
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier: wAouXrR2PnvgRgmEFWnYs0sC/O/S8S9C6YBF+jRFTho=
Subject key identifier: 30:D5:11:A2:B5:A6:D6:DF:10:E3:42:0D:96:10:A2:C9:9A:6A:B7:F3
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial: 3396A398DF7AED07B0119612D7517ABF1AD9B556
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number: 0138
Signing time: Mon 23 Feb 2026 07:57:39 +0000
Manifest this update: Mon 23 Feb 2026 07:52:39 +0000
Manifest next update: Tue 24 Feb 2026 07:57:39 +0000
Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 6pzPl1CKzXGYp4EVxRXIn1wg4oABaAK4CCBHYDSxxpU=)
2: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: YVenbTOqKe9MEXa6/fOG09XMak323Qg3KMUQzchdB9c=)
3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: OL4qOyR6B/b2hlgmfDXITi19SKEL2p46/B1hl06cMuQ=)
4: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: RxLo4AdqJDnPZQyih2dN7gCzOdUFOGixnoLv2pmTlM8=)
5: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: E7vQShgXOvBH1q/A8kYfwNTbOyQSM9xRkA+S+5IF33A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 06:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:96:a3:98:df:7a:ed:07:b0:11:96:12:d7:51:7a:bf:1a:d9:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Validity
Not Before: Feb 23 07:52:39 2026 GMT
Not After : Feb 24 07:57:39 2026 GMT
Subject: CN=30D511A2B5A6D6DF10E3420D9610A2C99A6AB7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:71:4b:5f:29:da:de:1e:91:59:15:1a:40:
05:b9:17:0a:28:a1:51:35:ab:24:e7:72:a2:9d:ac:
83:ad:a5:71:32:4b:5b:03:a6:bb:e4:b3:e5:a2:58:
48:a9:98:81:ca:06:d1:3d:e2:76:9f:c0:52:5d:f6:
d7:5d:f2:ff:84:74:35:0e:bc:0f:07:30:39:1a:04:
e9:d1:00:43:83:74:4d:fe:63:db:13:73:2e:cb:1c:
84:7a:89:87:23:ff:55:07:b6:61:64:af:d4:5d:ac:
ed:21:c8:5c:67:48:f2:82:c3:2e:c9:ef:b7:ff:d2:
b7:85:ac:b7:3f:36:ff:fb:e6:4f:3e:af:61:9d:5e:
de:ca:03:95:df:0f:73:66:a4:46:48:72:21:9b:b8:
b6:17:04:b9:88:7b:ae:d5:36:2b:3b:54:33:43:91:
be:ae:e7:6a:30:cf:13:73:ea:1e:5d:08:fe:0b:ea:
ed:b6:7c:ec:82:db:87:a4:4f:31:49:b1:63:15:5f:
9e:8b:86:79:4c:36:4c:ab:c7:0e:68:cf:8b:51:0b:
35:95:20:8e:63:fd:93:75:3e:3b:90:f5:41:4c:9d:
58:5a:a5:51:24:d1:7d:cf:07:a5:dd:a0:6c:84:e9:
69:b8:1a:9f:51:fb:90:2d:10:96:a5:4b:9a:b5:58:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:11:A2:B5:A6:D6:DF:10:E3:42:0D:96:10:A2:C9:9A:6A:B7:F3
X509v3 Authority Key Identifier:
keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:5d:dc:6e:34:49:7d:12:fc:02:fe:ce:6e:5c:ba:0f:f7:
c5:91:8b:c8:71:90:8a:b6:df:88:1c:f8:3e:a4:c8:3f:b3:ba:
15:c2:4e:41:e0:13:c1:f4:b0:d1:06:b6:39:f6:ec:2a:a7:4b:
51:83:65:87:14:5b:97:2f:29:6a:f7:9f:a6:64:29:f2:c2:26:
dd:44:98:d1:48:34:a3:15:01:58:9b:21:f7:57:f2:bd:02:d1:
37:fc:6a:5a:1a:ce:23:7f:ca:d3:3e:ae:8d:61:b7:f3:24:77:
5d:05:32:4e:a6:11:7b:b5:ac:f8:5e:fc:fb:6c:9c:4b:0a:8a:
d9:01:cf:3a:af:a9:ac:e6:a0:eb:51:f4:db:82:20:99:7d:6d:
63:18:64:a7:32:a5:fb:c3:5d:3c:92:ce:de:60:22:8c:b5:98:
fe:45:e4:49:da:88:5a:99:44:ac:1c:45:51:7b:2a:83:96:aa:
69:bf:cc:9b:30:20:6e:90:c2:af:9c:6e:e9:11:b3:d4:69:e7:
3f:72:42:03:86:c5:08:52:38:18:47:d4:c1:8e:be:74:eb:80:
0d:fc:bd:f5:50:3c:53:da:cb:d9:81:c8:4d:22:7d:39:16:37:
7e:9f:f8:1a:eb:04:eb:f1:4e:a7:6d:6e:45:02:15:81:e0:f8:
f8:1f:14:13
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUM5ajmN967QewEZYS11F6vxrZtVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz
MzdGQUZDQjAeFw0yNjAyMjMwNzUyMzlaFw0yNjAyMjQwNzU3MzlaMDMxMTAvBgNV
BAMTKDMwRDUxMUEyQjVBNkQ2REYxMEUzNDIwRDk2MTBBMkM5OUE2QUI3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/nFLXyna3h6RWRUaQAW5Fwoo
oVE1qyTncqKdrIOtpXEyS1sDprvks+WiWEipmIHKBtE94nafwFJd9tdd8v+EdDUO
vA8HMDkaBOnRAEODdE3+Y9sTcy7LHIR6iYcj/1UHtmFkr9RdrO0hyFxnSPKCwy7J
77f/0reFrLc/Nv/75k8+r2GdXt7KA5XfD3NmpEZIciGbuLYXBLmIe67VNis7VDND
kb6u52owzxNz6h5dCP4L6u22fOyC24ekTzFJsWMVX56LhnlMNkyrxw5oz4tRCzWV
II5j/ZN1PjuQ9UFMnVhapVEk0X3PB6XdoGyE6Wm4Gp9R+5AtEJalS5q1WH7DAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUMNURorWm1t8Q40INlhCiyZpqt/MwHwYDVR0j
BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey
MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez
LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI2yXdxuNEl9EvwC/s5uXLoP98WRi8hxkIq234gc+D6kyD+zuhXCTkHg
E8H0sNEGtjn27CqnS1GDZYcUW5cvKWr3n6ZkKfLCJt1EmNFINKMVAVibIfdX8r0C
0Tf8aloaziN/ytM+ro1ht/Mkd10FMk6mEXu1rPhe/PtsnEsKitkBzzqvqazmoOtR
9NuCIJl9bWMYZKcypfvDXTySzt5gIoy1mP5F5EnaiFqZRKwcRVF7KoOWqmm/zJsw
IG6Qwq+cbukRs9Rp5z9yQgOGxQhSOBhH1MGOvnTrgA38vfVQPFPay9mByE0ifTkW
N36f+BrrBOvxTqdtbkUCFYHg+PgfFBM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 13:14:22 2026 by rpki-client