
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: pGxmM90WSFJBvD3C+fP/qYa5qpaI27FHbJsC5Py7Bio=
Subject key identifier: A0:40:D0:00:E5:23:DA:98:DA:06:D1:83:46:28:15:C5:86:4F:E7:0C
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 42F7198D290ABD3DBF8E5D12A588F5270D46DB67
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: 0149
Signing time: Fri 06 Mar 2026 19:43:46 +0000
Manifest this update: Fri 06 Mar 2026 19:38:46 +0000
Manifest next update: Sat 07 Mar 2026 20:15:46 +0000
Files and hashes: 1: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: uqRsJY7KhhwwPaijQCvC3gE+TqC4+OLuBx54eDmXu1Q=)
2: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: 8vNlACv4VljcfTfQph4BWYbiB6JxXxu9u3pkSEnSFS8=)
3: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: sgKT96rKThQB6ppVhmCDbggp5qDvA2cp3RmFQMzSxHo=)
4: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: q63trgvlirS+Vgtt9rQwfx5g58dhjqx1zfXsQI8nfBQ=)
5: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: zj+PtOUjRL+jh8fX/z3gQawz9pZ6f2aTfcfOK+OABQw=)
6: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: 16vtCR02Wpx8fBrNg3BBjazTebmU9P6zPt+x/DW89rE=)
7: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: evMMfqo4Ez8yHDdFKOgCCAQkkBtJLTT2mhkV7j/a8vQ=)
8: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: jmju8VqIF7uHPknsXmKVCF/NlSPLUXdtHx+4q+t6HvI=)
9: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: R34yyXLS2JN3du0sWYjJzaZCEqLgwBOyYDGo+BSfbs4=)
10: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: 9V8f+kjKeAUUM95gFyLo820Chs0Y7IHMYFLg0AJNvf4=)
11: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: NCGL0xwyR9g2r6A71GgXDrp+Nhm2k3T8HoQFr0k0das=)
12: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: ChWpgzukurlzxHooG4tgPcRou2D8vGhyEjhwnFyvQlo=)
13: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: f56ZeNhzC2SfQF3WtfvHaAXxQIIVMtYJhNScjVogZ9M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 20:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f7:19:8d:29:0a:bd:3d:bf:8e:5d:12:a5:88:f5:27:0d:46:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Mar 6 19:38:46 2026 GMT
Not After : Mar 7 20:15:46 2026 GMT
Subject: CN=A040D000E523DA98DA06D183462815C5864FE70C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:3c:4c:f1:44:d1:b1:c5:6e:74:39:01:e3:
3e:f8:c4:8d:b7:f6:6a:45:33:40:f7:2c:91:45:0c:
2f:59:ed:b5:74:3c:f1:03:7a:e8:c4:5f:a7:c8:de:
93:c9:86:cc:d3:9f:8c:1f:a0:d4:42:a8:4e:62:06:
ab:72:f1:1d:74:6d:eb:5c:af:6e:f4:57:fa:66:45:
15:15:7a:40:e9:27:b9:e4:a3:70:8f:f5:ef:90:ea:
55:40:2e:92:d7:bf:7e:08:39:1c:d3:68:7e:50:10:
9e:a1:10:96:57:31:d9:6a:ea:86:4d:41:01:7e:fc:
f0:81:85:eb:49:b3:2c:87:1a:df:15:78:91:3f:d2:
06:cc:c9:d6:06:bc:47:de:03:a9:f2:df:0a:6d:bc:
4b:4f:40:dd:75:24:78:8c:e5:f5:64:3c:7b:70:64:
1e:11:a2:54:75:b9:2e:72:96:e4:5d:4d:e7:fc:3d:
ad:ca:4f:01:cb:b2:33:71:7d:f3:f7:9e:9e:db:1d:
d5:8b:4f:aa:78:58:84:92:34:d5:0e:b6:3b:7c:a6:
dd:e3:22:74:43:10:90:8c:13:8e:b2:74:ae:ff:3e:
17:f8:e5:ed:94:6c:09:10:3a:83:b8:67:e5:48:8c:
7a:c4:c4:48:21:fb:7d:65:5f:94:4e:ce:a4:d1:e9:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:D0:00:E5:23:DA:98:DA:06:D1:83:46:28:15:C5:86:4F:E7:0C
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:4d:5d:bf:04:10:5f:65:8d:79:52:77:05:81:d0:09:68:
96:92:5c:4c:06:7d:0d:f1:dd:53:5b:d4:60:84:94:ef:34:94:
1a:bb:56:c3:93:de:e0:38:e0:9e:cf:90:c2:10:5a:5d:b8:74:
62:90:82:ad:55:bd:3f:ac:92:98:c1:e1:07:b9:1b:43:03:2a:
8c:20:eb:58:7f:e0:33:c7:e1:3f:d4:42:5b:c6:91:59:e0:fd:
2c:0d:ed:3c:5b:89:d9:b2:23:8d:0e:1f:31:4a:3f:90:24:db:
3f:aa:16:1e:95:35:6f:3f:68:33:ec:94:9b:e8:af:73:a5:56:
5a:8a:03:66:6d:a1:c6:bf:4e:76:e8:38:4e:ba:d9:34:0c:6d:
8a:d1:84:49:26:58:f9:cf:b3:e4:d2:76:83:b9:e4:14:07:0d:
d9:3a:ae:43:a9:09:ed:c9:89:f8:75:6b:2f:51:8e:d6:21:d9:
dd:78:1e:58:fc:0e:a6:2a:7e:d6:50:b0:4d:28:4d:d0:b4:2a:
0b:32:4e:05:fd:58:c1:67:f7:5c:ce:48:fc:9f:54:4c:86:9b:
15:26:b2:d4:97:a7:82:82:bb:a5:95:d5:a7:12:7b:4c:c9:17:
5f:d8:42:fa:6d:e5:78:20:eb:2d:67:3b:7c:68:d5:d5:26:be:
38:66:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:17 2026 by rpki-client