
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: p2m3Ut1C62fZquCXcrNz36Ukls4zH3oryim1kSm0S7E=
Subject key identifier: 9A:AB:2C:E8:57:03:86:32:1C:75:07:59:D4:C0:90:8B:27:48:84:8B
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 2A9E8A16A363C47BBC07CDE701013FE6BCB0054E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: 01A8
Signing time: Tue 12 May 2026 15:19:17 +0000
Manifest this update: Tue 12 May 2026 15:14:17 +0000
Manifest next update: Wed 13 May 2026 17:59:17 +0000
Files and hashes: 1: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
2: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
3: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: PswyngqpWmUd3B39h4MbNlENAwMJMPzgc2L89yGw0RY=)
4: 326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (hash: NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=)
5: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
6: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
7: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
8: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
9: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
10: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
11: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
12: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
13: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9e:8a:16:a3:63:c4:7b:bc:07:cd:e7:01:01:3f:e6:bc:b0:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: May 12 15:14:17 2026 GMT
Not After : May 13 17:59:17 2026 GMT
Subject: CN=9AAB2CE8570386321C750759D4C0908B2748848B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:e0:b7:28:47:30:0c:40:8c:91:c4:b3:0c:
02:de:c5:9f:f3:bf:c6:ff:f3:56:63:d0:fc:d9:b6:
3a:a2:94:92:19:d0:bb:83:44:24:15:4f:d1:76:49:
75:1d:7b:af:d0:1b:2e:09:68:5e:d6:39:8b:cf:c8:
6b:31:54:dd:2e:85:9e:53:ff:6a:08:60:af:92:e0:
c3:4f:c7:85:24:25:52:64:1b:b3:78:6c:d7:65:ce:
03:37:3b:b3:4f:27:96:44:a1:34:c4:52:82:5d:d4:
76:97:d5:78:f1:2c:14:43:11:40:46:ce:52:90:24:
27:a7:a8:35:e0:95:4f:33:dd:0e:c1:c8:1e:4e:39:
05:aa:60:38:58:e5:4b:29:47:3a:fe:a2:78:d1:a2:
9c:bc:02:61:8b:c1:9b:e8:29:5e:2a:63:d1:12:60:
e5:16:f2:67:90:41:1a:ef:c9:cb:dd:ad:3f:7a:62:
2a:96:de:17:e3:48:2a:23:5a:f9:01:e2:91:26:80:
33:cf:b3:28:77:60:d0:ee:5d:c7:b1:31:b6:49:fc:
93:1f:ab:0d:13:06:09:f8:61:b5:50:c6:9e:6d:a1:
39:d4:e4:6d:1d:81:98:04:b4:4f:23:6c:e8:37:d7:
51:e5:b9:61:ca:c5:66:e3:f6:04:d2:61:0a:3e:e6:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:2C:E8:57:03:86:32:1C:75:07:59:D4:C0:90:8B:27:48:84:8B
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:c1:6a:26:28:9c:be:b5:95:bb:c5:60:e0:ef:45:c6:7b:
ae:c1:41:b1:11:83:28:44:9c:c8:90:74:c0:86:72:68:b6:9b:
5b:a5:40:60:f2:9a:64:41:43:b7:aa:89:d7:85:83:ad:56:34:
88:19:65:ca:a5:1b:f2:d3:27:f2:58:24:51:81:ea:1c:11:3f:
64:60:72:b5:74:39:ee:e5:18:bd:c7:fa:10:36:50:27:4b:e5:
dc:86:12:fc:fb:b6:06:ec:c2:ac:05:60:6a:f9:fd:06:52:11:
07:9f:ba:88:35:41:66:41:1a:78:50:b5:c3:f3:d9:01:85:fa:
f1:5e:c0:cf:b6:4a:4e:94:18:61:3d:02:8f:53:80:61:70:e9:
cc:8a:f0:59:18:dd:a8:94:ef:bc:2d:5a:85:d9:c7:ea:3f:25:
ee:da:28:96:63:e8:ac:04:23:08:0e:e7:a1:96:d9:fe:c2:b4:
4a:d0:74:b7:6d:04:79:6c:d2:ab:ff:e9:2c:de:47:3a:4f:ee:
ac:47:65:a5:a8:06:97:78:a8:4f:9c:97:9e:2b:9a:b2:42:e6:
6a:9f:af:9d:96:eb:34:e6:fc:74:42:64:97:a2:c2:de:6a:3e:
d9:c0:e2:f7:5e:14:fb:6c:0e:e0:72:bf:5e:ce:26:f6:e7:4b:
9f:40:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:18 2026 by rpki-client