
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
File: 475A3BFA09614E07BE0567B1FB15110F45F894EB.mft (raw, json)
Hash identifier: SVvxmTg5xPkqw4VGH+hF8ItKcI916n4yoswPPPbtBaA=
Subject key identifier: CD:EE:27:51:62:E8:1B:9C:CD:B0:A4:10:90:F4:00:59:41:36:7F:C2
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Certificate issuer: /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial: 19A654B51831BC906B867D11BC275534562CE1F7
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
Manifest number: 0145
Signing time: Sun 01 Mar 2026 14:09:03 +0000
Manifest this update: Sun 01 Mar 2026 14:04:03 +0000
Manifest next update: Mon 02 Mar 2026 14:34:03 +0000
Files and hashes: 1: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: cn9YZ8FYaC+Hri9dzrV5iV712LMhxO/a5ltgIPBkcMo=)
2: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: MFLgGeiRY5J6V0wqCJ/2rdwCHyoz1yTGoDCT9u80ZPw=)
3: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: mOPodk1SWfoVUqjkHG3wmAu+HNRka8LJZu4TU08ixz0=)
4: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: XlFjiMGdniXiBH8ber/zerQJr2bnSRJJJo5igygAomc=)
5: 326130353a646663313a393330303a3a2f34342d3434203d3e20323136313037.roa (hash: b1jW0QtrvfNFuku7DA8T3pdCcJ7XdV69DcuFmLfePdg=)
6: 326130353a646663313a393330303a3a2f34342d3434203d3e203331383938.roa (hash: /0mHwxj5X080MYjliBUs92u8/GLNUuIoeMzbhIBfk0Y=)
7: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: 5amhvkzdMSmYntVfhhxA2srjGLuE63R2mmWtiqhM60M=)
8: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: O9HdFgkDLSDurxDqFkNzKefyLVSHYP5RZwYF9ccBE70=)
9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: 2ES+J57q5FxV7Pycn6PA/TfkwXqGSDCB0siCI9Kqtao=)
10: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: aBc+3q0F9+NwnnOKXQsziJcSflKCPcTqnJDYXx6ReGE=)
11: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: WZ3tMlR+p69xUFvcw4oOqLvG3hqJQ0raLNlYbt2cGEc=)
12: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 9b+nfoajFujLj061BrSCfi4FwI9kDrVZ+olcCoR5UBc=)
13: 475A3BFA09614E07BE0567B1FB15110F45F894EB.crl (hash: MJrtLkFS06pwA3Hf6uyD9MXP5VUcJQJkI2axcvUWsNI=)
14: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: ODgMOPEtFM31kytaPhS/kNBKt+7tRnGYNverVN9W6GI=)
15: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: HPSZ8Ao1IB3lH1ZuFzdnyKg2mh86+6wWsN1VfrbgtjA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a6:54:b5:18:31:bc:90:6b:86:7d:11:bc:27:55:34:56:2c:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Validity
Not Before: Mar 1 14:04:03 2026 GMT
Not After : Mar 2 14:34:03 2026 GMT
Subject: CN=CDEE275162E81B9CCDB0A41090F4005941367FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:d9:42:ec:98:8e:34:bd:3e:4d:95:e1:a4:
fc:71:46:00:a6:dc:f7:84:8a:a3:02:5d:1c:7b:52:
4b:35:de:dd:20:59:4c:8d:c8:b6:d5:7a:d1:aa:bb:
ee:0b:49:1c:eb:31:e8:a8:fc:dd:bc:9f:8d:63:9b:
15:c8:83:e1:64:aa:f6:6f:8c:11:0e:14:97:60:96:
08:72:57:2d:24:a2:16:a3:bb:8e:8c:19:1e:47:71:
9c:26:3f:90:83:56:f6:f6:4f:3a:04:1f:85:64:2e:
2c:84:fd:56:06:28:ce:97:04:5f:c7:76:da:91:f0:
bb:08:35:8a:85:2d:01:df:73:cd:bb:75:e2:f5:08:
05:4b:04:ef:dd:37:c1:37:7f:ea:ad:7e:77:79:c9:
5d:a9:87:5f:3b:bb:3a:45:b8:d5:54:b4:32:e8:19:
49:5d:8a:be:c3:de:fe:63:a6:cd:8d:2c:e8:af:20:
fe:f0:18:b4:8e:f7:85:07:57:d4:b8:3a:0f:52:3c:
13:ac:49:e7:f1:00:71:a0:d6:d7:f0:10:b1:35:2f:
e9:6a:fb:e1:50:8f:d8:d2:c8:10:9f:3f:f5:ce:72:
18:2d:cb:6f:b1:bf:78:c2:92:7f:f5:3f:3a:7f:02:
ab:90:89:aa:14:17:20:71:4c:67:b4:13:a3:32:a7:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:27:51:62:E8:1B:9C:CD:B0:A4:10:90:F4:00:59:41:36:7F:C2
X509v3 Authority Key Identifier:
keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:f0:25:d2:84:f5:6e:15:34:13:f0:c0:26:04:47:4d:a1:
fb:7b:21:ea:09:b2:9f:78:a7:09:18:3d:dd:3c:66:b9:a4:2b:
5c:c5:de:32:56:3b:9c:cd:ce:33:17:8a:72:0f:a0:ee:10:c5:
6d:44:70:06:3e:50:a5:dd:8f:f1:3a:1c:c7:60:fe:f2:bd:b1:
87:a2:d2:e4:45:b0:30:b7:94:b1:30:1b:c9:e8:bb:3c:ad:85:
b7:85:d3:98:41:ae:62:28:fd:f6:38:19:9d:b8:be:b7:66:02:
e1:ac:9c:3c:74:64:33:30:f9:0d:e3:a1:68:9c:a3:32:6a:01:
ed:2c:79:2f:6f:ff:d6:6f:bd:05:5f:5c:ce:5d:61:ad:6f:af:
bf:18:1b:91:1a:46:ee:76:03:85:0d:31:e7:87:55:05:87:de:
f3:ae:e7:3a:56:e5:5e:a8:c9:25:14:8a:74:03:08:cd:a3:4c:
4f:5a:b8:fa:78:45:41:1a:ca:65:2a:a4:83:fe:19:9e:55:a7:
4e:46:51:0c:2b:82:fe:53:6b:95:e6:84:55:3e:d7:10:27:9b:
64:fd:10:4f:9b:52:cf:e2:43:ad:1e:8d:08:4b:57:3b:94:0e:
a9:e3:5e:3a:d5:b9:8c:49:b7:b8:c1:fc:dd:e0:08:1b:4c:3b:
9c:47:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:43 2026 by rpki-client