
$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
File: 36E709368620BD63612D7AF179D2A786396A87A5.mft (raw, json)
Hash identifier: N8q6n2GfPbXrhI+cItk73px9DOobcPFsS/v/KeBxeA4=
Subject key identifier: 50:D0:E6:FC:D1:60:EA:D3:AF:D2:04:26:39:D3:7B:3E:39:D0:1C:58
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Certificate issuer: /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial: 2CE9E1D460E518180F50C1AAB6FF57423B5D4175
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
Manifest number: 0164
Signing time: Wed 25 Mar 2026 22:27:32 +0000
Manifest this update: Wed 25 Mar 2026 22:22:32 +0000
Manifest next update: Thu 26 Mar 2026 23:10:32 +0000
Files and hashes: 1: 326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (hash: h/s4tew81Yh64OLotMKMEnaDt3sFUjU1FYTmZDG0IcA=)
2: 36E709368620BD63612D7AF179D2A786396A87A5.crl (hash: Gi8DvsyPCBz/bPpVGxHp+Lu4nr1y8V+A1AT1G9mTPJI=)
3: 326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (hash: d5u5k+3/rjeFAbZMAZL2Vjbr4aRvWxZsoNuduoSU1fw=)
Validation: OK
Signature path: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e9:e1:d4:60:e5:18:18:0f:50:c1:aa:b6:ff:57:42:3b:5d:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
Validity
Not Before: Mar 25 22:22:32 2026 GMT
Not After : Mar 26 23:10:32 2026 GMT
Subject: CN=50D0E6FCD160EAD3AFD2042639D37B3E39D01C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:2a:f5:c4:39:ec:58:f4:47:58:e5:86:74:
5e:cf:b4:ad:b2:f1:f2:ca:73:29:65:64:e8:2f:b3:
fb:63:bf:8b:93:a1:a9:bd:ed:7b:db:3f:c8:46:f6:
06:41:30:63:ed:c4:0b:30:be:a1:f1:3d:58:c7:c1:
0e:60:94:6b:61:9d:b5:9c:83:f3:76:d4:5f:2e:dd:
8b:47:df:87:83:3c:19:01:d5:86:c6:24:a5:77:2b:
4c:1b:c0:1c:a9:11:2b:00:19:d5:b7:3d:a6:af:c9:
3f:ad:c9:49:8c:99:71:88:94:0f:22:88:68:69:66:
9a:28:c3:c4:30:ef:c1:90:2d:07:22:e3:a7:d5:3c:
17:7a:89:8d:7e:a6:df:a1:36:31:cd:00:bc:26:49:
33:b5:ee:4a:5e:f8:fd:c6:6e:b7:c3:46:8b:36:6b:
64:07:aa:75:52:9c:7b:36:69:51:b7:e8:bb:44:7e:
8e:05:ee:c3:cd:20:8b:88:c7:b9:74:cd:b3:e6:ba:
ab:f3:c7:09:50:12:bb:69:cc:aa:a7:9d:73:04:0b:
c8:4e:cc:6f:95:a8:0b:4b:ef:7d:cc:94:5c:c6:86:
6a:91:f4:3a:7f:81:49:22:9e:f7:c9:1e:7a:ea:54:
d4:bc:f6:e7:b9:6f:e6:9a:91:f1:32:a9:e6:08:0d:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D0:E6:FC:D1:60:EA:D3:AF:D2:04:26:39:D3:7B:3E:39:D0:1C:58
X509v3 Authority Key Identifier:
keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bf:b7:19:15:e7:76:7d:4d:d2:18:e2:66:66:65:5d:25:7f:
a7:b6:e0:bd:87:e4:78:5b:35:71:27:f8:e4:29:5f:e7:43:ab:
e3:05:87:11:a5:79:52:56:ec:0d:50:63:d4:2e:1c:f1:75:65:
16:18:83:7d:35:34:69:44:a3:30:80:f5:04:12:91:68:6a:47:
ef:fe:18:68:73:0e:90:e3:67:af:04:75:37:32:8b:6f:78:76:
af:49:f9:04:b0:82:bc:7b:e8:27:94:c4:7e:9e:42:7a:6a:63:
db:a4:7e:2b:df:f1:ba:ec:bc:21:9e:63:28:01:55:e5:f9:a8:
a5:dd:f1:6a:9e:1e:95:55:f3:1d:99:15:5c:09:44:f1:6b:1e:
e9:99:9c:f8:04:56:66:31:b4:4b:ca:a0:33:75:d4:f1:de:ef:
95:ca:98:c5:4e:54:a0:6b:33:e3:09:86:8f:a8:db:02:bf:e3:
a0:06:4d:89:a1:33:26:07:34:22:08:5c:55:6b:87:b1:f1:db:
57:7a:c1:a1:57:92:03:ea:83:c4:b4:6f:d3:79:d7:f3:e0:f6:
9e:83:83:a5:89:45:eb:3b:d5:9f:30:83:dc:4a:e2:6f:b5:f4:
40:90:cb:13:e3:6c:4c:16:74:53:3c:c8:f0:2f:d0:a2:31:03:
34:99:60:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:13 2026 by rpki-client