
$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: b3QLXytp/+v20iC7O8N/yc3PqqXQgkQpo1m+3Mb1Jwk=
Subject key identifier: E7:68:9C:14:A7:9E:E8:DF:6B:81:2F:3A:59:C7:AB:51:98:91:89:5A
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 5C1B3CE9DF704CEDB0A2B59B6AC27D841A023FF6
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 03C8
Signing time: Wed 23 Sep 2026 14:35:41 +0000
Manifest this update: Wed 23 Sep 2026 14:30:41 +0000
Manifest next update: Thu 24 Sep 2026 16:35:41 +0000
Files and hashes: 1: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
2: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
3: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: KbByOxSjYYqc7WVZp+epKODy/EVFe2mrjU9PgT3RWE4=)
4: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: nucu8YeXyAJ1d1cM0WF7236LM50tPwAEitl5+zxIpfo=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1b:3c:e9:df:70:4c:ed:b0:a2:b5:9b:6a:c2:7d:84:1a:02:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Sep 23 14:30:41 2026 GMT
Not After : Sep 24 16:35:41 2026 GMT
Subject: CN=E7689C14A79EE8DF6B812F3A59C7AB519891895A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:06:13:25:97:39:61:a0:30:1a:cc:2a:59:
d3:fe:07:e3:b4:0b:93:79:a8:5c:fe:42:92:64:94:
2d:3c:9e:25:91:1a:f3:d3:1d:2e:ad:8b:ee:8a:3b:
a7:1f:48:65:7f:07:1c:3d:08:99:67:95:7c:3c:05:
b1:0f:d2:f7:98:8a:d0:9f:e2:c3:f5:b2:34:d7:c6:
a0:7f:24:fb:d9:40:a6:16:d3:9a:13:a9:b5:3b:be:
79:29:e2:f9:f0:2c:51:84:27:2e:e7:de:31:02:e5:
d7:57:c6:0a:fb:42:34:24:2a:6c:5f:3f:31:ee:d1:
e2:a3:68:81:b9:51:83:93:14:56:ab:96:42:20:5a:
8c:7e:ae:54:01:f0:1e:87:e3:ae:a9:c7:3e:59:c7:
72:e7:f0:6a:a9:6b:0f:c2:19:b2:7c:4c:af:40:d3:
8d:7c:a3:27:27:c2:be:00:e0:09:99:ff:27:42:4c:
69:91:4d:32:2b:b8:32:86:42:b8:97:7c:f8:f8:68:
97:89:2a:a5:d2:c4:0b:d5:3c:7e:50:3c:2a:c7:94:
d0:02:f9:88:ab:15:32:47:48:89:f8:92:c6:85:db:
c7:75:f2:aa:05:50:1b:ea:00:de:70:9e:03:ec:83:
1b:3f:09:30:fd:de:bc:34:d6:89:0e:52:d0:d9:8c:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:9C:14:A7:9E:E8:DF:6B:81:2F:3A:59:C7:AB:51:98:91:89:5A
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:23:c2:3a:ce:f4:c8:e7:80:2e:a7:40:25:5d:bb:c8:9d:
8c:0a:fe:14:8a:58:0e:10:96:47:45:61:8d:a8:c5:08:f3:15:
1f:c3:d4:1b:34:57:6a:b3:f1:f8:30:a5:b5:f6:f1:0e:ed:22:
b4:1c:70:81:2e:65:0a:ac:2e:26:d8:1f:e0:24:b9:d8:53:dd:
41:64:d4:fc:9e:ea:f9:53:e3:6f:4c:6b:4a:91:5d:45:05:7e:
81:88:5c:5b:6a:85:c1:3e:1b:8c:35:12:47:7e:d4:17:db:46:
c9:bb:ae:9f:36:8b:2d:e0:67:bb:6d:b0:2c:fe:ee:f2:07:b3:
7a:4e:94:1d:62:69:51:ac:22:8a:ea:b4:2b:22:37:90:f3:98:
fe:6d:17:9a:aa:ba:dd:c2:a9:ff:9a:2b:bb:22:ce:8d:1d:da:
9e:a9:c3:f7:a4:03:0c:67:79:2b:14:cd:e4:ca:1e:29:aa:09:
ca:dc:fe:a0:ec:25:b4:15:e2:c4:dd:1a:ff:a8:44:c3:9d:09:
70:a2:82:64:27:b4:78:f8:39:ac:ab:18:04:e9:9c:5c:d4:e2:
bf:00:25:7a:d3:e2:1d:e2:0a:83:58:6e:d0:e5:6e:48:d2:5b:
66:74:56:ba:c3:02:f8:fc:ab:bf:bb:be:7c:72:6b:71:bc:b4:
a0:18:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:26:53 2026 by rpki-client