
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier: rQZ81KLIpn6X6P4D5GGUsqtAMZTdtWhZZ4NQTsG7yuc=
Subject key identifier: 2D:CB:88:FE:7C:DE:05:ED:A6:91:64:C6:9B:85:AE:A0:7C:2C:69:8B
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial: 023835DAF50940F5421D669EA0F92673BDD7B2CF
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number: 024E
Signing time: Sun 20 Sep 2026 14:49:47 +0000
Manifest this update: Sun 20 Sep 2026 14:44:47 +0000
Manifest next update: Mon 21 Sep 2026 16:19:47 +0000
Files and hashes: 1: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=)
2: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=)
3: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: svBH7MfDbLX0zSrIA213vBqsDg9pgF7d1CjvB68ajTM=)
4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: A22cC6P4zwUPrBb0SJH+K+fkdMIe6umBZOE2fRrY/8M=)
5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 4aopGJ1cf3FfEgBAnwMWLIMrqV6viaaMWkIHc0Xr/50=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:38:35:da:f5:09:40:f5:42:1d:66:9e:a0:f9:26:73:bd:d7:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Validity
Not Before: Sep 20 14:44:47 2026 GMT
Not After : Sep 21 16:19:47 2026 GMT
Subject: CN=2DCB88FE7CDE05EDA69164C69B85AEA07C2C698B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:94:98:bb:54:28:79:7a:35:41:f6:a1:99:
e1:0f:99:bf:82:67:ce:a3:f7:b1:05:73:dd:11:19:
03:76:36:ea:7e:84:56:b3:66:17:b1:93:54:57:48:
71:c6:e7:f9:6c:7c:66:c3:5e:34:3a:0a:7f:d9:df:
d1:06:92:8e:cd:1c:82:84:40:31:0c:0f:ab:c4:33:
34:b3:1f:7b:f8:fa:b2:a8:f1:79:c1:29:69:be:eb:
6b:1e:bd:f1:2b:13:12:44:75:0b:74:b1:ae:a2:34:
dd:35:0e:2f:cf:da:d8:2b:45:9c:c9:05:c2:da:df:
38:f2:23:8b:a2:2c:6d:b4:fb:92:c9:90:86:72:0a:
9f:93:2e:66:5e:8f:89:17:67:41:24:5d:6e:d9:6b:
85:38:46:c2:f8:04:da:9d:e8:a1:55:90:26:d2:d4:
fe:3e:ae:4f:29:42:9d:4a:a2:71:74:76:b9:2f:a9:
96:b8:90:90:92:81:cd:5c:e6:0d:8d:16:b7:8b:41:
e6:3e:85:b2:06:71:fc:1c:32:47:e4:6d:a7:1f:00:
ed:7c:1d:c2:e0:a7:76:fe:f2:11:1e:1a:e8:1b:d7:
fd:fa:12:95:a7:e0:4d:07:5a:c5:1f:cf:d8:fb:bc:
95:a8:65:21:a6:dc:c9:3b:7d:ee:8c:73:b4:80:62:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:88:FE:7C:DE:05:ED:A6:91:64:C6:9B:85:AE:A0:7C:2C:69:8B
X509v3 Authority Key Identifier:
keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:94:3e:2a:54:db:ee:32:cb:5d:69:06:97:0d:19:7c:45:bb:
39:05:e4:c6:26:4d:3e:8a:b5:f4:cf:91:78:40:da:1a:9a:5c:
a9:a1:c6:6b:72:6a:e4:b2:22:c7:a8:12:c8:f8:e3:5c:35:47:
ed:86:7c:cf:32:84:44:19:3c:20:53:f7:31:ff:6c:0b:cf:a9:
f4:d6:fd:fc:5b:7b:bf:6a:76:48:a0:82:25:18:6a:dd:3e:b4:
e8:7c:e7:a7:f4:6d:49:03:61:2e:35:c7:da:33:dd:d6:b4:a8:
d6:40:59:9d:1e:33:67:ae:04:b6:81:02:92:55:33:9d:3f:50:
6b:6e:29:7f:b0:be:21:aa:fc:13:1e:25:4b:85:e9:dd:9a:59:
b5:eb:ff:30:e7:82:38:a1:c0:09:6c:1e:d4:3c:39:57:51:3e:
bc:aa:53:05:d8:bf:92:4b:1c:f3:a0:a2:fa:f4:f8:a8:a4:d4:
c5:34:f3:a1:7e:f9:41:83:9b:9a:09:65:b1:bf:8c:63:fa:5c:
4e:cd:fc:38:e3:8a:c4:5f:5f:73:67:75:3f:4c:bc:a1:7c:8b:
98:28:e6:23:85:b6:86:99:e6:7e:ac:8a:da:38:7e:43:dd:d5:
4d:28:5a:09:43:3f:29:56:89:a5:03:f8:52:a7:b8:38:dd:74:
1e:13:85:75
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUAjg12vUJQPVCHWaeoPkmc73Xss8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODcz
MzdGQUZDQjAeFw0yNjA5MjAxNDQ0NDdaFw0yNjA5MjExNjE5NDdaMDMxMTAvBgNV
BAMTKDJEQ0I4OEZFN0NERTA1RURBNjkxNjRDNjlCODVBRUEwN0MyQzY5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmZSYu1QoeXo1QfahmeEPmb+C
Z86j97EFc90RGQN2Nup+hFazZhexk1RXSHHG5/lsfGbDXjQ6Cn/Z39EGko7NHIKE
QDEMD6vEMzSzH3v4+rKo8XnBKWm+62sevfErExJEdQt0sa6iNN01Di/P2tgrRZzJ
BcLa3zjyI4uiLG20+5LJkIZyCp+TLmZej4kXZ0EkXW7Za4U4RsL4BNqd6KFVkCbS
1P4+rk8pQp1KonF0drkvqZa4kJCSgc1c5g2NFreLQeY+hbIGcfwcMkfkbacfAO18
HcLgp3b+8hEeGugb1/36EpWn4E0HWsUfz9j7vJWoZSGm3Mk7fe6Mc7SAYuqVAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQULcuI/nzeBe2mkWTGm4WuoHwsaYswHwYDVR0j
BBgwFoAUVH9xxidjoiqRVgifL1W1hzN/r8swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3
Y2EzLzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzU0N0Y3MUM2Mjc2M0Ey
MkE5MTU2MDg5RjJGNTVCNTg3MzM3RkFGQ0IuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez
LzEvNTQ3RjcxQzYyNzYzQTIyQTkxNTYwODlGMkY1NUI1ODczMzdGQUZDQi5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKuUPipU2+4yy11pBpcNGXxFuzkF5MYmTT6KtfTPkXhA2hqaXKmhxmty
auSyIseoEsj441w1R+2GfM8yhEQZPCBT9zH/bAvPqfTW/fxbe79qdkiggiUYat0+
tOh856f0bUkDYS41x9oz3da0qNZAWZ0eM2euBLaBApJVM50/UGtuKX+wviGq/BMe
JUuF6d2aWbXr/zDngjihwAlsHtQ8OVdRPryqUwXYv5JLHPOgovr0+Kik1MU086F+
+UGDm5oJZbG/jGP6XE7N/DjjisRfX3NndT9MvKF8i5go5iOFtoaZ5n6sito4fkPd
1U0oWglDPylWiaUD+FKnuDjddB4ThXU=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:42:02 2026 by rpki-client