
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier: BxDoTvCI2uFBPwdZIsM8/EdIlfdxpMSXqI6WY3aOdlc=
Subject key identifier: 2C:42:67:53:4E:42:E6:1F:86:3D:D4:31:02:ED:A0:B9:00:65:CB:FE
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 1669BC6A0E9AEAF96669814F836607512A7814DE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number: BB
Signing time: Tue 12 May 2026 19:08:51 +0000
Manifest this update: Tue 12 May 2026 19:03:51 +0000
Manifest next update: Wed 13 May 2026 19:54:51 +0000
Files and hashes: 1: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
2: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
3: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: LcktiRivaHX8/2N6/fBRyt9Q8SxDttdGD8LIM2rx6Lw=)
4: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
5: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
6: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
7: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:69:bc:6a:0e:9a:ea:f9:66:69:81:4f:83:66:07:51:2a:78:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: May 12 19:03:51 2026 GMT
Not After : May 13 19:54:51 2026 GMT
Subject: CN=2C4267534E42E61F863DD43102EDA0B90065CBFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:45:cb:37:f1:76:22:29:30:16:5b:c9:a4:
56:64:c9:79:81:dd:01:ae:49:31:55:d2:91:b1:c7:
51:82:3a:e4:25:43:d3:67:42:37:9f:44:89:43:0c:
e9:06:01:ad:24:97:f6:a9:5b:f5:ad:ca:3e:b0:18:
d0:fc:84:60:7c:c9:a1:3a:85:2d:b9:cf:a2:8e:2e:
f0:b7:28:c6:2c:fe:ff:87:7c:8f:66:48:b6:a1:4f:
f5:d6:c5:c9:82:31:bf:30:16:7b:96:ea:72:ca:ed:
8d:f3:a1:b7:02:97:6b:1e:5f:be:a9:eb:1a:fa:ff:
85:ce:08:49:36:d1:98:91:96:53:75:79:e7:90:41:
b2:31:d0:04:18:ea:e0:35:a9:8a:39:6e:16:30:bc:
bd:3d:ce:2e:c1:ea:ed:13:6b:ba:21:63:8c:3b:98:
65:34:40:6a:dd:43:62:2a:6d:d6:ef:64:13:c6:cf:
08:48:fb:17:9d:6a:06:35:27:45:19:59:0b:a2:2f:
49:d4:f4:33:df:42:c5:e4:06:ce:66:49:8c:5a:3c:
e3:c8:3c:9c:48:e6:5a:08:1b:10:18:ac:79:b8:3e:
62:d2:fe:b9:51:de:30:27:f1:54:9b:e3:38:fc:04:
61:14:2e:d2:eb:24:4b:82:47:a9:cd:ab:6b:23:97:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:67:53:4E:42:E6:1F:86:3D:D4:31:02:ED:A0:B9:00:65:CB:FE
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:85:be:8d:61:51:35:35:56:5b:5f:30:2a:84:af:5d:ba:
68:18:13:a4:d4:7c:92:98:47:f7:5b:62:1b:a3:9a:af:09:24:
4c:3d:49:32:96:89:0b:e7:a8:fe:c2:a4:bd:2e:03:59:b1:5a:
e7:de:ec:e6:73:01:39:b1:28:ad:8c:a1:b0:98:08:80:90:9d:
43:6c:24:e0:ea:73:c8:2f:80:9f:1b:2a:1b:1d:42:46:12:17:
d7:d7:e1:ff:e0:7a:3d:bf:3f:cc:9c:2e:5a:85:b2:45:11:cf:
b7:41:c4:c8:f3:12:a8:73:1a:7f:d5:eb:6b:bd:78:ad:2c:9d:
f8:69:77:bd:4a:dc:c6:c2:a5:5b:55:66:28:74:23:ae:b8:a7:
32:50:56:75:28:bb:3c:4e:40:e0:62:3e:49:bb:68:d3:6a:e0:
ac:a8:f3:dd:c5:d9:43:1e:ba:f1:6a:88:8f:b2:b5:cf:6d:80:
64:e6:ea:ac:db:1c:38:25:e2:bd:68:2e:d8:f6:4c:2d:90:31:
50:81:8c:a2:6e:4d:d3:da:c6:4b:88:3f:38:2f:99:0b:39:44:
20:9e:76:fb:35:ab:60:48:d7:b5:a7:68:00:32:df:bc:fa:ff:
b2:75:97:15:44:72:38:77:aa:ba:14:f9:e0:21:92:57:8f:89:
9f:e4:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:05 2026 by rpki-client