
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: /OpU5/TWeed7GanZTAHEjdWsXPIhLzuo8/yFX2p0iZ4=
Subject key identifier: D3:3B:60:29:A4:5A:2A:BD:BC:80:A5:F9:DF:1B:7A:FE:DA:F2:5D:42
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 112A25FDDB5437510FE048148D24449C5AFE622D
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: 0267
Signing time: Tue 06 Oct 2026 14:21:39 +0000
Manifest this update: Tue 06 Oct 2026 14:16:39 +0000
Manifest next update: Wed 07 Oct 2026 15:14:39 +0000
Files and hashes: 1: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=)
2: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: drG5/1zxKoxhLb+VmStJjNu4qYyTHGEiSvPpWqsnA84=)
3: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=)
4: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=)
5: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=)
6: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=)
7: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=)
8: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=)
9: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=)
10: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=)
11: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=)
12: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=)
13: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 15:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2a:25:fd:db:54:37:51:0f:e0:48:14:8d:24:44:9c:5a:fe:62:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Oct 6 14:16:39 2026 GMT
Not After : Oct 7 15:14:39 2026 GMT
Subject: CN=D33B6029A45A2ABDBC80A5F9DF1B7AFEDAF25D42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:96:fe:37:19:00:89:45:10:a8:e3:61:ca:
57:ed:be:b0:d3:56:8e:60:aa:12:a0:2e:b9:1b:c2:
27:37:23:ef:1a:7b:33:8a:db:a5:05:8b:23:78:7b:
e1:2c:cc:35:d1:3f:bb:c1:24:79:ac:6b:90:06:aa:
29:fb:f8:43:3d:c5:a7:50:a5:c9:73:f7:53:98:f3:
e2:6c:a9:3f:f3:fb:8a:1a:5a:15:25:1d:56:cc:c5:
5f:41:df:9e:8a:8b:82:7f:bb:f2:95:98:f4:3b:f1:
89:bf:f0:b3:a4:5b:e4:28:52:2f:b4:05:82:54:46:
49:a9:85:b9:ff:74:2c:4e:79:e6:37:c7:ca:1b:16:
29:65:89:70:c6:31:86:2f:bc:bd:a4:01:5e:0d:d8:
3c:19:28:b8:61:e9:7f:88:99:07:a4:b4:81:1c:c8:
54:c2:88:55:49:2a:e8:3e:ee:21:33:18:2e:82:53:
89:a5:c5:27:63:0a:21:da:cb:5d:9c:97:e1:c9:c0:
aa:11:c5:a5:77:73:bc:5e:f8:04:d7:e3:0e:4d:f8:
55:8c:0d:a1:94:91:ba:ec:0c:ca:49:0c:ed:d8:83:
9c:71:71:d6:17:90:8b:95:21:f8:26:64:df:82:6e:
81:9e:74:5e:32:14:cf:a4:33:d9:8c:56:e4:27:98:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:60:29:A4:5A:2A:BD:BC:80:A5:F9:DF:1B:7A:FE:DA:F2:5D:42
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:f9:4c:8a:2d:33:8f:81:43:2f:96:a2:92:73:af:3a:7a:
11:4a:31:3c:60:37:67:12:00:0f:72:1f:91:cc:96:4d:c3:09:
a6:20:d8:b6:75:73:45:3e:fa:b9:a9:67:ee:a6:9e:9c:ce:24:
34:7b:ce:ae:9c:84:18:44:52:74:36:c6:fd:fb:80:16:be:e3:
27:5b:ec:c1:9c:b4:f6:81:23:3f:7c:fe:0d:bd:71:60:c0:20:
92:53:6b:d2:ff:0e:de:8d:c7:fd:f8:56:9b:24:33:91:34:68:
92:51:86:6b:f1:21:b6:b5:a6:fc:b1:a9:01:43:a2:9d:7e:19:
18:75:7f:e1:64:1f:d3:98:10:3c:83:cd:30:38:88:04:22:a8:
94:a1:85:21:8e:43:45:d2:f6:83:c9:a1:c0:37:59:2f:cd:2a:
4e:1e:e9:15:6e:6b:e0:d5:2e:81:f2:20:94:7d:87:f1:8c:02:
f7:43:9f:d9:19:5d:da:51:f8:a0:93:71:fd:83:a8:f1:73:b4:
d3:14:53:e5:9f:ed:9e:88:ef:90:29:ae:73:32:8b:aa:38:7f:
e5:25:07:4e:87:47:11:ba:56:f0:90:07:d8:a5:3a:e6:58:3d:
82:00:17:7e:9d:9a:d9:ea:5f:80:52:bc:c2:e6:9d:6a:cc:d6:
dc:5d:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:48:01 2026 by rpki-client