
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
File: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft (raw, json)
Hash identifier: QA0BObdDk5fPXHpmTyce5nmEFGPS0aBS1U7vFJ2vfS8=
Subject key identifier: E2:A4:A8:FA:5D:AF:C9:74:F2:90:0E:70:DC:5E:90:56:80:60:11:7B
Authority key identifier: 4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
Certificate issuer: /CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Certificate serial: 6DBB64EF3E1086E25A896A4B3AAFE1542CB86780
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
Manifest number: 01A1
Signing time: Tue 12 May 2026 17:53:22 +0000
Manifest this update: Tue 12 May 2026 17:48:22 +0000
Manifest next update: Wed 13 May 2026 19:43:22 +0000
Files and hashes: 1: 4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl (hash: NFTNY7dFMsTMDecI6j0WVCDxHemzhnAvINST7xBpKV4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bb:64:ef:3e:10:86:e2:5a:89:6a:4b:3a:af:e1:54:2c:b8:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681
Validity
Not Before: May 12 17:48:22 2026 GMT
Not After : May 13 19:43:22 2026 GMT
Subject: CN=E2A4A8FA5DAFC974F2900E70DC5E90568060117B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:4c:18:e0:8b:8b:de:7a:57:da:7e:fd:d3:
40:b3:8f:a5:54:29:20:e6:78:1f:c3:f3:a1:44:9c:
e7:b8:d0:8f:fb:93:5f:61:f2:55:25:2f:c5:d8:32:
d0:73:b1:83:07:fa:de:94:7a:5f:36:40:a4:a1:33:
d8:6f:dc:58:e3:6b:aa:27:21:90:eb:39:85:71:05:
d9:75:ab:9e:d8:a2:c7:ec:05:d2:47:c6:7e:86:c3:
c7:c1:66:f0:2b:16:4e:00:b4:4b:c3:15:12:01:69:
78:e0:d6:f7:02:e9:c3:5c:7d:e8:cf:3d:db:8d:86:
13:84:0c:d3:6e:4c:ee:df:db:cf:2d:c9:ca:86:84:
24:ef:ec:0e:a4:c2:0a:c5:55:5f:4e:37:dc:06:7b:
a6:90:2d:5a:9d:a3:f4:06:5e:b0:47:f6:90:91:f7:
19:23:ce:5e:5f:a4:69:31:c6:9d:38:36:90:07:5e:
70:1d:96:07:60:e6:2a:81:a9:61:c3:d4:cb:03:76:
6f:c5:4b:8b:ec:2f:0d:cf:56:07:8a:93:bb:f8:2a:
d2:be:e2:9d:a0:07:80:94:fc:23:b2:b0:2d:9f:4d:
6a:7c:1e:e2:e7:ce:de:38:5a:15:69:01:99:50:6f:
a2:03:3b:d5:dd:5b:30:eb:fc:77:9c:81:bf:81:39:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A4:A8:FA:5D:AF:C9:74:F2:90:0E:70:DC:5E:90:56:80:60:11:7B
X509v3 Authority Key Identifier:
keyid:4C:8F:14:A9:80:41:CC:D9:EA:EF:C4:56:FF:5A:AF:BF:49:01:C6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/4/4C8F14A98041CCD9EAEFC456FF5AAFBF4901C681.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:39:8d:53:c9:7d:5e:f4:4d:ef:14:f1:4c:28:70:fa:6e:
60:01:a4:48:47:c2:59:d8:9f:e1:fd:5b:3f:3f:ac:47:f8:83:
9f:82:ab:81:13:48:d0:44:c8:ab:41:fb:3b:17:4f:ab:b1:6d:
f4:9d:d1:af:46:53:21:7f:df:53:00:11:70:c5:fd:99:5f:fc:
45:7f:2e:24:8f:42:23:45:59:0c:3a:3a:9f:b2:3d:c0:8d:d1:
f8:54:16:c9:6e:da:12:ad:20:ee:14:6e:70:7e:5e:19:3b:70:
0c:9e:53:14:5b:dc:58:e7:8d:79:1b:89:94:ae:de:41:09:d4:
29:45:fb:61:5d:eb:59:96:de:95:32:10:e0:05:e9:bd:72:e6:
7c:67:7e:b6:e1:66:ff:9a:a2:46:6b:30:23:a4:f5:30:17:a9:
bf:0a:6e:d0:f8:06:d4:b2:c3:9e:ac:dc:37:68:a3:9a:0a:69:
44:60:a0:2f:0d:84:b1:c5:ee:39:a4:aa:93:11:52:4c:cf:c3:
89:42:98:89:8c:0d:08:02:56:04:16:6e:b4:db:c6:97:09:2f:
36:5c:2f:53:d7:86:ca:32:b4:30:e7:5f:1a:11:88:98:ef:78:
2e:6a:ed:1e:ba:f5:43:af:f0:ac:e0:9d:a0:7d:b5:b8:b9:36:
10:0f:3b:08
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUbbtk7z4QhuJaiWpLOq/hVCy4Z4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0
OTAxQzY4MTAeFw0yNjA1MTIxNzQ4MjJaFw0yNjA1MTMxOTQzMjJaMDMxMTAvBgNV
BAMTKEUyQTRBOEZBNURBRkM5NzRGMjkwMEU3MERDNUU5MDU2ODA2MDExN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4akwY4IuL3npX2n7900Czj6VU
KSDmeB/D86FEnOe40I/7k19h8lUlL8XYMtBzsYMH+t6Uel82QKShM9hv3Fjja6on
IZDrOYVxBdl1q57YosfsBdJHxn6Gw8fBZvArFk4AtEvDFRIBaXjg1vcC6cNcfejP
PduNhhOEDNNuTO7f288tycqGhCTv7A6kwgrFVV9ON9wGe6aQLVqdo/QGXrBH9pCR
9xkjzl5fpGkxxp04NpAHXnAdlgdg5iqBqWHD1MsDdm/FS4vsLw3PVgeKk7v4KtK+
4p2gB4CU/COysC2fTWp8HuLnzt44WhVpAZlQb6IDO9XdWzDr/Hecgb+BOa8HAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU4qSo+l2vyXTykA5w3F6QVoBgEXswHwYDVR0j
BBgwFoAUTI8UqYBBzNnq78RW/1qvv0kBxoEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzRDOEYxNEE5ODA0MUND
RDlFQUVGQzQ1NkZGNUFBRkJGNDkwMUM2ODEuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4ZWI4
LzQvNEM4RjE0QTk4MDQxQ0NEOUVBRUZDNDU2RkY1QUFGQkY0OTAxQzY4MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABD2OY1TyX1e9E3vFPFMKHD6bmABpEhHwlnYn+H9Wz8/rEf4g5+Cq4ET
SNBEyKtB+zsXT6uxbfSd0a9GUyF/31MAEXDF/Zlf/EV/LiSPQiNFWQw6Op+yPcCN
0fhUFslu2hKtIO4UbnB+Xhk7cAyeUxRb3FjnjXkbiZSu3kEJ1ClF+2Fd61mW3pUy
EOAF6b1y5nxnfrbhZv+aokZrMCOk9TAXqb8KbtD4BtSyw56s3Ddoo5oKaURgoC8N
hLHF7jmkqpMRUkzPw4lCmImMDQgCVgQWbrTbxpcJLzZcL1PXhsoytDDnXxoRiJjv
eC5q7R669UOv8KzgnaB9tbi5NhAPOwg=
-----END CERTIFICATE-----
Generated at Wed May 13 01:20:08 2026 by rpki-client