
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier: WirWY6kO8CVI7DIXI3XCX0kqlQVUBCHxza/zox18PbI=
Subject key identifier: 7F:C5:76:BF:2A:BA:49:AD:EC:B2:77:7B:59:E8:41:26:02:52:DF:EA
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial: 3E8DB9938340BA40294469D3E2124ADA645F5AC6
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number: 026E
Signing time: Wed 14 Oct 2026 09:06:47 +0000
Manifest this update: Wed 14 Oct 2026 09:01:47 +0000
Manifest next update: Thu 15 Oct 2026 10:48:47 +0000
Files and hashes: 1: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: DqgyU4Y6nRFHRLVd6Hweb+Lo3elIYs7PNcpvuH0sAmA=)
2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 4aopGJ1cf3FfEgBAnwMWLIMrqV6viaaMWkIHc0Xr/50=)
3: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=)
4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: A22cC6P4zwUPrBb0SJH+K+fkdMIe6umBZOE2fRrY/8M=)
5: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8d:b9:93:83:40:ba:40:29:44:69:d3:e2:12:4a:da:64:5f:5a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Validity
Not Before: Oct 14 09:01:47 2026 GMT
Not After : Oct 15 10:48:47 2026 GMT
Subject: CN=7FC576BF2ABA49ADECB2777B59E841260252DFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:ba:99:0c:dc:a8:df:87:8a:59:6b:0f:56:
d4:8d:c5:86:47:ba:a8:a2:b8:11:05:a5:78:0b:e1:
8a:04:f9:bb:a4:f3:63:fe:b5:0f:d1:43:79:55:1b:
63:e2:0b:06:74:22:b7:11:9b:d2:9a:96:f6:44:e4:
2d:db:68:c9:c6:60:3f:86:1d:d3:ee:38:dc:32:b3:
eb:1a:d3:24:4c:a5:1f:30:58:d8:82:7e:4b:0a:13:
92:3a:5a:57:fc:c4:0c:94:59:2f:79:0d:cc:a2:d1:
ff:f1:cf:c2:d6:e5:9d:d3:26:61:2a:80:03:17:3f:
63:72:0a:c6:98:30:6d:9c:30:a9:41:f6:62:6c:3a:
40:3b:46:40:79:47:33:33:af:19:5a:d4:7b:c0:a7:
b0:c3:19:81:f7:d4:8b:9e:57:59:0a:7b:60:cb:11:
08:2b:20:1e:f1:12:ee:7b:88:e0:32:81:1d:a3:02:
2e:f9:43:e2:d9:56:b2:1b:e5:53:73:18:1e:0d:72:
d3:66:9c:33:25:41:30:4d:47:5d:22:1b:b0:be:4d:
10:5e:e9:ed:64:4e:dd:4b:80:17:e3:72:51:9f:53:
6c:fe:6a:a7:74:b4:2d:be:ef:99:62:c4:4f:21:c9:
dc:6a:8e:80:1a:ac:0e:7c:ac:c8:6c:fb:7f:a6:61:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:76:BF:2A:BA:49:AD:EC:B2:77:7B:59:E8:41:26:02:52:DF:EA
X509v3 Authority Key Identifier:
keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:43:fe:38:f2:9a:f7:d6:73:94:b6:7b:35:a1:07:8b:30:39:
47:49:f1:d1:8c:e9:84:84:6e:1e:4a:16:01:fc:85:50:33:c6:
bc:e5:35:30:b1:28:a1:10:4d:88:6a:33:eb:f3:0e:1b:fa:0f:
fe:92:54:2f:1e:98:a4:14:87:cc:2b:22:87:31:b0:9f:99:2e:
fe:37:0d:f9:32:06:50:c0:e3:9d:1a:a4:51:45:d9:67:6e:17:
59:12:f4:bc:63:94:02:53:a2:0d:6f:8c:0d:bc:54:73:0b:1f:
9d:d8:e2:e5:33:48:6d:5e:ca:b0:fc:58:a6:30:a3:2d:5d:a6:
14:ac:ba:dc:83:b6:16:d8:f2:38:c3:37:1b:c2:a8:a3:d8:d6:
16:db:ce:d1:be:36:6b:fb:83:28:d5:9d:cc:10:ce:bf:49:2c:
e2:57:6a:ba:3e:ab:6b:ae:ea:07:31:79:24:59:82:28:13:45:
72:ba:79:82:7a:b3:b4:33:a0:5c:29:b7:43:d0:c2:20:f3:61:
7f:fd:19:4f:05:61:ef:2f:a1:a5:77:d7:a8:72:ef:c6:fc:ea:
d0:57:2a:e5:a6:c3:6e:4e:97:90:97:ba:3a:df:4b:e4:db:4d:
a9:11:98:dd:96:dd:0c:c9:85:38:68:ca:6c:de:c8:4e:d7:6c:
48:07:32:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:05:06 2026 by rpki-client