
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier: jzdKXlHmzdJ3G33M0NToK7mmmicIDLkl7j3NM6KiP5A=
Subject key identifier: 93:59:AE:F6:C4:86:3E:56:19:F2:9F:0B:88:F6:16:76:2A:CF:BB:91
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 1CF8E29ED5C5830C56F99005D87A02B54E978001
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number: 01A3
Signing time: Tue 12 May 2026 22:06:05 +0000
Manifest this update: Tue 12 May 2026 22:01:05 +0000
Manifest next update: Wed 13 May 2026 22:10:05 +0000
Files and hashes: 1: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: uQGnohmzhX4ToKPPt9JEeS1EM7z1cdrsjrwKTxAHlf8=)
2: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=)
3: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f8:e2:9e:d5:c5:83:0c:56:f9:90:05:d8:7a:02:b5:4e:97:80:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: May 12 22:01:05 2026 GMT
Not After : May 13 22:10:05 2026 GMT
Subject: CN=9359AEF6C4863E5619F29F0B88F616762ACFBB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:30:27:f5:3e:9f:b0:5d:77:7b:b9:37:da:
3b:f6:68:57:8a:0f:de:8d:e3:8f:e1:a6:86:c3:f7:
cb:00:3b:7a:15:8c:0b:8a:2b:83:6d:e5:e0:97:96:
8d:ca:6d:14:ab:1e:0c:ec:dc:5a:62:81:6e:70:9f:
69:75:40:1e:30:5d:29:a8:3a:a6:e2:b5:42:b6:f7:
6b:91:84:f2:5d:d1:2c:02:4f:78:42:fe:3e:67:73:
60:30:ae:34:89:c7:d5:54:a8:7b:5b:5c:63:58:f1:
70:13:36:03:22:6f:d5:13:8f:a8:d5:bb:82:04:75:
b2:83:41:7e:fa:82:a5:60:28:42:58:84:6a:6f:ac:
42:0f:ee:e5:bf:a7:19:71:35:25:13:12:19:c4:a0:
a0:43:d4:0e:ec:bf:4e:bd:6e:50:75:76:89:e9:79:
e8:e4:8f:63:c5:ce:57:f0:0e:40:21:6a:df:d3:f4:
2b:74:4b:20:59:e0:74:d3:f4:84:6c:13:8a:ae:c7:
74:3a:ed:63:f1:40:42:67:55:a8:e1:9f:44:d2:4d:
b5:06:24:ee:88:76:cf:9f:23:bf:95:1d:a3:0a:0a:
c9:ae:24:09:fe:fc:ea:e7:f5:11:8f:1a:fe:d7:29:
df:5f:4d:ad:6d:3e:17:dd:ed:08:d8:9f:c0:3d:d8:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:59:AE:F6:C4:86:3E:56:19:F2:9F:0B:88:F6:16:76:2A:CF:BB:91
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:54:29:cd:83:c1:a7:5c:30:d8:ed:78:07:09:84:7e:e9:b5:
fe:92:eb:a7:7a:f1:42:a3:7f:76:1a:18:4d:5c:fe:1b:15:15:
7b:35:65:c7:b6:8d:4c:b5:38:b1:e2:27:5f:05:42:34:76:ed:
da:57:5f:0c:e5:6d:67:94:7e:78:6e:4e:e5:0a:cc:4b:26:52:
8f:8e:bd:aa:ba:48:74:67:96:d6:9b:61:7d:dc:d3:a0:80:e6:
07:b9:eb:79:41:28:e2:03:66:98:2c:7b:99:56:84:55:2f:d0:
1d:68:9c:57:c5:d4:99:77:31:ae:36:4e:09:b6:b4:a5:46:bb:
14:3e:b9:8a:d3:3e:dc:f8:68:69:8f:4f:9f:9e:ef:44:ef:4d:
b0:c3:b2:e9:e1:4b:7d:60:ef:5e:4d:25:4f:65:0b:81:36:9a:
73:de:e4:c0:95:ba:a1:85:17:04:55:55:1a:20:d2:75:db:80:
12:4b:e6:56:d5:34:a0:e8:3a:22:f9:a8:f8:f1:ad:40:79:87:
9c:bb:fd:51:35:12:7c:60:4c:b3:2e:80:bf:d5:21:b3:0a:0c:
f7:64:a0:02:51:fd:bc:db:64:5f:5c:d1:3e:d0:45:df:a5:26:
ef:6e:e8:89:6f:83:61:35:e6:cc:4c:93:97:6e:54:95:2e:43:
6a:de:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:05 2026 by rpki-client