
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
File: B729F0C7BF295C6844FD328B324A1ED8598032F9.mft (raw, json)
Hash identifier: cEpW/etG11g1kAUCBklPj0+7QUHWOd14uEIJGO7K968=
Subject key identifier: 2B:C1:97:82:81:E2:39:8A:DD:05:9E:40:57:71:C5:CD:CE:98:0F:B9
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Certificate issuer: /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial: 7C9366E65B6BD3245D6758E98911DF27363457D3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
Manifest number: 0180
Signing time: Thu 16 Apr 2026 13:41:01 +0000
Manifest this update: Thu 16 Apr 2026 13:36:01 +0000
Manifest next update: Fri 17 Apr 2026 14:21:01 +0000
Files and hashes: 1: 326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (hash: tbMEmJLRx8p/XooueSgD+2D8XMkhb8zPBfDKGLGOZ18=)
2: B729F0C7BF295C6844FD328B324A1ED8598032F9.crl (hash: 5OEWBBg9vnzrmhsVJRyK8ncdX4w2RU9CmIoCQWUNZ9Y=)
3: 326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (hash: NyB2Q3nplRrrVqQaiZpQzKBuInw96biJRlaf2Wfrra4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 14:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:93:66:e6:5b:6b:d3:24:5d:67:58:e9:89:11:df:27:36:34:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Validity
Not Before: Apr 16 13:36:01 2026 GMT
Not After : Apr 17 14:21:01 2026 GMT
Subject: CN=2BC1978281E2398ADD059E405771C5CDCE980FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:cc:21:66:b5:b5:bb:5c:a4:e3:4c:6e:77:
81:0d:30:68:32:7b:54:a2:fa:72:a7:0b:c2:ee:d4:
e2:f0:f5:09:74:b3:c3:10:86:49:9d:44:45:5b:ad:
b2:8d:36:15:6c:42:52:21:a5:3d:44:93:8b:de:08:
27:d1:07:64:af:9f:99:e5:02:51:8a:f2:d4:ca:65:
9d:f7:29:90:7f:26:77:54:f9:15:e2:e6:da:f2:52:
86:f0:31:01:06:e0:25:c4:ae:45:7f:ea:a4:e1:cc:
47:e3:76:6c:f1:f1:f4:c1:ae:f5:2c:6b:a7:25:c1:
c8:7c:2d:32:bd:66:26:76:00:3b:48:56:09:84:fc:
25:f0:73:e2:86:49:75:43:d4:0b:96:27:62:1e:dc:
49:a8:21:40:53:67:4b:19:d2:18:f0:fb:af:b1:57:
f8:9f:38:49:85:36:6f:fe:0d:b3:52:8c:82:b1:0f:
02:51:b9:9c:98:b2:d2:02:48:3e:fa:4a:2e:c7:e4:
2e:dc:d3:7d:db:9d:ed:51:1b:1c:c0:c4:42:c5:18:
fb:2b:72:0a:d1:30:15:97:60:31:97:b5:19:3b:5b:
33:c7:5f:58:71:e9:db:f4:7d:ea:30:4c:f7:f1:c0:
16:7c:5c:93:4d:db:11:78:b4:9e:1c:11:c1:e9:c1:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C1:97:82:81:E2:39:8A:DD:05:9E:40:57:71:C5:CD:CE:98:0F:B9
X509v3 Authority Key Identifier:
keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cc:cc:cf:1b:db:00:f3:8a:5a:2f:15:00:cf:f3:10:67:8e:
a6:8d:46:38:77:71:d7:36:f3:87:96:d5:fa:25:b1:24:44:88:
57:9a:cb:c3:4f:37:f6:9a:d1:c6:4c:a0:0b:04:24:1a:65:13:
db:21:69:cb:19:8d:02:af:8b:e1:f9:6d:de:77:d4:21:76:89:
aa:24:46:e2:3d:c3:65:7c:99:70:df:f7:31:6b:4d:be:ce:77:
81:69:74:b2:3e:98:b0:96:06:a3:27:9a:2f:cd:4f:7d:0b:9d:
e9:af:97:76:39:f6:e5:73:56:b2:c7:29:9f:ce:52:16:d6:0a:
40:7d:bd:65:21:93:2c:32:a4:6c:67:a1:a1:72:21:c9:cd:24:
6d:47:30:c7:79:5a:67:43:dd:36:38:5f:0a:bf:f3:1e:ae:3a:
02:03:42:81:93:d0:f9:2a:2b:04:e0:38:d2:46:18:68:d5:9b:
2e:f5:ef:46:8b:9f:36:89:d5:94:c9:d6:96:a4:45:86:55:ee:
b9:36:ed:df:ac:79:ef:59:92:ea:b5:95:d2:fd:21:1a:f3:97:
ed:ed:63:44:cb:ef:e4:0a:1d:a3:3d:d1:52:c4:c5:b2:50:43:
51:81:64:27:e5:a1:86:a3:cf:01:ee:99:60:f7:bd:94:1f:b4:
27:80:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:25 2026 by rpki-client