
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: WSN98AZJteD4l92NtkhH1DrWdvl7Gnwchpzqp3M5P0M=
Subject key identifier: FA:B9:F5:30:36:14:D6:CB:67:7F:3A:13:A4:ED:00:9A:41:C8:0C:1B
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 2D8F578D56221A36D98D7CD7A85ED83553943630
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: 01FF
Signing time: Fri 17 Jul 2026 07:48:30 +0000
Manifest this update: Fri 17 Jul 2026 07:43:30 +0000
Manifest next update: Sat 18 Jul 2026 08:54:30 +0000
Files and hashes: 1: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: x8ZSb+1ldH2+HWHNp1OnRRlj5YRqpU3YQDg+aJ7m/zM=)
2: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: sVNK77ext7ZoG9hmscu6oCp8bxY4i1SbymIxi1bKty4=)
3: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: 4DqS0wfJwZoZ6IfKaEoa21sc0lUetbPH520saQ/lz3Y=)
4: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: EPPNU2N02dspTOT+Qd29+6lRlfOZSF0Kd5muSJ8aZ+4=)
5: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: GFukpoZMTHuOyKdpxhCEWLRTCpkWdxDZ0EZZSximB54=)
6: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: BtQLTTQtkjt+dOkOSbzl625aMHPNaGi50iFnJSKyAXs=)
7: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
8: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=)
9: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
10: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: 1XdflJinlXArlQYa+sAbpcLHn6/YF993bIe/726/roc=)
11: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ED9T1TH/lLo9n75GsxMUU3iCH+Cefw8ulX1hszJwXAg=)
12: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: Xs+sIvX39wrcDJ0C6PsHrcRsnlkL3LVKpC1QcmMP3Gg=)
13: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: wtG4iZDQHopnv5FvmJF0lihSOVqR5JmK37bFpW6CqYo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8f:57:8d:56:22:1a:36:d9:8d:7c:d7:a8:5e:d8:35:53:94:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Jul 17 07:43:30 2026 GMT
Not After : Jul 18 08:54:30 2026 GMT
Subject: CN=FAB9F5303614D6CB677F3A13A4ED009A41C80C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:c2:4f:5a:d6:5f:92:e1:23:d9:6d:80:03:
3e:82:ee:08:bf:3b:fa:f3:f9:e4:42:40:47:41:fa:
06:88:1e:bb:b8:b3:6c:cb:29:63:50:2c:63:34:16:
0a:89:8b:b3:7d:ef:09:91:51:cd:25:fb:c7:89:f3:
60:c1:8c:e6:31:eb:44:4d:6e:04:a6:76:c2:22:17:
e0:5c:1a:42:00:34:52:01:50:bb:41:2f:30:0a:61:
22:a7:3f:2f:23:06:2c:92:4c:94:a7:89:70:e5:4d:
d3:de:8b:49:6a:3c:14:38:83:6a:99:4f:d2:f0:dd:
79:ed:f7:87:b5:70:0a:08:04:db:e4:8a:1c:77:f8:
67:6d:b6:bd:2f:4d:c9:22:63:55:5b:71:26:e8:08:
d2:cb:a7:5e:05:2d:17:ee:ee:0b:1a:b2:4d:93:b3:
f7:63:65:49:e9:69:d9:f1:91:4a:f3:5e:50:93:77:
ef:65:8f:80:b7:77:eb:41:04:37:77:82:9d:20:b4:
4b:39:9f:7a:d6:d5:05:aa:72:2d:ab:4c:05:b4:13:
3c:dc:5d:f0:27:85:d5:02:5a:19:9f:e5:25:1a:3c:
80:9c:f7:46:10:5f:9d:fe:bf:3f:4d:5d:b2:3c:9b:
16:3b:16:c3:cc:5e:fe:d4:fb:be:eb:b6:ed:b6:36:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:F5:30:36:14:D6:CB:67:7F:3A:13:A4:ED:00:9A:41:C8:0C:1B
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f2:8d:20:5d:52:12:e5:c4:67:02:08:06:03:98:2d:9b:16:
3a:18:c1:ce:ed:29:1b:aa:6c:46:ab:a9:ea:1c:68:f0:2c:11:
2c:e2:eb:3b:9f:50:b6:25:b9:d7:52:2f:04:5c:e8:c8:5b:a6:
f4:55:d5:23:3b:bd:1c:a2:4c:d7:a1:d9:bd:11:bc:4f:91:64:
a8:75:b6:6d:2a:e0:3f:72:42:90:25:5a:83:55:15:96:5e:52:
e0:12:ab:76:1c:fb:96:21:e7:8b:24:e3:ab:f4:5f:f6:da:f9:
e4:7a:2e:93:3b:cd:bb:0b:12:d8:9c:9d:8d:74:d1:06:25:ff:
e5:58:f4:30:e2:62:e7:f5:34:30:b6:be:27:d0:dd:c1:28:f5:
dd:86:cd:f4:64:05:c1:23:f9:f0:33:a8:6b:74:96:7b:17:3c:
d2:1d:d3:78:22:64:55:0f:a5:ff:13:a0:79:77:05:eb:4e:8e:
3c:e2:52:b6:c2:75:a7:07:d3:b6:60:45:a2:a9:3d:4d:bf:6f:
55:76:22:f0:1b:1c:ba:61:0d:da:56:1e:f9:1a:80:46:eb:ea:
d6:32:1e:37:f0:67:6a:9b:e2:52:b5:78:45:89:28:96:aa:c2:
e1:c1:d1:69:cc:61:6c:eb:a2:71:3d:f5:60:a3:fe:e7:c3:54:
73:83:a0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:53:58 2026 by rpki-client