
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
File: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft (raw, json)
Hash identifier: h4O9h8n7IAhPMvcgq+kiuSUeBup69Nz4Y6+jgqZfStk=
Subject key identifier: 22:0A:C9:B3:AF:DD:1A:FA:94:BF:0F:4A:4B:99:76:01:A8:9C:B0:E6
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Certificate issuer: /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial: 78B2EEB8045742F8B670A76CBEE0466ACF9844BF
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
Manifest number: 017D
Signing time: Thu 16 Apr 2026 23:22:51 +0000
Manifest this update: Thu 16 Apr 2026 23:17:51 +0000
Manifest next update: Sat 18 Apr 2026 02:38:51 +0000
Files and hashes: 1: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: xSnRhZ7FXouQ6mSYDngAlqXzHfxqP4Li9rf8EZ1sngw=)
2: 326130363a396638313a333034313a3a2f34382d3438203d3e20333934313036.roa (hash: ViYDG/fdheVWS2Z7Hi2m+vpMsGMv/gl/9qjFagwy6v0=)
3: 326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (hash: 3bRRbmTLyaDABzOrZZsmYU4so7ys/Yu50QG70yD4Cyk=)
4: 72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl (hash: Scrc5XfmQV9eC3p4uViaZDjb00uqBCuD2Un2A8ySdTQ=)
5: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: IEGJk01NqeGvF77f6TFSRdL7M6QxbDxvI0G/8gXMSUY=)
6: 326130363a396638313a333034353a3a2f34382d3438203d3e20313437303336.roa (hash: gzJ/ISS2azSN/go3Vy4OUvl8JcaTrk3I2rLykqYdpkE=)
7: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: ByjB4xyP5eQ2YxegjF6Ty2qaNmYok2uvWKSmxWXHruA=)
8: 326130363a396638313a333034343a3a2f34382d3438203d3e20313531333439.roa (hash: FMHtUC3+tr3RBZxG6MYw1AEp8NuSGMah0Dj6h/Gm5sU=)
9: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: RJHxzDLA3nrmTNOFE+f/Mfx4nMFu/HoPiRk5LWoaAB4=)
10: 326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (hash: rXpfmww+Ew/jGolMjNSiEO8uETTQ/TWoraqh3Qzn5aM=)
11: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: QSIHZErz8PUVzkayOWEGMrhnu52B3t9jh0CDu6kAc4Y=)
12: 326130363a396638313a333034303a3a2f34382d3438203d3e20323134373635.roa (hash: O8ROpuurWVl726N6xvNejp9oHTgaqsCMET3fS33WC9g=)
13: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: afCBiKO671M2uqyYxLM5ulTzG08Xm85NAbIeWNtGeG4=)
14: 326130363a396638313a333034333a3a2f34382d3438203d3e20313530383035.roa (hash: MRSXpyWSbVj9fLo4QH75ZJ7h1v8bbPZt36oN7nrxKRI=)
15: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: X2l2seN9Wni1FQNI5w4252gttb4/G6sOTT401JAv18I=)
16: 326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (hash: 7atpksvR6sOsslqe7yssMj6U+as4hgSbmh9Pfc3RPHE=)
17: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: 276dLuDJoJdkmMvl+NWGRMkNu8Sc1eeK0G+tuAIaX+w=)
18: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: N4cuZX10wyj2Ko/1hhIp0Eyx+5tJLEro9I4pb43Uvcs=)
19: 326130363a396638313a333034323a3a2f34382d3438203d3e20313532363731.roa (hash: N1VTU+dCITWr0dBfIOGelATJFlyO9Vo20cG9GxlBGzw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b2:ee:b8:04:57:42:f8:b6:70:a7:6c:be:e0:46:6a:cf:98:44:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Validity
Not Before: Apr 16 23:17:51 2026 GMT
Not After : Apr 18 02:38:51 2026 GMT
Subject: CN=220AC9B3AFDD1AFA94BF0F4A4B997601A89CB0E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:fd:95:e4:ee:9c:fb:45:7d:fa:86:6d:b2:
5c:e3:78:e9:00:58:d5:c6:1e:0e:dd:04:d3:7f:2b:
