
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier: cN9cx0SU79pHycJqFBmObKvExAo8nCNH84+EWrqErUg=
Subject key identifier: 03:F9:59:85:76:DE:06:7A:7B:AC:E1:36:3A:51:45:88:AD:A1:5A:27
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial: 552017D21FA77C6CE3EC3611B05B5DC3AB70607C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number: 026D
Signing time: Tue 13 Oct 2026 13:16:47 +0000
Manifest this update: Tue 13 Oct 2026 13:11:47 +0000
Manifest next update: Wed 14 Oct 2026 17:03:47 +0000
Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 4aopGJ1cf3FfEgBAnwMWLIMrqV6viaaMWkIHc0Xr/50=)
2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=)
3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: A22cC6P4zwUPrBb0SJH+K+fkdMIe6umBZOE2fRrY/8M=)
4: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: asFP7nb8Xylb2goKTKnztu8/XaHW/DuuzB96ipBf1sY=)
5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:20:17:d2:1f:a7:7c:6c:e3:ec:36:11:b0:5b:5d:c3:ab:70:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Validity
Not Before: Oct 13 13:11:47 2026 GMT
Not After : Oct 14 17:03:47 2026 GMT
Subject: CN=03F9598576DE067A7BACE1363A514588ADA15A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:d9:86:81:e4:87:00:f1:b1:39:da:b5:60:
b5:a7:b7:3f:fe:77:c1:79:a6:e0:e7:ea:32:8f:de:
4a:b5:b5:72:74:ab:6d:e9:38:ed:79:33:6e:a4:e7:
f7:43:ad:4f:51:4f:8d:5d:ef:73:e6:51:00:c9:4e:
17:d8:38:a1:0a:16:34:a3:01:c1:fd:9a:e6:08:5c:
79:af:8d:85:f7:74:48:e2:74:8f:84:47:08:fc:24:
85:01:7a:11:00:8e:49:af:ef:5c:a4:5c:11:d4:30:
59:ee:15:41:ee:ac:e4:dc:b0:36:88:4a:e4:87:41:
08:36:0e:a9:c1:2c:f6:18:45:99:be:ed:90:a7:39:
67:27:05:83:78:d1:18:02:14:39:dc:ed:8b:e4:82:
e9:70:2c:1e:47:f0:87:7a:f6:ba:57:e7:df:a3:99:
69:cb:3a:8c:22:c0:cb:3e:c8:59:2e:e5:9a:c4:3b:
c1:79:09:b0:6f:b5:ec:4f:28:33:e5:c6:30:0a:1d:
0d:57:c8:7c:42:df:79:c0:ad:0b:4f:72:0a:e7:3b:
35:20:33:4e:8e:93:98:5d:a8:da:50:33:62:a3:fc:
c8:c8:4c:83:c6:88:34:60:bf:7c:cf:c7:94:c3:c2:
48:86:c4:05:11:0f:82:8b:1c:8d:a8:a9:54:f9:e5:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:59:85:76:DE:06:7A:7B:AC:E1:36:3A:51:45:88:AD:A1:5A:27
X509v3 Authority Key Identifier:
keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:22:eb:6a:40:de:a1:c1:b5:a9:e1:73:a7:4b:08:50:2b:
7e:21:e9:98:10:8c:a5:91:e8:07:42:40:d8:ec:fe:60:6c:f5:
78:39:d7:d5:23:43:c4:a4:f9:a1:bb:bc:3d:45:f6:74:28:5f:
bc:9c:ff:62:09:22:ba:0d:7d:f4:4f:ce:1d:17:1b:7e:23:d0:
69:9f:1b:f5:e6:04:6f:83:84:37:58:f0:97:22:aa:95:ea:bd:
ef:dd:45:98:1e:0a:ce:09:63:76:70:08:c6:55:eb:23:de:1b:
1b:dd:69:cb:46:bb:fe:07:d1:a6:da:19:0f:4d:8f:6c:f7:c5:
54:66:aa:1b:8b:7e:dc:59:2f:8c:3c:b3:57:8f:b8:55:c6:80:
dd:26:49:eb:e5:d1:13:cc:8e:81:4c:6a:87:a9:b7:f7:da:21:
4b:d2:25:fb:48:e4:db:30:6d:bb:70:98:f7:c7:94:aa:cd:1c:
d3:31:7c:14:f1:58:a7:76:c6:e6:d2:c2:76:8b:56:3e:6e:7e:
dd:42:ae:0c:70:23:78:e0:2b:4b:27:93:e9:61:09:97:f7:79:
df:51:8f:d6:08:83:6d:01:4d:c4:41:a1:13:2a:2f:f6:f8:ba:
a4:c3:7d:59:3b:86:40:57:32:91:4d:54:82:5f:2a:df:89:88:
12:81:6f:35
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUVSAX0h+nfGzj7DYRsFtdw6twYHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz
MzdGQUZDQjAeFw0yNjEwMTMxMzExNDdaFw0yNjEwMTQxNzAzNDdaMDMxMTAvBgNV
BAMTKDAzRjk1OTg1NzZERTA2N0E3QkFDRTEzNjNBNTE0NTg4QURBMTVBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrNmGgeSHAPGxOdq1YLWntz/+
d8F5puDn6jKP3kq1tXJ0q23pOO15M26k5/dDrU9RT41d73PmUQDJThfYOKEKFjSj
AcH9muYIXHmvjYX3dEjidI+ERwj8JIUBehEAjkmv71ykXBHUMFnuFUHurOTcsDaI
SuSHQQg2DqnBLPYYRZm+7ZCnOWcnBYN40RgCFDnc7YvkgulwLB5H8Id69rpX59+j
mWnLOowiwMs+yFku5ZrEO8F5CbBvtexPKDPlxjAKHQ1XyHxC33nArQtPcgrnOzUg
M06Ok5hdqNpQM2Kj/MjITIPGiDRgv3zPx5TDwkiGxAURD4KLHI2oqVT55YSZAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUA/lZhXbeBnp7rOE2OlFFiK2hWicwHwYDVR0j
BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey
MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez
LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBACFmIutqQN6hwbWp4XOnSwhQK34h6ZgQjKWR6AdCQNjs/mBs9Xg519Uj
Q8Sk+aG7vD1F9nQoX7yc/2IJIroNffRPzh0XG34j0GmfG/XmBG+DhDdY8JciqpXq
ve/dRZgeCs4JY3ZwCMZV6yPeGxvdactGu/4H0abaGQ9Nj2z3xVRmqhuLftxZL4w8
s1ePuFXGgN0mSevl0RPMjoFMaoept/faIUvSJftI5NswbbtwmPfHlKrNHNMxfBTx
WKd2xubSwnaLVj5uft1CrgxwI3jgK0snk+lhCZf3ed9Rj9YIg20BTcRBoRMqL/b4
uqTDfVk7hkBXMpFNVIJfKt+JiBKBbzU=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:47:07 2026 by rpki-client