
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
File: 547F71C62763A22A9156089F2F55B587337FAFCB.mft (raw, json)
Hash identifier: gkeOqSNZaxP4KFnuTvWnIpSKCjs7rlhtS9Qy+3+//nA=
Subject key identifier: E0:3D:77:85:81:B7:B3:2E:6E:E6:DD:7E:C0:6B:D3:13:30:55:5E:6A
Authority key identifier: 54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
Certificate issuer: /CN=547F71C62763A22A9156089F2F55B587337FAFCB
Certificate serial: 2F37D948C21D62B87C081258BC25F2E7F1709015
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
Manifest number: 0201
Signing time: Thu 23 Jul 2026 21:22:50 +0000
Manifest this update: Thu 23 Jul 2026 21:17:50 +0000
Manifest next update: Sat 25 Jul 2026 00:01:50 +0000
Files and hashes: 1: 547F71C62763A22A9156089F2F55B587337FAFCB.crl (hash: YclmWTA6A5LiEn3A2jzQO0CTug3CSPevXWDVfooJrZc=)
2: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: C78X6b1wtQ+o+3B3NsMWXv/5g/eOSLda7nmIBsZCFi4=)
3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: 4aopGJ1cf3FfEgBAnwMWLIMrqV6viaaMWkIHc0Xr/50=)
4: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: A22cC6P4zwUPrBb0SJH+K+fkdMIe6umBZOE2fRrY/8M=)
5: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: fEubeCnsxgB87jcAHKsunB1TQ5JLbTqBKtlqWVjmt78=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:37:d9:48:c2:1d:62:b8:7c:08:12:58:bc:25:f2:e7:f1:70:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547F71C62763A22A9156089F2F55B587337FAFCB
Validity
Not Before: Jul 23 21:17:50 2026 GMT
Not After : Jul 25 00:01:50 2026 GMT
Subject: CN=E03D778581B7B32E6EE6DD7EC06BD31330555E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:e9:d7:75:fa:ab:61:2d:ba:d3:57:16:43:
70:17:ad:ce:30:24:12:be:ee:af:69:1c:a3:cc:4a:
c2:de:83:fa:24:f1:27:f6:bc:66:0a:f1:cf:cc:4c:
a6:4f:91:dd:50:75:da:cb:cf:f3:d5:0e:17:89:5c:
75:dd:42:ae:cb:6e:24:e4:57:d3:2b:4c:92:dc:61:
ce:e2:d7:83:05:22:a8:9a:59:59:9e:c6:29:6d:32:
14:8a:4c:1c:7a:9d:01:1c:f7:e4:9e:e7:a4:b5:b0:
9e:59:cf:64:11:aa:9e:81:ed:b4:60:c5:17:c3:35:
37:30:a7:be:d7:e1:69:d9:df:5f:f8:00:cf:60:38:
6f:09:9e:cc:84:bd:51:73:02:00:78:c1:72:6e:f8:
29:b3:36:c4:5d:b6:76:f1:6e:e9:9c:37:b0:14:27:
81:e8:ed:6d:64:43:94:2e:bd:a8:26:73:55:4d:2f:
8e:73:6d:db:95:5d:55:ae:a3:7d:4d:84:f2:69:8a:
aa:17:70:aa:84:fc:0a:4b:23:88:36:71:18:e8:1a:
e8:92:1f:d1:53:fb:45:3c:69:92:72:5d:cf:2b:51:
f4:26:1f:2f:26:18:b7:81:1b:e4:42:79:37:93:69:
25:10:98:30:42:69:0a:de:88:7a:72:36:4a:1e:39:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:77:85:81:B7:B3:2E:6E:E6:DD:7E:C0:6B:D3:13:30:55:5E:6A
X509v3 Authority Key Identifier:
keyid:54:7F:71:C6:27:63:A2:2A:91:56:08:9F:2F:55:B5:87:33:7F:AF:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/547F71C62763A22A9156089F2F55B587337FAFCB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/1/547F71C62763A22A9156089F2F55B587337FAFCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:73:f2:a1:f7:1d:42:9b:b7:0f:f4:09:3b:ed:0e:fb:a5:75:
36:6d:e6:ee:c7:95:e2:87:07:5c:10:ca:42:8c:67:be:9f:15:
49:f9:a3:89:24:69:03:98:8d:75:c9:00:69:b2:46:0d:70:c1:
d3:50:01:c5:e0:88:0e:92:b5:36:a6:05:61:33:76:3c:25:d2:
00:5e:5c:ca:19:e7:e4:61:b4:a9:0d:84:72:4f:57:38:48:84:
b0:3d:75:a8:89:c4:c4:aa:28:de:70:71:96:c5:fe:67:32:69:
4e:86:db:56:d7:6c:b7:52:67:8a:66:b9:13:b2:d9:53:61:f2:
75:35:24:16:c9:16:e0:4b:93:8b:e7:c3:af:e5:34:78:c1:85:
2d:84:57:2b:c1:8f:3d:c2:57:34:31:cd:6c:f6:22:2e:1f:a6:
e1:55:69:46:05:79:7c:77:f4:2e:13:29:61:2c:20:08:d7:a5:
7c:40:6e:23:9f:e9:ea:4c:a9:dd:ff:a1:bd:e9:e5:f4:8c:9f:
54:d9:a8:9a:be:df:e0:07:e9:f1:67:3d:42:a4:a0:5e:65:2a:
ae:89:98:eb:45:f8:1c:d6:cf:b0:36:04:ce:5f:0f:e0:d2:26:
6a:f8:fa:10:6f:43:2a:d6:8b:72:71:74:7c:1d:48:0d:2d:bc:
ed:2b:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:22 2026 by rpki-client