Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier: Ru0E7twZ0+B1t/9nmBWilrG8WMaSqqe2uS2THn2YaVQ=
Subject key identifier: DD:A8:CA:9F:3E:F0:A2:2F:FE:E8:1E:F1:61:05:D8:24:0F:59:C4:0F
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial: 0BE0764526B492741EE034FB59C58741FC72E0BD
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number: 01FF
Signing time: Mon 20 Jul 2026 04:01:24 +0000
Manifest this update: Mon 20 Jul 2026 03:56:24 +0000
Manifest next update: Tue 21 Jul 2026 04:30:24 +0000
Files and hashes: 1: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: dfsfp9btMJucOCs+vNSeZUvpcaNxv7rvWKTipioEakI=)
2: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: vZ0SQM9g2f1tCR7NnyvJP9u2KEUCCZK7pU4499plOHw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e0:76:45:26:b4:92:74:1e:e0:34:fb:59:c5:87:41:fc:72:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Validity
Not Before: Jul 20 03:56:24 2026 GMT
Not After : Jul 21 04:30:24 2026 GMT
Subject: CN=DDA8CA9F3EF0A22FFEE81EF16105D8240F59C40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:25:e9:fa:ac:0e:0b:a9:e0:da:c5:cb:5a:
2c:c0:d0:11:bf:01:87:2f:87:0e:a8:9b:70:8a:3b:
c4:c2:bd:a6:00:e4:6c:31:b5:f6:27:10:d3:72:a3:
93:d7:1e:91:42:5b:f6:c9:e1:bc:86:93:53:82:da:
61:10:5d:20:38:0b:14:0c:96:47:c7:05:36:2e:6f:
be:1a:fc:61:20:dd:da:d5:cb:18:b1:8e:5b:92:f9:
df:03:5e:78:f8:af:49:67:22:50:ed:c3:b5:32:07:
a2:ce:66:de:7f:7b:cd:58:0c:5f:57:8f:f9:03:77:
a4:48:dc:9a:2d:0d:06:02:18:1c:62:40:d8:c3:b1:
ef:fa:b5:70:4f:fc:05:e2:3e:3e:be:c6:92:48:7c:
f5:78:34:50:8d:65:16:72:f4:6c:2b:76:93:3f:92:
51:47:6c:81:2c:ae:08:52:ce:93:9c:b0:c4:43:a7:
36:7d:47:c5:c2:a4:87:e1:92:52:41:00:ad:d9:92:
37:ea:60:92:a1:61:9c:3c:82:6f:b6:d6:e1:e4:d1:
d7:b3:48:f7:f5:e4:81:5b:ec:73:83:ca:b4:d7:b4:
b5:11:d3:e8:9a:3a:9d:69:c6:46:36:4d:00:5e:75:
6b:80:a0:34:59:a7:f1:2d:c8:ff:bd:40:4a:ca:90:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A8:CA:9F:3E:F0:A2:2F:FE:E8:1E:F1:61:05:D8:24:0F:59:C4:0F
X509v3 Authority Key Identifier:
keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:22:ac:76:fa:60:31:d2:cb:ec:96:fa:c0:ad:cb:2b:2f:2a:
6a:84:b6:35:f0:30:05:4d:54:44:65:ed:f5:8a:f4:f0:57:4e:
f4:2c:8d:34:b8:a2:fa:6d:b1:70:28:1e:16:f0:4e:02:79:9b:
17:be:1f:87:a9:39:6b:75:bb:be:73:8f:e2:99:11:11:e7:3f:
2a:8e:ca:ec:0e:3c:bc:36:dc:70:85:5f:e4:3a:d4:51:be:8b:
c6:33:4f:3b:9f:69:45:16:61:dd:5d:00:31:d1:92:fa:3e:f3:
03:e8:8d:71:79:45:43:7a:1a:91:a2:fa:bc:f0:f2:00:3e:70:
c9:5b:40:a4:7f:f9:fb:71:cf:be:67:fc:10:2c:f9:d7:ac:23:
56:21:55:53:ee:20:67:22:9f:d0:4f:5b:88:3a:ab:9f:5d:2e:
d3:42:dd:8b:bc:f0:57:38:03:c9:5b:d5:32:3a:42:f5:96:8e:
73:fe:99:fb:58:9b:ef:b0:63:22:08:63:14:cd:0a:43:1f:73:
a0:39:bc:76:49:49:27:80:63:1d:c6:d6:1f:ed:f1:e9:e9:03:
76:2a:80:05:de:bd:a9:08:c1:78:98:66:11:be:f1:84:dd:92:
01:60:5a:26:e2:ab:b6:90:fc:25:d7:78:1d:38:15:6b:60:9c:
64:32:fd:86
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUC+B2RSa0knQe4DT7WcWHQfxy4L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5
QzJBMEVFRTAeFw0yNjA3MjAwMzU2MjRaFw0yNjA3MjEwNDMwMjRaMDMxMTAvBgNV
BAMTKEREQThDQTlGM0VGMEEyMkZGRUU4MUVGMTYxMDVEODI0MEY1OUM0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVCXp+qwOC6ng2sXLWizA0BG/
AYcvhw6om3CKO8TCvaYA5GwxtfYnENNyo5PXHpFCW/bJ4byGk1OC2mEQXSA4CxQM
lkfHBTYub74a/GEg3drVyxixjluS+d8DXnj4r0lnIlDtw7UyB6LOZt5/e81YDF9X
j/kDd6RI3JotDQYCGBxiQNjDse/6tXBP/AXiPj6+xpJIfPV4NFCNZRZy9GwrdpM/
klFHbIEsrghSzpOcsMRDpzZ9R8XCpIfhklJBAK3ZkjfqYJKhYZw8gm+21uHk0dez
SPf15IFb7HODyrTXtLUR0+iaOp1pxkY2TQBedWuAoDRZp/EtyP+9QErKkOCJAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU3ajKnz7woi/+6B7xYQXYJA9ZxA8wHwYDVR0j
BBgwFoAUVT12Eeprzl7HlmnksfFH9ZwqDu4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU1M0Q3NjExRUE2QkNF
NUVDNzk2NjlFNEIxRjE0N0Y1OUMyQTBFRUUuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj
LzQvNTUzRDc2MTFFQTZCQ0U1RUM3OTY2OUU0QjFGMTQ3RjU5QzJBMEVFRS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGQirHb6YDHSy+yW+sCtyysvKmqEtjXwMAVNVERl7fWK9PBXTvQsjTS4
ovptsXAoHhbwTgJ5mxe+H4epOWt1u75zj+KZERHnPyqOyuwOPLw23HCFX+Q61FG+
i8YzTzufaUUWYd1dADHRkvo+8wPojXF5RUN6GpGi+rzw8gA+cMlbQKR/+ftxz75n
/BAs+desI1YhVVPuIGcin9BPW4g6q59dLtNC3Yu88Fc4A8lb1TI6QvWWjnP+mftY
m++wYyIIYxTNCkMfc6A5vHZJSSeAYx3G1h/t8enpA3YqgAXevakIwXiYZhG+8YTd
kgFgWibiq7aQ/CXXeB04FWtgnGQy/YY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:37 2026 by rpki-client