22 22:54:19 2026 GMT
Not After : Feb 24 00:21:19 2026 GMT
Subject: CN=48503CD869A7162B5F216DFC2C8A89965F3399A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:64:db:bc:5b:7a:77:fa:28:e8:ed:03:6a:
3a:d4:d2:3e:aa:a8:b5:68:3d:99:60:6b:a9:70:8f:
cc:5f:31:d8:67:ab:76:a0:b4:e5:85:c7:a9:e5:22:
fc:5f:0b:65:cb:16:bf:39:91:3b:6c:a5:9d:07:3a:
9a:98:28:fa:53:2f:7e:93:72:3a:03:c1:69:73:03:
f2:28:2d:a2:b5:ad:10:2c:4d:4a:2a:08:20:66:60:
5d:38:6e:82:e8:6c:90:e8:5c:4a:fa:6b:e9:97:ff:
ec:cd:77:55:36:57:dd:05:bf:37:f4:ab:9d:11:66:
73:0a:9b:ba:a9:38:9a:1e:d3:05:d0:d5:d3:a1:4d:
12:e9:29:3a:92:e9:ea:fc:a4:34:9a:74:de:d4:74:
e9:bb:c6:76:67:7e:df:10:0a:f9:8c:49:fe:02:a5:
8b:44:51:6f:62:17:05:ee:1a:c8:55:2b:66:61:3c:
29:93:7d:c7:f4:8c:cf:8a:64:b5:98:09:fe:8e:c4:
fe:cf:56:c6:b1:9c:ae:e0:9a:8b:17:ef:42:00:8b:
18:35:7e:b5:b5:8f:bf:a7:d1:7d:f1:07:af:ae:b8:
84:2c:7a:e0:fd:cf:e0:7f:83:63:0f:07:71:23:c4:
a3:b7:a4:98:41:57:c7:83:c2:04:60:97:d5:07:29:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:50:3C:D8:69:A7:16:2B:5F:21:6D:FC:2C:8A:89:96:5F:33:99:A6
X509v3 Authority Key Identifier:
keyid:0B:3B:68:A2:06:B6:AF:84:A3:4A:A1:B7:63:2E:99:AB:06:F5:20:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/0B3B68A206B6AF84A34AA1B7632E99AB06F52077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:41:da:2b:d1:99:4c:18:f6:8d:79:0c:bc:90:70:fa:c9:
d7:15:ed:88:6a:ff:cd:21:ff:62:2c:d4:8c:04:11:ed:75:47:
4f:d2:6d:98:f1:1e:e9:35:cd:1c:45:2f:86:6d:70:4e:0d:df:
e2:4e:12:ff:8b:db:de:28:1f:6c:98:9d:22:67:69:e5:e6:ea:
84:13:c4:0d:d4:15:ba:7f:e4:5b:a2:5d:90:ad:6c:5b:73:3b:
60:5c:8e:b6:f4:12:2d:98:0f:2d:c4:76:d6:06:0e:01:c3:6a:
4a:b4:1e:5f:cd:81:6c:fb:bd:12:71:ea:83:ae:d1:81:79:d0:
b5:d4:e8:c7:78:bf:f2:80:5e:0a:69:db:f6:93:e3:27:10:cb:
cc:2a:46:9a:56:fc:c9:a5:ac:44:42:6c:cc:96:25:e3:25:36:
c3:b1:4c:c1:6b:00:0d:de:1f:2f:37:87:01:07:a1:ac:ce:da:
d0:b1:de:8a:d2:26:44:5a:46:bd:95:36:72:fe:26:0a:d0:fa:
6d:eb:bd:ba:03:37:9e:b2:e1:bc:f7:ac:5c:be:b7:34:b6:5f:
54:ee:f1:6f:d5:a3:36:89:07:9d:36:ce:22:1d:87:13:c5:6a:
bf:ff:ff:a4:2d:75:8f:84:09:5c:fa:fc:cc:b7:61:07:00:49:
e5:72:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 12:52:20 2026 by rpki-client