
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft (raw, json)
Hash identifier: ZzeoXP6iSXXAU7LiNLEdoFIkHl191GICYhvrWzGKX2k=
Subject key identifier: 11:47:3E:38:C7:25:DD:F6:8A:F1:4E:6C:F7:F4:F0:21:0D:9A:C7:8A
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Certificate issuer: /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial: 7750B24EEC7AE263B0B8D1F182676FC8201FF65E
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
Manifest number: E5
Signing time: Sat 13 Jun 2026 10:55:43 +0000
Manifest this update: Sat 13 Jun 2026 10:50:43 +0000
Manifest next update: Sun 14 Jun 2026 13:18:43 +0000
Files and hashes: 1: 326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (hash: vZabrxyGvueVve0UIFCKkMx6oLP4C5qFMGRoAro/NOA=)
2: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl (hash: TTQGxd7IKjy7+ME6jUuS9Of/T4FfuYJg7iUD9sEFL2c=)
3: 326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (hash: +461HFOd1+OqFF4HxgiLMZU5WmlfmbOlhpC36OHo5OY=)
4: 326130353a646663313a383166303a3a2f34342d3438203d3e20323131343331.roa (hash: LLsi5WyK1XwYJWDjn6LXybqAQvMFc3aggLJjCnG0b1I=)
5: 326130353a646663313a383030303a3a2f34342d3438203d3e20323034323931.roa (hash: TnmWJuZNY0DPgipWjil2ZXNBS0GgRAuBPJ9ypq6d80U=)
6: 326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (hash: +8Gtqve25qz7dj6RoaEfhzyMxoqEmhyXwj7/4y6S5ts=)
7: 326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (hash: IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:50:b2:4e:ec:7a:e2:63:b0:b8:d1:f1:82:67:6f:c8:20:1f:f6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Validity
Not Before: Jun 13 10:50:43 2026 GMT
Not After : Jun 14 13:18:43 2026 GMT
Subject: CN=11473E38C725DDF68AF14E6CF7F4F0210D9AC78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:a8:c3:a3:b0:35:9d:03:81:c4:48:42:d3:
89:45:ea:08:d0:d8:88:f2:4d:77:50:26:47:7e:cc:
f7:5b:3f:69:ce:7d:fb:e5:e0:02:7a:2f:bf:63:76:
19:91:54:93:a4:ce:b9:94:c7:ff:6f:4d:54:78:1e:
03:f1:0d:d6:48:5c:13:a5:93:72:a1:12:c4:cd:62:
c0:84:03:59:53:c0:31:f6:22:e7:91:2a:58:ac:e1:
f0:c4:20:72:9b:94:96:c3:f3:db:f0:38:c1:42:c1:
62:4c:7a:76:21:e8:f3:2d:88:19:81:c1:fb:0e:a6:
7d:7a:f3:80:22:ac:c8:22:fc:7f:71:a9:83:07:ff:
2a:fd:02:64:76:f9:6b:fe:03:30:ed:7a:82:52:83:
4b:bc:db:b1:23:19:9b:3f:0f:2c:8c:be:b1:37:6c:
8a:8a:ed:44:c4:4e:5e:50:a4:80:3b:4e:aa:65:15:
65:52:c6:ef:fa:93:04:4c:0c:c5:9f:8c:cc:50:38:
8c:8e:4c:bf:20:37:20:58:b5:7d:c6:ff:8c:84:23:
54:18:a8:45:ae:42:04:16:fa:28:6e:c8:92:57:92:
fc:b2:cd:38:45:0d:dc:04:6e:7e:34:ea:b3:0e:e7:
