
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: 0lZvq63WTg+7Bj9V+oAzdsk9Mwe33gDAICMOCtR/QT4=
Subject key identifier: 48:49:78:4B:F0:3C:13:A2:D4:56:50:69:26:61:07:DA:E6:3A:C4:47
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 13DECB6D3FCA01E8CBC6ABF74E1891094DD8367B
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: 0140
Signing time: Wed 25 Feb 2026 19:59:02 +0000
Manifest this update: Wed 25 Feb 2026 19:54:02 +0000
Manifest next update: Thu 26 Feb 2026 22:25:02 +0000
Files and hashes: 1: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
2: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
3: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
4: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
5: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
6: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
7: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
8: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 96jqIzc4Krvq1Jxq9SJl1n7GKLUy6OMOJeFc+o4DncY=)
9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
11: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
12: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
13: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
14: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
15: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 12:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:de:cb:6d:3f:ca:01:e8:cb:c6:ab:f7:4e:18:91:09:4d:d8:36:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Feb 25 19:54:02 2026 GMT
Not After : Feb 26 22:25:02 2026 GMT
Subject: CN=4849784BF03C13A2D4565069266107DAE63AC447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:3c:b1:f9:b2:e4:cc:f5:24:3d:3f:e2:33:
c7:94:40:52:5d:eb:c8:a6:cb:7e:4c:d0:4d:29:4a:
c1:63:d3:2b:a0:5a:1c:aa:cd:bf:d9:ae:68:9a:76:
04:f3:77:42:22:f5:1e:5f:1f:e1:17:da:93:60:0b:
96:67:e9:8a:40:bd:83:75:3e:e1:3a:de:f8:c2:6c:
8f:06:15:41:c2:b2:75:75:b5:dc:7f:a9:14:36:21:
d2:49:98:05:42:39:08:a9:37:6d:4e:d5:ac:f9:bb:
3e:b4:34:62:8d:e4:9d:f6:eb:05:ce:e3:b7:63:65:
67:68:e6:de:cf:fd:9a:91:e4:6b:f1:61:e9:d6:e6:
c8:9d:ae:8d:50:26:54:a6:b5:f5:f0:e0:d3:6c:a3:
2c:91:fe:98:2f:b2:f1:a5:a7:52:08:83:39:d8:07:
15:bc:94:af:90:7b:75:78:0f:d4:31:2b:f0:29:ba:
e8:df:8e:63:94:a0:b2:b6:ad:2c:25:72:37:9b:24:
a6:f4:19:54:ec:e1:3a:d9:b6:47:b3:3f:4c:2c:25:
ac:56:be:40:0f:d0:cf:1d:bf:77:10:d3:fa:83:15:
1b:ac:c7:df:db:0c:ff:44:81:2e:d5:c5:df:08:e9:
e5:c8:ed:78:5d:06:d8:98:7d:f9:86:61:d1:50:8a:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:78:4B:F0:3C:13:A2:D4:56:50:69:26:61:07:DA:E6:3A:C4:47
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6c:9f:00:e8:6b:32:f4:fe:97:63:71:13:9c:63:ac:3b:b7:
e8:98:06:5e:bb:3d:eb:91:0d:54:a6:8c:d0:3b:3c:d8:0c:5e:
3e:29:f3:87:98:98:e7:50:a9:03:db:e2:64:f2:4a:fd:76:7d:
94:95:f6:94:9c:3d:45:55:d9:d9:69:04:c9:84:39:6b:e8:3b:
b6:4a:fa:dd:29:88:eb:1b:3f:80:28:24:67:8a:3b:5e:e4:c4:
b8:dd:4a:1d:32:46:be:bf:38:82:fc:b5:4c:63:5f:d7:63:6e:
79:be:07:b9:ed:6c:e8:6c:75:7b:6f:66:cc:77:c0:3f:47:e1:
c7:93:e5:9f:92:e7:e1:99:22:7b:b4:fe:bb:88:ea:44:f5:42:
67:56:07:a7:aa:48:da:89:a5:18:ce:84:c4:e7:60:6f:fa:f9:
e3:32:9a:6d:b3:6c:e8:98:78:16:24:da:bf:4e:af:c2:b3:5d:
6f:c6:b0:e4:b7:22:5e:26:77:98:14:b5:b8:e0:ac:82:71:d7:
d2:90:2e:97:73:c0:2d:83:f1:b2:4d:aa:f3:6e:20:18:cf:d6:
e4:54:98:59:1f:a3:68:02:1d:47:a2:58:96:7d:60:41:9b:e5:
d8:fd:8a:34:9b:cc:8c:7d:d1:eb:2c:c0:2f:a4:51:9a:84:32:
b9:b8:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 05:01:46 2026 by rpki-client