
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
File: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft (raw, json)
Hash identifier: W066ZSf8I0MD0gADJjYRzN+bKaNkizahWhitK3/7kRI=
Subject key identifier: 45:44:10:1C:16:D0:49:1B:4C:D0:FB:57:E6:00:7C:D9:B2:C1:10:28
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Certificate issuer: /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial: 56F48A5DE730FD377B8D34DD4A6080817B17AC75
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
Manifest number: 0163
Signing time: Thu 26 Mar 2026 15:31:20 +0000
Manifest this update: Thu 26 Mar 2026 15:26:20 +0000
Manifest next update: Fri 27 Mar 2026 19:19:20 +0000
Files and hashes: 1: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: fHW/lCvDc1XAsZ9E1Y/HvwEyGix+WPtzaT4hDtTQpHM=)
2: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: TcZZuAWJaOHQpXHN6lfF7/ENwLkSC5UfCjQUfKogcBE=)
3: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: WioV+sq94xvUsWsll+5Q8EkQ36B8/m9RnTH6oRqpj+8=)
4: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: k9WJ99SX7aTZwDYsUzJBYzARw8TZTM2BX3i3N+Ee6bM=)
5: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: cY5oExmQLWhvhLDvLbqW+uBbyk1VjOi3DKdni6lZX4E=)
6: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: Xnx5m7unbJgIPHX0j6zUTmlD5uCIhAffrL8uNA2ETSg=)
7: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: aCR7Djf6F7ot6IGv4qJolckB6Hwdtt9rLMj/LBxcfS8=)
8: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: w2EeiCF+tbKMmOoFYBqzZoSSzDfj9tN/LDactvJUZZo=)
9: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: E2kph64BLFRAhCtrkyUI3XQYKC/A1Crg5SvTtw+mxNQ=)
10: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: JONv6weNpLYIoVclohZCDU/ZppdNC1Kw68H19t2Odek=)
11: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: 3OfkKwNSUq4yIbyS7EkCP2uCgeHqAJ6wd8O6l2GgwTo=)
12: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: A6dMPcDVvAm2/mTQl5zfF/P12rP5E/0NT4CV7AixNWc=)
13: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: vSG/KpzDEQq4+JfLwpPzzStdyH6/Om/hRZHdOZi4zzw=)
14: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: p2o1yXHsIxpnRd44bjihWHVn6MaMhtMpWjfOAyceXpY=)
15: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: w4QduBJxaGnsws7o+9RznEINzdMyGMWIEo6q5XRFLE4=)
16: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: AH6fqe4qZiPv/gSh+4dRRGDFVLAJqVrKbZlihrh7FUo=)
17: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: lY8kUvqiJ+AriOnYIKK6OftdT6Hb+ovgk/JosC0yv60=)
18: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: YHvYeedQkkKkz6S1VU1ULzE2Cwhk/aJA7/6mNWyITcw=)
19: BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl (hash: +st9LJT/FT5+bJAEmUEWLDvKNMURxCCcYWQa9aTmYoQ=)
20: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: VdH1rmngxdsry2bTnH9gOiLaPyDXqjQsVqkD+I+D36Q=)
21: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: AHGjNaJ/WzTiVF8ARIxPxHm+eWjD34CRX2Rzq0o77Zc=)
