
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier: sdELZfLdcu9L8cuSKmB3vHiOOnwmEjFMwr1160PLiYE=
Subject key identifier: 45:17:A5:D0:F0:6A:5E:AB:55:E6:06:02:8C:CC:04:17:8D:E2:50:8F
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial: 6774ACB1CBCB5ACBACFD66D7ABA6B811438C2F47
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number: B4
Signing time: Sun 01 Mar 2026 15:41:18 +0000
Manifest this update: Sun 01 Mar 2026 15:36:18 +0000
Manifest next update: Mon 02 Mar 2026 18:16:18 +0000
Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: cPkKOiy2vLv5q+neq/b41Rs7mhGWiWjBLGelLHMMoAg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:74:ac:b1:cb:cb:5a:cb:ac:fd:66:d7:ab:a6:b8:11:43:8c:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Validity
Not Before: Mar 1 15:36:18 2026 GMT
Not After : Mar 2 18:16:18 2026 GMT
Subject: CN=4517A5D0F06A5EAB55E606028CCC04178DE2508F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:5e:c0:28:e9:85:73:fd:12:95:74:c9:c0:
1c:44:ee:a4:36:87:96:f9:71:2c:81:96:d0:1d:7b:
ac:73:b5:d1:a9:ef:aa:c3:bc:c0:06:b9:53:16:c5:
9d:68:5c:dc:e8:07:4d:fd:e7:e2:6a:0e:9d:21:b0:
c8:c3:20:87:cc:2b:26:71:a5:c7:fa:13:c6:36:3e:
77:b6:42:a3:29:c9:45:18:ab:87:20:24:34:dc:b8:
35:85:e5:84:ba:41:9d:8c:8e:18:dd:be:d2:df:50:
e6:ac:82:5b:51:20:4f:6b:59:45:2f:15:8a:14:03:
22:40:7c:01:28:bf:72:b7:64:f8:36:b9:9a:5a:8f:
dc:57:18:51:34:81:bd:84:29:fd:73:cf:ba:c8:0b:
cd:94:ac:31:af:f7:43:43:cf:13:ae:74:da:2c:2f:
c5:f3:47:65:66:ca:f3:47:0d:0d:3f:27:ad:4e:e8:
26:a5:75:d5:b9:8f:59:7d:f3:c2:5c:26:71:ed:81:
20:af:5e:b4:d4:b6:bb:f7:37:d1:13:44:27:82:d5:
7a:79:6b:6a:7f:da:c4:3b:5d:5c:8b:d4:f9:dd:1f:
6e:60:a3:98:4a:62:94:da:c0:ae:c6:33:34:05:ea:
5a:80:0f:9e:98:5d:b8:3f:f0:4c:67:dc:b5:1c:44:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:A5:D0:F0:6A:5E:AB:55:E6:06:02:8C:CC:04:17:8D:E2:50:8F
X509v3 Authority Key Identifier:
keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:01:f6:83:15:9c:21:93:e0:5e:73:ea:1f:fa:bc:e5:93:
a4:cf:6e:37:6c:df:65:76:bf:95:1a:90:2e:f4:7b:15:14:2d:
1a:ee:0a:61:d8:a3:97:b7:23:48:70:cd:4a:49:7e:27:06:a1:
27:04:b7:e7:e9:19:83:65:e5:db:b6:57:28:a0:18:ce:b8:0d:
c4:a1:96:cf:34:05:35:74:fc:cc:ff:88:c5:54:aa:30:20:3c:
64:c0:b0:f0:6f:f0:02:e9:bb:51:b1:31:95:92:d0:d1:ca:02:
ef:85:c4:0e:e6:19:d6:f1:21:31:0a:a7:79:d3:b0:f7:3f:90:
b7:54:5d:dd:ed:1c:31:43:b8:32:ff:29:e1:b0:99:b5:e4:b6:
ec:db:7f:0f:00:af:76:59:63:20:f3:dd:e4:01:33:64:9f:98:
eb:51:8a:9b:45:f4:ff:3e:e6:9a:19:54:1d:59:b1:76:05:43:
32:74:35:91:1c:c3:98:b3:77:fd:69:c8:cb:e8:17:84:77:d4:
3b:42:3f:66:2e:8b:84:c8:81:70:be:73:51:52:28:d7:7a:70:
08:4f:8d:44:4d:76:ea:5b:f7:0e:5f:db:dc:e5:4a:ef:c1:62:
6a:f9:50:f5:fb:dc:39:84:ea:a9:6b:e8:70:d3:c1:32:f4:a3:
c2:60:a0:77
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUZ3SsscvLWsus/WbXq6a4EUOML0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQz
NjM5MUE3MTAeFw0yNjAzMDExNTM2MThaFw0yNjAzMDIxODE2MThaMDMxMTAvBgNV
BAMTKDQ1MTdBNUQwRjA2QTVFQUI1NUU2MDYwMjhDQ0MwNDE3OERFMjUwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTV7AKOmFc/0SlXTJwBxE7qQ2
h5b5cSyBltAde6xztdGp76rDvMAGuVMWxZ1oXNzoB0395+JqDp0hsMjDIIfMKyZx
pcf6E8Y2Pne2QqMpyUUYq4cgJDTcuDWF5YS6QZ2MjhjdvtLfUOasgltRIE9rWUUv
FYoUAyJAfAEov3K3ZPg2uZpaj9xXGFE0gb2EKf1zz7rIC82UrDGv90NDzxOudNos
L8XzR2VmyvNHDQ0/J61O6CalddW5j1l988JcJnHtgSCvXrTUtrv3N9ETRCeC1Xp5
a2p/2sQ7XVyL1PndH25go5hKYpTawK7GMzQF6lqAD56YXbg/8Exn3LUcRMiHAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQURRel0PBqXqtV5gYCjMwEF43iUI8wHwYDVR0j
BBgwFoAU/08dSKYIj+xe1zJw+CBopDY5GnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5
NzMyLzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80L0ZGNEYxRDQ4QTYwODhG
RUM1RUQ3MzI3MEY4MjA2OEE0MzYzOTFBNzEuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMy
LzIvRkY0RjFENDhBNjA4OEZFQzVFRDczMjcwRjgyMDY4QTQzNjM5MUE3MS5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBABwUAfaDFZwhk+Bec+of+rzlk6TPbjds32V2v5UakC70exUULRruCmHY
o5e3I0hwzUpJficGoScEt+fpGYNl5du2VyigGM64DcShls80BTV0/Mz/iMVUqjAg
PGTAsPBv8ALpu1GxMZWS0NHKAu+FxA7mGdbxITEKp3nTsPc/kLdUXd3tHDFDuDL/
KeGwmbXktuzbfw8Ar3ZZYyDz3eQBM2SfmOtRiptF9P8+5poZVB1ZsXYFQzJ0NZEc
w5izd/1pyMvoF4R31DtCP2Yui4TIgXC+c1FSKNd6cAhPjURNdupb9w5f29zlSu/B
Ymr5UPX73DmE6qlr6HDTwTL0o8JgoHc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:23 2026 by rpki-client