
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier: FVlwYoh0KD98qs+V/GCNKTHU6s2icZNNd1Hl3BmJjas=
Subject key identifier: 9E:D0:73:67:29:15:17:C7:6C:30:50:69:1D:E1:C3:DF:0C:7A:6E:93
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial: 152E6587418267C5FFEEFFFBE063730A1DEF3719
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 06:51:18 +0000
Manifest this update: Sun 01 Mar 2026 06:46:18 +0000
Manifest next update: Mon 02 Mar 2026 09:43:18 +0000
Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
3: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: Ox+qgAhCwHAsf1TYAPYe+EfyjKnt5blxI/fU3S9r0NM=)
4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
5: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:2e:65:87:41:82:67:c5:ff:ee:ff:fb:e0:63:73:0a:1d:ef:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Validity
Not Before: Mar 1 06:46:18 2026 GMT
Not After : Mar 2 09:43:18 2026 GMT
Subject: CN=9ED07367291517C76C3050691DE1C3DF0C7A6E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:68:33:64:39:c1:3b:df:09:b4:c4:b2:9a:
45:07:0c:01:7c:0b:db:b7:23:92:1c:4b:f4:ff:e4:
ed:16:00:0e:df:2c:39:87:98:8d:85:b8:af:9b:c3:
8a:cf:8d:52:1b:b7:2b:ea:be:01:9d:16:56:c8:ca:
a2:0c:e1:ed:76:18:6b:70:a3:ea:61:8a:e4:21:52:
1b:ed:a7:d0:22:2b:6c:13:c4:c3:5c:58:b4:88:1d:
23:d0:0b:d5:01:85:c2:ea:d7:b8:04:9b:58:0c:a5:
91:3b:eb:c3:26:e9:db:a7:23:23:44:4a:a8:72:1d:
a2:41:91:8c:fe:18:b4:03:01:95:0f:44:3c:bb:eb:
d7:77:52:3f:ad:5e:18:64:8a:03:1c:20:e0:fe:6c:
60:15:f5:94:a8:b7:40:02:13:61:92:25:39:83:85:
93:e1:19:7c:4d:1c:5c:95:3d:05:07:ee:28:a2:cf:
7e:9e:c7:60:de:a5:b6:09:3c:7d:d1:a6:5a:1e:d0:
ad:01:2b:70:33:76:71:13:87:97:d2:dd:2e:70:ec:
0f:b8:82:45:9a:9e:03:24:36:83:ec:4a:a1:de:cc:
29:3c:60:87:18:e5:ec:db:40:a9:22:b2:53:a6:76:
98:7c:22:56:22:a9:d3:b4:f6:66:80:9f:87:62:be:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:73:67:29:15:17:C7:6C:30:50:69:1D:E1:C3:DF:0C:7A:6E:93
X509v3 Authority Key Identifier:
keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:b5:6b:d6:e8:b9:46:9c:64:7e:36:0a:e6:ee:05:25:0d:
31:19:14:ea:12:7f:47:16:49:4e:27:22:9a:67:96:17:ef:12:
84:01:b7:cc:87:a4:50:f2:5f:a8:2e:1d:71:90:e0:9d:a4:07:
59:58:6c:47:f6:b0:b3:c3:68:8e:45:f4:fc:20:79:91:55:ce:
f0:1e:21:ee:b8:a8:7a:0c:58:95:b7:2b:04:61:a1:a4:3f:83:
d6:81:ac:91:a6:3f:d6:77:6b:1d:1f:4e:55:56:97:c7:19:e2:
da:41:63:9c:ac:88:14:20:7c:63:98:a0:a1:5d:1f:2f:b1:31:
f4:56:51:be:87:e2:88:1a:84:8b:e5:39:56:7f:45:63:8f:58:
8b:73:87:7a:b3:04:62:be:32:bc:d7:7c:08:cc:77:3f:fd:91:
b9:b5:ed:9f:7b:2d:66:47:43:d9:74:fc:eb:ac:5e:47:04:1b:
15:11:07:d9:b5:13:b1:60:66:d6:b0:d3:6f:d9:2d:a1:4b:6a:
41:7a:93:58:19:35:09:79:5a:84:ca:d0:b4:c5:3e:88:1f:24:
67:f6:20:49:c6:aa:c7:e0:7a:aa:f9:e6:09:a4:e3:fb:e5:62:
4e:54:00:46:9f:23:0c:63:0f:86:6a:ba:4d:12:05:97:e4:12:
cf:2a:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:21 2026 by rpki-client