22: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: Ak8zkEYi1oEi/oeJzu452sjFwTtK4sdKPFAGjU4iI90=)
23: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: ahHELRULgHjri55ivlXp7deB4HheB+T1e3Rbjf2ZRlc=)
24: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: hYi+hhHjwGCkmO0X7KADZcFu1u0xzn4wmtuD1vEoPpo=)
25: 326130353a646663313a356631303a3a2f34382d3438203d3e20313338313930.roa (hash: OXRuIjnaNSajA8iGnhHNZuHrBWkw73Xfcn/Uj57PDVY=)
26: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: hqGCUVhF1o7nJGTVBmjcxnI7fkr4Nwy0dt9JVppF1Io=)
27: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: zhTMqHT9k7jUYRrHYp50z209XEnwWLBT4JJ4e/BZSXk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f4:8a:5d:e7:30:fd:37:7b:8d:34:dd:4a:60:80:81:7b:17:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Validity
Not Before: Mar 26 15:26:20 2026 GMT
Not After : Mar 27 19:19:20 2026 GMT
Subject: CN=4544101C16D0491B4CD0FB57E6007CD9B2C11028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:79:44:4d:41:e6:f4:00:5c:fb:f4:f0:3d:
51:b6:50:49:8f:32:61:05:e6:02:3b:93:d7:9e:f0:
d3:0f:c6:7a:c7:7d:13:19:83:e3:b8:a6:b6:7b:9c:
f8:33:c3:00:eb:63:12:e5:6d:77:2f:bc:25:b6:ba:
7f:d7:de:75:25:90:09:26:3e:e7:d2:dc:75:a4:fe:
ff:8f:39:ce:47:05:e4:9b:94:75:20:7b:4f:ac:31:
d8:44:c2:1e:71:ed:47:56:84:47:91:06:a9:a4:3f:
7e:fc:4a:64:3b:6c:fb:3a:19:d2:c8:34:b7:e5:f2:
ad:03:0f:12:62:63:51:b3:6f:89:7f:65:ba:e8:3f:
c7:0d:d2:ff:4a:69:40:d9:0e:ba:a4:7d:88:83:e5:
d6:fd:f9:07:23:71:98:a4:97:e8:ef:c3:a2:fd:bc:
e4:48:71:21:b4:7b:0b:d1:6f:2b:b7:59:d6:53:ee:
0d:44:cd:d0:5e:23:e3:38:bd:38:96:f0:97:8f:e0:
79:b8:76:80:77:0b:6d:dd:e7:c6:10:93:f6:25:19:
de:a6:03:92:87:1f:c4:ac:94:d1:2e:b7:ad:97:fc:
50:ad:b3:51:bc:6c:38:4f:f0:ad:d5:85:da:79:d5:
98:a6:52:95:0a:82:c1:03:36:e4:90:3a:fd:d7:c9:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:10:1C:16:D0:49:1B:4C:D0:FB:57:E6:00:7C:D9:B2:C1:10:28
X509v3 Authority Key Identifier:
keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f6:25:19:bf:88:eb:eb:f3:a4:5b:53:31:f9:a3:21:8d:e5:
cc:9c:88:54:e2:3d:ac:fc:ce:aa:a4:82:2b:51:a0:c9:9c:85:
5d:19:86:3e:f8:bc:fd:b0:8c:2a:20:88:05:01:a8:3c:83:03:
ba:36:73:cc:8f:e3:23:77:b9:d1:93:8e:83:b3:77:5e:72:1c:
ae:12:c4:99:88:ec:f7:f6:e1:c5:9e:2e:cc:fd:b9:2c:28:52:
21:f0:5b:55:c1:0e:13:8d:53:e1:11:4f:3c:1b:66:6b:07:07:
e1:7d:76:8a:c5:d8:0e:b7:e3:4e:cf:73:10:0d:af:aa:f5:88:
d4:5b:07:8f:ad:45:58:27:d0:83:ae:e8:ed:c9:0f:52:34:34:
8f:c8:7f:84:a7:ce:b4:5b:08:14:6a:08:91:f0:5f:f2:de:14:
e4:43:5f:5a:e2:ce:76:0f:f9:39:8f:b1:bd:d8:f2:95:c6:da:
03:b8:54:16:56:b0:b6:fc:fa:23:e9:5d:48:ca:67:1c:dd:58:
4a:3b:ee:3f:0a:1d:1f:f6:4e:2b:64:dd:9b:e3:3e:a5:5e:33:
b8:dd:60:51:9e:75:0f:b0:44:8d:94:71:2f:c5:bb:2c:76:75:
38:58:4d:9a:5e:5c:24:db:c7:be:b2:2b:67:f2:60:ce:7c:86:
5e:89:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:33 2026 by rpki-client