
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier: TnmNO7mUJ1lTyeR1y83sfhwo/zpMkifGcFjaWfJ9Zxo=
Subject key identifier: B3:F5:14:F5:CD:BC:92:45:30:A1:B1:D9:AC:16:5C:4D:E2:48:B7:58
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 3656976043094A62A799A77EA4E59019529EACB8
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number: 0202
Signing time: Tue 21 Jul 2026 15:06:16 +0000
Manifest this update: Tue 21 Jul 2026 15:01:16 +0000
Manifest next update: Wed 22 Jul 2026 17:52:16 +0000
Files and hashes: 1: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: 0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=)
2: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=)
3: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: ZtdnTobo31DcIKKVlS0Uh3z/tu6vLSyYjZllTo3VnsI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:56:97:60:43:09:4a:62:a7:99:a7:7e:a4:e5:90:19:52:9e:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: Jul 21 15:01:16 2026 GMT
Not After : Jul 22 17:52:16 2026 GMT
Subject: CN=B3F514F5CDBC924530A1B1D9AC165C4DE248B758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:bf:7d:f1:27:b2:ab:e4:9f:ed:2a:ca:db:
15:7f:f2:2a:76:8a:c7:34:50:5c:cf:df:7d:79:10:
19:f9:06:31:a1:a9:73:08:f5:de:60:48:e1:e3:62:
d8:6a:4b:ae:47:61:88:65:3e:e2:72:30:1c:6b:a5:
a9:6b:67:6e:24:84:87:ca:a5:8f:d9:09:8a:e5:0b:
98:4d:aa:9c:8d:9d:40:ca:6e:4e:ff:58:0b:03:bd:
c7:81:e6:c5:d7:25:3b:c9:ec:f8:e9:6e:b2:41:d0:
0c:5f:e5:4e:5a:73:1e:04:23:4e:02:55:3f:98:d8:
4c:cc:ea:ef:3b:73:88:f9:66:9d:5a:88:00:3f:0b:
79:cb:c1:c5:0d:8b:7e:1e:b4:8f:51:94:2d:b3:c8:
6d:8d:3e:4f:de:aa:5c:60:51:06:90:ed:2b:b4:c8:
55:fd:90:9d:16:b4:a5:44:4e:8d:a1:99:24:88:01:
0c:c1:56:75:5a:09:cc:23:63:6f:35:75:96:38:c8:
fa:19:e6:83:0a:bb:d1:ca:75:51:c0:cb:5c:e0:de:
0e:de:99:5a:60:a5:36:75:23:04:2c:bc:38:17:88:
d4:29:ce:df:6b:d3:f9:77:d9:fe:a7:dd:cc:a2:f4:
d2:e7:1e:8e:ac:54:c6:a3:ad:61:b2:b6:47:3d:48:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:14:F5:CD:BC:92:45:30:A1:B1:D9:AC:16:5C:4D:E2:48:B7:58
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e8:ed:67:c3:7e:95:51:58:f8:3d:56:0d:83:30:72:7a:a5:
c3:61:39:f5:31:c6:53:df:f3:66:bb:6c:61:d9:bf:dd:e4:e3:
7a:47:4c:72:b4:8b:a0:31:f4:c8:d6:8a:41:e8:45:28:6b:26:
b9:c8:8e:b4:3c:b1:18:52:a8:d9:27:af:fd:c5:32:0e:47:ca:
a9:ca:97:a2:5a:e4:de:5c:5a:a1:73:83:3d:ce:48:24:24:9d:
77:d6:a3:fa:ae:4b:5b:c5:b8:01:18:cd:21:88:d0:ad:89:cf:
26:94:8f:1e:e4:0f:33:12:76:e7:75:6d:a1:4c:62:2a:13:92:
59:b0:7f:b5:cc:e9:40:21:48:22:1e:c4:b7:40:32:23:ef:78:
34:7a:64:4c:be:04:64:bb:9d:0a:9f:aa:1d:06:55:99:81:05:
6c:67:67:3a:c3:aa:ee:6e:f9:4e:3b:3f:68:9b:50:d5:0b:4a:
e2:d7:25:b9:86:d1:49:69:77:16:3a:5d:76:1d:9e:60:80:e7:
69:30:ef:6f:e2:62:1b:55:c6:24:2e:73:59:4f:91:68:74:57:
e8:d2:1c:23:c1:8f:e8:fc:55:e1:dd:01:57:f6:f5:70:18:6c:
9b:f6:f9:b0:e3:e9:40:ab:e5:51:4f:23:58:9e:89:df:75:4a:
cd:89:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:16 2026 by rpki-client