8b:27:c5:65:45:21:00:84:c2:1b:78:96:e2:e1:7d:
ce:fc:90:5d:56:c6:6a:cb:51:5b:03:b4:be:c9:98:
09:ff:4b:38:33:fa:6f:0a:69:db:1c:8e:ae:bd:6a:
89:f0:0c:f4:2f:24:f4:1b:45:76:d9:fd:42:0f:fb:
5e:e5:e7:55:9b:df:32:eb:5d:db:de:c9:24:51:72:
9a:a8:7b:b0:51:74:af:19:c6:ad:9d:8a:91:d9:2b:
ea:f7:a6:ac:a7:df:5b:87:d2:2d:f8:4b:45:4a:df:
af:18:c1:3c:90:c7:85:05:fc:66:2d:d7:fe:50:d9:
41:e1:ae:30:63:9c:d4:f2:4c:8e:b5:42:e4:73:43:
a1:1e:c0:4e:f3:0e:e1:a8:18:6f:9b:b1:6f:e2:28:
d2:d6:4d:29:05:f8:75:9b:d0:61:b2:ae:9f:16:50:
1d:c6:27:9d:fd:ad:18:6e:a2:f0:53:1c:b0:6c:a8:
af:b3:b0:78:b1:74:c2:85:df:2f:a1:e8:b6:bf:8d:
0e:6e:d5:0b:3a:8b:d3:76:61:b0:fa:fd:54:69:9a:
a3:06:5c:c5:57:5b:c2:d7:2f:7e:54:39:66:69:e6:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:C9:B3:AF:DD:1A:FA:94:BF:0F:4A:4B:99:76:01:A8:9C:B0:E6
X509v3 Authority Key Identifier:
keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:c2:ec:8f:aa:03:83:0c:ae:62:7d:b6:7b:77:ec:91:30:
73:de:a7:67:28:d0:63:17:74:5b:5e:84:4c:a0:f2:ae:79:07:
04:54:d2:e5:34:07:3d:b8:ff:cc:35:7b:5a:0d:c2:a3:c8:b1:
ab:f4:b3:69:31:b9:da:cb:bb:b9:69:27:5c:c4:80:2d:80:98:
02:f0:96:5f:00:77:d1:ee:2a:d2:ab:8a:1c:e5:81:13:cf:d1:
74:bd:78:77:a9:8f:f8:5d:ac:a2:4b:fe:6b:72:a9:23:e1:54:
88:c8:3c:8a:f6:93:df:1a:0e:47:8f:29:4e:ea:35:58:9e:18:
b4:08:8d:48:03:a4:41:1a:29:82:00:05:1c:09:58:08:6f:8f:
48:11:c0:c4:93:75:d0:f1:5e:65:a5:01:da:59:ad:5b:de:82:
83:16:73:14:a5:25:50:5c:1a:26:9f:e2:c0:e1:6c:bc:44:ad:
2e:7b:db:b0:f2:85:cf:7d:58:47:05:fa:dd:2a:df:4d:32:1c:
2b:ce:e5:2c:ad:ea:61:e9:d5:4a:52:2c:3f:89:e6:14:3a:7d:
d9:e5:04:42:6e:ce:8b:cc:db:79:a9:0d:dc:bd:16:b9:65:f9:
3a:0c:f6:3a:1c:23:0b:e5:be:b5:d0:2a:dc:aa:cb:d1:90:2e:
54:f5:61:d3
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUeLLuuARXQvi2cKdsvuBGas+YRL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3
MTdDOTNDQzAeFw0yNjA0MTYyMzE3NTFaFw0yNjA0MTgwMjM4NTFaMDMxMTAvBgNV
BAMTKDIyMEFDOUIzQUZERDFBRkE5NEJGMEY0QTRCOTk3NjAxQTg5Q0IwRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzg/2V5O6c+0V9+oZtslzjeOkA
WNXGHg7dBNN/K4snxWVFIQCEwht4luLhfc78kF1WxmrLUVsDtL7JmAn/Szgz+m8K
adscjq69aonwDPQvJPQbRXbZ/UIP+17l51Wb3zLrXdveySRRcpqoe7BRdK8Zxq2d
ipHZK+r3pqyn31uH0i34S0VK368YwTyQx4UF/GYt1/5Q2UHhrjBjnNTyTI61QuRz
Q6EewE7zDuGoGG+bsW/iKNLWTSkF+HWb0GGyrp8WUB3GJ539rRhuovBTHLBsqK+z
sHixdMKF3y+h6La/jQ5u1Qs6i9N2YbD6/VRpmqMGXMVXW8LXL35UOWZp5kx7AgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUIgrJs6/dGvqUvw9KS5l2AaicsOYwHwYDVR0j
BBgwFoAUctHd4bGwRdi+Q53dEBSG5nF8k8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4
N2YyLzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzcyRDFEREUxQjFCMDQ1
RDhCRTQzOURERDEwMTQ4NkU2NzE3QzkzQ0MuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvZDY0YWM5NDEtNWE3Yy00MmNmLWI2NGItMGIyODhmMTg4N2Yy
LzEvNzJEMURERTFCMUIwNDVEOEJFNDM5REREMTAxNDg2RTY3MTdDOTNDQy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJUAwuyPqgODDK5ifbZ7d+yRMHPep2co0GMXdFtehEyg8q55BwRU0uU0
Bz24/8w1e1oNwqPIsav0s2kxudrLu7lpJ1zEgC2AmALwll8Ad9HuKtKrihzlgRPP
0XS9eHepj/hdrKJL/mtyqSPhVIjIPIr2k98aDkePKU7qNVieGLQIjUgDpEEaKYIA
BRwJWAhvj0gRwMSTddDxXmWlAdpZrVvegoMWcxSlJVBcGiaf4sDhbLxErS5727Dy
hc99WEcF+t0q300yHCvO5Syt6mHp1UpSLD+J5hQ6fdnlBEJuzovM23mpDdy9Frll
+ToM9jocIwvlvrXQKtyqy9GQLlT1YdM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:23:16 2026 by rpki-client