1e:ed:e9:d3:eb:54:7b:f2:98:2d:e5:f8:bc:a8:b4:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:47:3E:38:C7:25:DD:F6:8A:F1:4E:6C:F7:F4:F0:21:0D:9A:C7:8A
X509v3 Authority Key Identifier:
keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:60:a9:35:41:4d:a9:a3:3e:84:20:95:77:8c:24:c8:92:c3:
0c:92:fe:59:15:90:26:7d:7c:ff:2b:25:97:42:52:66:2a:1d:
97:e6:8f:eb:5e:79:b2:87:fe:66:0a:fa:7d:e5:14:f1:f8:7e:
6f:aa:9a:9a:f6:49:d3:d9:7c:38:6d:ec:6c:ab:98:5b:e7:78:
41:f1:92:b9:36:81:0f:1e:bc:f1:7b:eb:40:db:a0:81:83:be:
8a:5c:bc:38:3a:27:ed:7a:5d:52:bf:57:2c:d2:17:12:77:76:
c4:59:66:b1:5c:93:d8:82:1c:01:32:61:21:77:b9:79:37:3d:
2b:62:31:6f:1b:5e:80:73:26:b8:0c:59:d4:21:a3:ed:1d:c6:
16:9b:f0:eb:0d:52:fb:65:6e:47:9a:40:50:2c:29:1c:2c:74:
9f:53:66:64:13:28:0b:e1:84:72:cc:60:ec:a5:f4:1c:1e:cf:
52:37:3d:51:85:86:80:7f:e7:51:49:e0:cd:ed:e2:7c:ab:b5:
d5:77:0e:a5:db:7f:bb:e4:cb:17:82:f5:77:eb:98:c4:76:61:
e1:3e:1c:75:a1:ea:32:e8:aa:9f:af:6b:b2:d3:36:39:4c:f7:
20:0d:d7:ce:91:7b:7c:3e:61:68:02:f3:06:06:56:bb:0b:7a:
f5:af:ce:01
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUd1CyTux64mOwuNHxgmdvyCAf9l4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3
NkJCMDI3NzAeFw0yNjA2MTMxMDUwNDNaFw0yNjA2MTQxMzE4NDNaMDMxMTAvBgNV
BAMTKDExNDczRTM4QzcyNURERjY4QUYxNEU2Q0Y3RjRGMDIxMEQ5QUM3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiqjDo7A1nQOBxEhC04lF6gjQ
2IjyTXdQJkd+zPdbP2nOffvl4AJ6L79jdhmRVJOkzrmUx/9vTVR4HgPxDdZIXBOl
k3KhEsTNYsCEA1lTwDH2IueRKlis4fDEIHKblJbD89vwOMFCwWJMenYh6PMtiBmB
wfsOpn1684AirMgi/H9xqYMH/yr9AmR2+Wv+AzDteoJSg0u827EjGZs/DyyMvrE3
bIqK7UTETl5QpIA7TqplFWVSxu/6kwRMDMWfjMxQOIyOTL8gNyBYtX3G/4yEI1QY
qEWuQgQW+ihuyJJXkvyyzThFDdwEbn406rMO5x7t6dPrVHvymC3l+LyotKVtAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUEUc+OMcl3faK8U5s9/TwIQ2ax4owHwYDVR0j
BBgwFoAUPBnZ7l6wIKhlLWhZh/7PKna7AncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl
YjdkLzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzNDMTlEOUVFNUVCMDIw
QTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVlYjdk
LzUvM0MxOUQ5RUU1RUIwMjBBODY1MkQ2ODU5ODdGRUNGMkE3NkJCMDI3Ny5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBACZgqTVBTamjPoQglXeMJMiSwwyS/lkVkCZ9fP8rJZdCUmYqHZfmj+te
ebKH/mYK+n3lFPH4fm+qmpr2SdPZfDht7GyrmFvneEHxkrk2gQ8evPF760DboIGD
vopcvDg6J+16XVK/VyzSFxJ3dsRZZrFck9iCHAEyYSF3uXk3PStiMW8bXoBzJrgM
WdQho+0dxhab8OsNUvtlbkeaQFAsKRwsdJ9TZmQTKAvhhHLMYOyl9Bwez1I3PVGF
hoB/51FJ4M3t4nyrtdV3DqXbf7vkyxeC9XfrmMR2YeE+HHWh6jLoqp+va7LTNjlM
9yAN186Re3w+YWgC8wYGVrsLevWvzgE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:20 2026 by rpki-client