
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier: 2JX0UCz7yYmQ2/MwmVovnKT9eWDSovPiwaRzDVcuTIs=
Subject key identifier: A8:79:FF:CD:71:E9:6B:EF:F6:59:08:EC:C1:A7:FD:CF:A0:BD:B7:39
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial: 3929F4CA7089ED21CF9FEB9B19C27DBE4E097487
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number: 025C
Signing time: Sun 20 Sep 2026 22:47:40 +0000
Manifest this update: Sun 20 Sep 2026 22:42:40 +0000
Manifest next update: Tue 22 Sep 2026 02:37:40 +0000
Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: eBsqOoGIrV1lc0haZYlZZnvljOUHJXzG1G8J+aHN17U=)
2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: w09/q37paAxT0xu6nJk+zKeBfyB3gsrZA5YOOkkxGkk=)
3: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: ZIuBwk2Q9o7H1LBTlQPRAM92cYe/3FAQ+wYOICqn9yc=)
4: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: FpxciHRMcu92Dgeo/aZLzLKwNXy6EGrJgcdVPAlKEdg=)
5: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: 2JYBqNCb65AgknfJZxWvDTlAApjHz8i6wvnvpFn2WKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:29:f4:ca:70:89:ed:21:cf:9f:eb:9b:19:c2:7d:be:4e:09:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Validity
Not Before: Sep 20 22:42:40 2026 GMT
Not After : Sep 22 02:37:40 2026 GMT
Subject: CN=A879FFCD71E96BEFF65908ECC1A7FDCFA0BDB739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:e6:29:f9:50:ca:d5:90:67:ad:9b:43:af:
01:7d:ff:10:4d:c7:1f:12:11:45:62:56:e1:0d:5a:
5a:05:2d:79:09:ae:f7:d0:39:4d:99:b3:f3:fd:8f:
1e:8d:65:aa:6b:53:ec:ac:53:de:15:c7:68:39:2e:
bd:87:01:9f:05:b1:d6:67:dc:20:ec:b5:6d:e3:cc:
a3:ef:58:e7:f9:8a:24:ca:ad:e8:fa:28:58:e0:72:
00:46:63:f8:2c:ae:d0:12:1a:06:31:61:9b:73:c4:
89:21:a5:cb:48:25:57:13:3d:f8:04:15:1c:e0:8a:
79:16:3a:66:97:42:11:10:07:32:ef:16:58:a4:71:
d3:73:0a:49:28:4b:6a:4b:85:d9:8f:b0:db:75:73:
be:c5:54:8d:eb:0b:5a:f2:e7:15:30:69:00:31:b1:
b8:6a:44:00:42:6d:bb:b0:fb:4d:8d:22:14:16:80:
01:01:07:e2:53:64:d0:c6:28:19:cb:bf:d8:8a:8c:
81:e1:e1:80:98:22:7a:a4:7f:1a:d7:0d:db:c8:4f:
78:86:dc:fa:3a:4e:3b:4a:a0:d0:fd:eb:f6:72:73:
aa:9b:f7:08:6b:03:d8:2e:8e:25:60:25:81:7e:71:
6d:4d:2f:b3:86:3f:3c:62:d7:34:75:a9:7d:61:3d:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:FF:CD:71:E9:6B:EF:F6:59:08:EC:C1:A7:FD:CF:A0:BD:B7:39
X509v3 Authority Key Identifier:
keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:12:b0:54:8d:12:ee:a0:dc:61:55:bd:da:09:fe:19:7b:37:
1c:ef:95:33:6f:ac:ee:1f:9e:8e:2b:af:35:4a:e0:24:7d:7d:
5d:a2:13:5c:ac:72:2d:26:c4:45:84:41:72:71:9b:63:ce:04:
cf:a3:e2:db:2f:be:c5:60:43:46:d0:b5:6b:75:dd:93:c9:fc:
ce:76:1f:f8:5b:98:26:01:82:21:67:fc:cf:39:23:0b:a4:71:
24:ca:3e:94:5b:b8:d8:76:1e:d4:70:7d:da:08:e2:ec:a5:1d:
87:20:4f:fe:74:25:09:e7:66:ca:5b:bb:13:60:53:e7:e8:06:
f7:3d:5f:5a:b8:f3:57:90:64:e1:51:2a:77:85:27:b0:ea:57:
f2:ae:f4:0e:22:ec:ac:d2:b9:a0:85:b9:3b:b1:34:3f:ea:00:
e1:73:85:11:37:e4:8c:b3:b0:ba:ad:e8:f5:5a:1e:ec:8f:f4:
49:c0:81:aa:8e:3b:52:44:cd:9d:61:65:62:22:7f:4f:97:c4:
7e:48:9d:ea:f8:13:92:1a:c3:cf:55:2c:6c:b8:c1:3d:00:14:
09:05:7c:86:23:40:eb:cf:04:57:e3:08:f0:8c:85:6f:06:9d:
f6:b2:5b:27:db:b2:b1:a3:f9:2f:f7:b1:8a:bb:f7:76:68:c7:
27:2e:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:35:19 2026 by rpki-client