
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier: El7hgttNk9qs0fw6a0aN372VHUOM0HGiEuXIjXyrBa4=
Subject key identifier: A1:0E:57:52:9A:5F:C4:8F:FD:90:9D:58:BB:DE:7F:BD:F9:AF:09:0F
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer: /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial: 0A78865CF9E87973D688045D3F96A5DADF577A6C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number: 0250
Signing time: Wed 26 Aug 2026 19:58:37 +0000
Manifest this update: Wed 26 Aug 2026 19:53:37 +0000
Manifest next update: Thu 27 Aug 2026 20:31:37 +0000
Files and hashes: 1: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: Bra/hJncALMAQ8DqQm6Tp5L0r0BV9fBzk4QaOVXLDuw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:78:86:5c:f9:e8:79:73:d6:88:04:5d:3f:96:a5:da:df:57:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Validity
Not Before: Aug 26 19:53:37 2026 GMT
Not After : Aug 27 20:31:37 2026 GMT
Subject: CN=A10E57529A5FC48FFD909D58BBDE7FBDF9AF090F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:10:3f:b2:58:6b:df:ab:2d:7a:ac:86:ee:
8d:9d:9e:a2:13:a6:75:44:11:ad:98:d9:ce:f8:dc:
da:f1:33:7a:ff:f4:0b:4c:c4:94:3d:3b:18:32:e3:
9c:dc:8b:ec:fe:1f:50:92:14:7a:90:97:bd:bf:1c:
47:81:2a:ff:29:a6:04:f9:68:59:42:a4:53:c0:ff:
73:f9:33:72:6c:1d:5b:50:6d:77:69:00:37:4b:5f:
f6:11:f4:f1:bd:d6:d2:eb:db:ab:4b:f3:3b:e5:4e:
98:2b:90:04:fb:a6:f3:14:c5:de:cd:f5:15:f3:f6:
c9:3d:29:06:83:d4:26:cb:dc:d8:2b:f4:ff:ea:5f:
ca:cd:11:2d:4b:7d:a3:76:a1:af:6a:28:5b:de:01:
17:5f:bb:2d:eb:77:91:18:00:d6:36:5d:2c:02:ed:
61:27:61:ac:d4:dc:0e:68:9b:02:77:96:e9:d8:12:
39:0c:14:d9:33:55:a6:4b:ad:1f:d3:77:62:c1:89:
09:da:1b:23:b4:c6:3e:b5:bb:7f:dc:6a:ff:71:9f:
e3:9e:56:3c:49:8c:6f:16:f1:38:7a:44:c4:1f:86:
51:18:fd:80:dc:9d:b8:ba:2f:2b:b2:dc:e8:31:71:
17:b8:8a:18:50:3f:57:2d:47:79:69:94:f0:69:85:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:57:52:9A:5F:C4:8F:FD:90:9D:58:BB:DE:7F:BD:F9:AF:09:0F
X509v3 Authority Key Identifier:
keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:66:c9:64:47:5c:70:8f:1d:37:d0:d3:e0:e0:3a:02:e1:8f:
b9:16:91:5c:ca:7e:7b:18:36:c0:db:af:d3:0a:f2:d0:34:09:
55:1d:1c:9d:0e:44:92:e7:87:6f:94:db:a0:f4:a5:22:79:cf:
c9:d8:3f:33:4a:06:ff:c8:a1:17:b3:87:09:6a:19:04:21:a5:
2d:b3:b2:96:fc:56:e5:ab:e7:ec:77:73:f5:af:33:9f:4e:ba:
52:f7:15:6b:0a:8c:22:e9:e7:77:97:ed:2d:d7:e1:ea:1c:0d:
a1:b0:4d:62:eb:a4:48:64:f6:03:4e:90:3c:77:d1:cb:64:51:
71:1c:4c:f7:54:8d:a1:02:48:a0:de:ca:f8:d9:c2:40:68:85:
e6:65:ba:f5:14:64:b2:b4:02:71:21:f6:54:cd:02:7b:72:96:
05:33:f1:81:f2:4d:4c:e8:19:81:c4:46:68:cc:f9:1f:4c:b3:
78:68:42:53:0b:1c:a4:d6:e7:6a:3f:46:fa:61:e1:1b:4f:3a:
93:06:67:56:5e:4a:26:b4:cf:c9:ce:3b:db:89:71:58:a8:0b:
97:8c:cc:8e:68:6a:8f:0d:50:03:1d:a0:e7:42:79:a5:01:a3:
e4:74:39:72:cc:42:b4:11:a7:1b:db:b7:6d:e8:6d:b5:09:2a:
b3:e8:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:59 2026 by rpki-client