
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
File: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft (raw, json)
Hash identifier: OExa2KJCxjg3oIq87cZ/kjWQzGF5T/Uun8LlMdkdGZk=
Subject key identifier: B5:7A:40:A9:60:33:F8:B2:CB:E6:9C:B8:95:BF:14:AE:66:C1:EC:E8
Authority key identifier: 55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
Certificate issuer: /CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Certificate serial: 06FFDDEA89EBC69A117313C15C09B2FC547A9901
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
Manifest number: 0165
Signing time: Fri 27 Mar 2026 01:53:14 +0000
Manifest this update: Fri 27 Mar 2026 01:48:14 +0000
Manifest next update: Sat 28 Mar 2026 02:19:14 +0000
Files and hashes: 1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: +fw3SQMO92ygFCahRkoicBXvG1K7ggV1DgUpkn+lL98=)
2: 553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl (hash: ZtYuVZ/qW2QoIqQIpkvP9Wz5QazVpkq/213wD0rOG24=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ff:dd:ea:89:eb:c6:9a:11:73:13:c1:5c:09:b2:fc:54:7a:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE
Validity
Not Before: Mar 27 01:48:14 2026 GMT
Not After : Mar 28 02:19:14 2026 GMT
Subject: CN=B57A40A96033F8B2CBE69CB895BF14AE66C1ECE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:dd:26:ac:ee:02:a1:50:a1:61:dd:ee:a7:
14:18:42:0c:ed:7f:e0:21:a2:e5:e2:42:7f:8d:5e:
a2:b1:0f:de:f7:1e:56:07:a3:ac:b5:ed:00:9b:b6:
6b:26:44:43:05:54:53:ed:32:64:ef:8d:46:7c:1b:
c1:7e:48:ad:b4:33:77:d3:ee:2b:22:cc:7d:93:b0:
27:ea:b1:82:9d:0a:e2:63:98:c6:06:bc:39:dd:8c:
16:83:78:bf:86:08:d7:3e:d9:28:5d:d0:ef:05:77:
86:be:e3:40:77:dc:6e:de:ac:25:2d:58:ec:91:cd:
25:5f:e4:25:af:7d:0e:ad:4d:5d:1d:1c:6b:31:2d:
24:c4:16:48:77:d7:0d:6b:85:36:15:3d:e9:7a:84:
60:f9:4a:c3:36:0d:bb:b1:42:49:4f:ee:2c:0a:c8:
2d:3c:79:22:56:03:98:06:ee:8f:1c:bb:7f:1b:45:
2a:a7:98:0e:f3:ac:5d:bf:2e:ea:df:3d:df:c5:79:
a3:df:20:a0:e7:9b:d6:10:50:87:04:8c:61:f8:ab:
f4:83:e1:7d:31:62:ce:9b:b9:74:41:ab:75:e7:6e:
af:ac:9b:49:eb:a2:17:c8:4a:68:dd:e4:ee:75:bd:
6e:a7:2e:fd:5b:3a:80:4e:54:eb:ad:52:b0:b3:28:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:40:A9:60:33:F8:B2:CB:E6:9C:B8:95:BF:14:AE:66:C1:EC:E8
X509v3 Authority Key Identifier:
keyid:55:3D:76:11:EA:6B:CE:5E:C7:96:69:E4:B1:F1:47:F5:9C:2A:0E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/4/553D7611EA6BCE5EC79669E4B1F147F59C2A0EEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ac:ff:a2:53:a2:a0:5a:46:96:ba:66:15:fd:3f:0d:5f:43:
40:64:b9:5a:50:33:2f:88:f5:5a:a3:7f:f5:ab:2a:e8:ae:45:
56:04:6f:1a:4d:13:33:51:32:97:c0:86:de:af:82:ea:2f:f5:
90:96:23:c9:1a:28:e7:df:4d:93:17:e4:c3:26:56:3a:e9:d2:
e8:f2:92:7d:5b:96:8c:f1:48:06:8d:53:9e:56:7b:0d:b6:6a:
6b:33:a5:2e:73:14:59:7f:33:6f:6f:96:ae:4d:cd:b0:53:6b:
17:85:8f:48:0d:15:a4:30:2c:5b:34:cb:ae:0c:ac:f6:87:5c:
76:da:df:db:09:f9:c2:06:97:f2:93:dd:af:4b:e4:f3:15:3a:
65:9c:fa:e6:6c:ef:39:75:95:bc:cb:36:66:8f:7d:53:53:46:
90:e6:f3:35:d3:41:21:a6:9e:b6:a2:de:38:e3:ac:0d:b4:96:
20:ed:6b:5d:33:bb:3b:09:10:fa:40:3b:41:39:28:46:c9:0b:
d6:73:c6:80:b6:4f:b6:f4:ec:27:b1:11:7e:a5:06:12:d5:29:
c5:0d:4b:60:b0:31:be:d7:92:85:2b:87:b8:dc:b7:42:28:a1:
fa:92:81:d0:b5:a3:44:9b:97:c8:45:61:61:46:69:8b:b8:be:
ab:8c:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:19 2026 by rpki-client