
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
File: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft (raw, json)
Hash identifier: BoB0pUjXfPMCAsDnQMLtVkQSyXzz+Et0hihuKg4OZCc=
Subject key identifier: 52:AC:C0:13:4E:9E:85:1B:A0:7B:2D:E6:6F:94:ED:0E:72:78:6A:46
Authority key identifier: 4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
Certificate issuer: /CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Certificate serial: 0525F4A3A4269AFC1B293DB95BBD5F42ADB7B83A
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
Manifest number: 022A
Signing time: Fri 21 Aug 2026 18:14:58 +0000
Manifest this update: Fri 21 Aug 2026 18:09:58 +0000
Manifest next update: Sat 22 Aug 2026 18:45:58 +0000
Files and hashes: 1: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: nr0EeUwFCYdT0u41I7YugdCfJTvW+lp7pLcoJPTRJ7Q=)
2: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: BQAJsIHDKp+WibSEzaYJlb2U3HhnlfWtftOClSXrGv8=)
3: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: M+XKjYxBTHtjkzc8U29w8G5bFlSY71eD0eQWnk4BUcU=)
4: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: YV5J5MkUPewoTX1hUWUWk2r1xYeLwwRy5/ujgo4sYdI=)
5: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: o3l9HmXdTaRr7QEUzlZUguF0y8FsRdpH47Ocd6jZ4Wc=)
6: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: wugX3FqzZIQPjBl7AwvgQMAVaLwsouojOXLSMlZcTJ4=)
7: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: lj+8qLUABxRWME0NPnYLhXc7Q9mboRiSfwlMOOMRGf0=)
8: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: GfDTo5P3qIg8CFRKTrJhl2ZS/FY+3t9O8Sx9C2rOTZk=)
9: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: Zej5k6azfqZdpRgzIVoziRVVqBAFYW5Z82wumsiKQRI=)
10: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: DlTS9/n3nMzPBzhKqYlsCkDKeu9i4KOh/svpSxWmqkM=)
11: 4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl (hash: iSyohC3YaDI69U8tbGF212zkr+r/QfSXzwRcn2p/zLc=)
12: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: y0TBpQqqxyyx4Zi6QH9/slZALaHhIk7//cojMpVgoaU=)
13: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: NL6EPb5wnDp44lr9FJxSfl2w41sMyn89zsl2NAJN1S8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:25:f4:a3:a4:26:9a:fc:1b:29:3d:b9:5b:bd:5f:42:ad:b7:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDC571A5CDA13958BCE475F0E5D9101DB812057
Validity
Not Before: Aug 21 18:09:58 2026 GMT
Not After : Aug 22 18:45:58 2026 GMT
Subject: CN=52ACC0134E9E851BA07B2DE66F94ED0E72786A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:4b:38:62:3a:f7:80:4d:fd:93:04:38:80:
0f:4d:a3:87:be:19:41:e2:d8:64:ec:a0:16:41:a7:
e3:d7:9b:6a:86:8d:3f:28:f7:dc:8e:44:d0:7c:34:
5f:52:68:a4:88:dd:2e:cf:0f:76:0d:46:62:f3:5c:
60:54:71:e1:6a:c2:78:66:0e:a3:a3:61:a2:e2:c2:
30:70:7e:00:c4:05:41:4e:dd:e7:ce:79:b4:d0:89:
5b:cf:ac:c1:ca:07:ee:fb:a5:97:c1:17:42:0f:a3:
f9:9f:ac:e6:e2:b4:44:37:f1:c1:6d:00:d4:a2:c1:
76:a6:f6:6c:26:cf:11:c4:9c:cf:b9:c4:c1:75:46:
83:f8:f0:e4:00:b1:c3:d9:58:f3:fa:7c:7b:cf:00:
da:6e:a3:3d:1d:6e:6d:b2:91:67:b3:29:08:60:72:
46:12:4a:58:d6:54:3d:20:ee:7f:36:29:10:5d:72:
65:c1:b9:57:37:e6:78:f3:3e:8c:43:3c:9a:8b:66:
83:85:0a:36:ac:0b:54:d0:3c:7a:ae:5f:bd:d0:34:
c0:25:fc:82:c8:9f:d6:32:b8:df:8b:33:39:82:4e:
6c:0a:ca:16:78:0a:32:38:e4:91:25:19:68:16:41:
0e:3a:ff:5a:ab:da:94:84:d5:b8:a1:59:fb:13:35:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:C0:13:4E:9E:85:1B:A0:7B:2D:E6:6F:94:ED:0E:72:78:6A:46
X509v3 Authority Key Identifier:
keyid:4F:DC:57:1A:5C:DA:13:95:8B:CE:47:5F:0E:5D:91:01:DB:81:20:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4FDC571A5CDA13958BCE475F0E5D9101DB812057.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/3/4FDC571A5CDA13958BCE475F0E5D9101DB812057.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fd:70:da:83:7f:1b:5a:19:91:5e:0b:c8:23:ea:fe:38:c0:
37:e1:20:a8:63:46:ae:cc:eb:4d:c9:93:9d:35:a2:20:db:68:
e3:9c:b4:6a:aa:b1:6c:3a:22:88:09:30:ce:87:36:68:d0:1f:
12:a8:a0:e0:e3:59:6a:98:62:e9:75:36:c7:11:01:2d:c1:1a:
5a:b2:2f:b7:3b:bd:a6:0e:f5:81:fb:3b:a5:44:c7:34:ae:cb:
f3:a6:f5:a3:82:17:29:29:20:5f:6a:78:52:5f:cc:97:7e:af:
a3:5f:4b:11:56:46:08:99:43:2c:0f:fe:17:4f:a7:ea:55:fe:
e9:39:44:ce:81:92:ee:da:3e:0a:58:9e:59:fa:2b:a0:c7:77:
0f:43:31:9f:a6:49:41:c8:6c:c0:bc:7c:f3:5e:7e:63:f1:f8:
7e:fd:44:9b:4c:72:d1:95:59:f2:b3:a8:b3:ea:64:dd:a4:39:
ea:c1:a7:ba:16:05:cd:de:a1:44:1e:ea:26:b2:81:6d:2c:07:
99:a9:11:94:3e:1d:e7:83:d0:22:54:de:5c:76:64:1b:be:1b:
12:66:ad:e9:d8:6f:f4:a0:a7:66:0a:7f:14:fa:a5:c2:c7:5c:
35:00:a7:54:df:83:5e:13:79:f3:71:23:90:90:be:2c:c1:10:
d5:c3:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:05 2026 by rpki-client