
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json)
Hash identifier: +dYcWGh6c784lrQKpqzmiwq62H8wIAs02VhS6UGwYZU=
Subject key identifier: 97:2E:DB:17:E2:76:BF:80:3A:D3:D5:BF:D7:32:91:66:AF:6D:9B:95
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial: 5DEA08CC0C055BC23C8A505D2BA3DB652BD70E4E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
Manifest number: 0F
Signing time: Mon 02 Mar 2026 02:12:29 +0000
Manifest this update: Mon 02 Mar 2026 02:07:29 +0000
Manifest next update: Tue 03 Mar 2026 04:12:29 +0000
Files and hashes: 1: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=)
2: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=)
3: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=)
4: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: cpBD4gb1347+sVzsmTUu1DlErbJnHEeQY/6uXet6dpo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ea:08:cc:0c:05:5b:c2:3c:8a:50:5d:2b:a3:db:65:2b:d7:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Validity
Not Before: Mar 2 02:07:29 2026 GMT
Not After : Mar 3 04:12:29 2026 GMT
Subject: CN=972EDB17E276BF803AD3D5BFD7329166AF6D9B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:91:14:5f:ae:fe:11:a3:da:de:d2:81:4a:
6c:21:66:6d:ec:89:68:de:a9:1b:fb:e2:15:9c:44:
89:e6:b2:ba:79:12:0b:90:56:f4:53:70:f3:45:59:
b8:7d:83:5f:f5:ed:78:89:ba:b9:97:3c:2c:7f:15:
ae:c7:98:fe:eb:71:57:ed:82:53:03:df:b0:42:4f:
95:93:c1:43:66:c4:d9:2f:00:9f:b2:9f:26:c0:1d:
ab:11:2d:b1:48:47:6a:14:c7:c3:50:fc:e6:3f:38:
1b:45:1e:38:7c:f3:57:7e:09:b5:19:6f:e0:7f:3d:
4f:a4:be:17:bb:b8:ba:2a:5e:65:3c:f2:31:0c:78:
dd:22:19:03:ef:75:25:88:68:60:3a:90:e0:23:06:
84:b4:ad:8d:fb:a8:01:a3:7d:86:3d:cd:a5:32:90:
4f:15:2b:d4:d0:e0:ac:fc:96:a9:5c:e4:75:fb:10:
14:16:2d:08:9f:9a:f4:f3:36:03:2e:83:10:25:81:
d0:3f:ee:99:0d:77:73:e7:b0:d6:2f:8b:a1:66:36:
ec:8e:d7:ba:e7:2d:99:5c:38:b8:ed:7a:ac:2c:03:
c8:77:71:a9:35:50:28:81:33:bb:f7:71:d0:35:e3:
1e:b7:7a:b0:91:85:cd:70:b6:0e:10:b9:cb:d4:21:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:DB:17:E2:76:BF:80:3A:D3:D5:BF:D7:32:91:66:AF:6D:9B:95
X509v3 Authority Key Identifier:
keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:a6:f8:b4:9e:08:13:bc:b4:af:71:ba:9e:1d:0f:33:b5:
53:0b:28:41:d6:7d:f5:d6:80:7e:91:23:15:0d:7f:e4:c8:d3:
c3:d8:52:c6:fc:3d:39:08:53:04:2d:c8:76:5f:6a:a8:c5:08:
68:c2:4e:31:64:b2:03:18:dd:bd:23:ad:15:bb:1f:e7:44:6a:
9a:23:7d:e4:10:7a:17:43:27:6e:9c:fe:2a:28:09:80:ac:49:
e1:cc:5f:9c:c4:ce:b0:71:74:d8:71:29:3a:61:38:65:5b:c0:
d3:5f:a6:7f:92:97:fc:48:f0:d4:b8:2e:f4:01:6d:fb:8d:c1:
ab:36:3f:10:31:56:e2:a9:7e:4b:fb:ae:4e:6a:64:79:e0:c5:
25:4b:f4:92:a0:4a:14:86:96:e4:e7:eb:d6:30:cc:c6:c1:c8:
75:c7:65:50:5d:43:c5:9d:45:a1:14:cd:12:fe:4e:f7:74:2a:
13:45:71:e7:d6:04:c4:5a:2d:d2:c8:fc:7d:a0:96:c3:b5:a5:
20:f6:51:7e:02:38:3a:23:f6:ec:e5:68:6c:2c:c9:a5:3e:2b:
af:fd:2e:f6:7b:0b:b8:b8:87:1c:1a:13:9d:a6:60:81:64:6e:
fd:68:bc:85:55:ca:26:ba:de:d3:0d:42:63:63:d3:d7:00:6a:
da:88:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:11 2026 by rpki-client