Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier: JhvoHCpkppbWF9nwrbzDAR+oDVYU3sre/CfVUZdFVJ4=
Subject key identifier: 23:DB:59:FB:E8:D2:DF:40:F1:F1:9C:07:DE:81:DE:A5:AA:A4:69:1D
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer: /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial: 7348CB534885252C192167BCAF3649983FDF66BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number: 71
Signing time: Wed 25 Mar 2026 05:34:35 +0000
Manifest this update: Wed 25 Mar 2026 05:29:35 +0000
Manifest next update: Thu 26 Mar 2026 07:25:35 +0000
Files and hashes: 1: AS51396.asa (hash: eaEnuDqquMnzN1UxoxjD+6BvzZHcFE8FQDbj+LvxLvY=)
2: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: XJ8QtoI2/3aN5FfxnCbneJ/KmHUngieZS+ygueee998=)
3: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 07:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:48:cb:53:48:85:25:2c:19:21:67:bc:af:36:49:98:3f:df:66:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Validity
Not Before: Mar 25 05:29:35 2026 GMT
Not After : Mar 26 07:25:35 2026 GMT
Subject: CN=23DB59FBE8D2DF40F1F19C07DE81DEA5AAA4691D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:95:75:f2:aa:24:1b:f0:9e:48:22:be:65:
40:63:57:1d:a9:11:64:5f:a9:20:9e:55:10:8f:20:
79:43:92:a1:a1:95:05:d4:7a:41:8a:11:66:2d:a3:
d1:42:a2:dd:ff:29:f7:6c:78:17:a2:b5:cb:c4:cb:
b1:33:f7:96:e0:a6:20:b7:b9:f9:46:f9:9d:22:e3:
d6:04:b1:8f:8a:e4:da:71:4e:9d:49:4e:ef:7f:c2:
82:ed:ef:fe:e5:99:25:6b:38:3e:b7:f8:d7:9e:8e:
e4:b3:21:d5:2a:6d:0f:97:f5:3a:9c:ed:a5:5a:33:
8e:9e:90:2b:a3:5a:02:e9:58:39:ee:c7:8c:14:6d:
d8:aa:5b:44:32:ef:f1:9c:a3:75:2d:d1:bc:e6:17:
1e:40:a7:62:3c:24:1c:b0:d5:9f:d3:55:61:5f:e3:
d6:26:79:56:4d:c8:fb:aa:01:f9:ec:1b:92:0d:e5:
56:77:7b:f5:ce:a1:aa:cb:bc:a0:94:12:a5:e8:54:
3c:3f:da:00:43:96:76:e7:d8:81:87:ae:4e:8c:1d:
db:fd:80:32:a3:20:6c:31:21:bb:fa:44:7b:eb:f7:
b2:04:a7:ee:7f:ab:66:17:2c:54:b3:86:14:e8:dd:
21:63:d1:65:68:4f:30:89:bd:22:a1:7c:16:18:43:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:59:FB:E8:D2:DF:40:F1:F1:9C:07:DE:81:DE:A5:AA:A4:69:1D
X509v3 Authority Key Identifier:
keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:da:f0:9d:67:90:43:ee:34:c4:94:1e:2a:5f:82:af:a4:
fb:f9:6a:c9:30:0d:d7:af:2d:4c:03:1e:04:38:c4:ce:99:41:
85:7a:c4:ef:13:a3:26:d5:a5:37:a1:92:96:8f:7b:09:25:24:
e1:bb:62:70:67:ae:cf:93:04:f3:26:ae:ac:98:d3:e9:85:dc:
71:eb:34:c0:91:65:4d:19:55:d3:28:8c:42:cd:a9:73:f5:8d:
78:1a:e8:6b:b7:8e:3d:b3:c2:25:2a:19:4a:cc:c6:98:b4:ad:
44:47:51:52:b1:94:c7:01:93:46:e0:7c:83:bc:73:e4:88:d1:
df:5e:6d:ed:dc:e9:b5:8b:2c:50:f7:43:c0:84:87:0f:47:8a:
3e:5d:67:c5:87:88:ba:a2:de:ff:6b:8c:d3:27:f2:1a:1f:ce:
92:d9:11:42:2d:91:e5:66:8f:d5:a3:34:5e:65:8b:87:88:7a:
c1:bf:16:6d:83:c9:eb:0d:3d:21:fb:9f:03:e3:2f:0c:e1:bc:
ad:6a:ea:a4:ae:a7:82:13:cf:3d:bd:a4:74:1c:29:a5:84:b9:
7d:b9:0b:52:0e:21:b0:9c:94:d4:5e:64:6c:30:57:70:91:a7:
e6:78:00:bf:e3:d7:91:5e:54:4b:f8:6f:25:b1:e5:dc:d3:5d:
10:6e:19:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:46 2026 by rpki-client