
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json)
Hash identifier: heutKoFKNqnB5VLouYFas77xLZCSwoPzP6l+rob2FT0=
Subject key identifier: FF:A1:E8:DF:6D:BB:AF:67:22:02:93:8E:27:A0:C4:DE:48:55:4C:F3
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial: 475A2657587600A87EFFC320A2B119F1949D3CF3
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
Manifest number: 2F
Signing time: Thu 26 Mar 2026 07:33:49 +0000
Manifest this update: Thu 26 Mar 2026 07:28:49 +0000
Manifest next update: Fri 27 Mar 2026 07:38:49 +0000
Files and hashes: 1: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=)
2: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=)
3: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=)
4: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: 0fySpgQPnJbaJKwxncErkLTPLzEv+bnxbsNaQPun7gg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5a:26:57:58:76:00:a8:7e:ff:c3:20:a2:b1:19:f1:94:9d:3c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Validity
Not Before: Mar 26 07:28:49 2026 GMT
Not After : Mar 27 07:38:49 2026 GMT
Subject: CN=FFA1E8DF6DBBAF672202938E27A0C4DE48554CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:02:0e:02:d1:06:c6:e7:2b:05:61:09:38:
1c:c6:dd:ed:3e:cc:d7:f8:a6:94:33:aa:f9:3a:5f:
24:c2:45:03:fc:dd:b2:65:e4:40:fe:cd:af:3b:f4:
11:9a:57:f0:8f:84:e1:b5:d0:ab:84:b0:3e:5d:a6:
0f:f6:bc:ee:32:ad:13:73:ac:02:79:67:6a:87:07:
7a:68:4a:f2:6c:a0:8e:67:e7:13:dd:0a:72:f7:76:
f9:6a:71:5b:cb:4d:5d:92:6a:b6:df:39:a0:12:e1:
72:3f:d1:46:e7:77:53:f8:af:48:46:4b:88:8b:4e:
1a:85:84:06:ee:98:5c:36:4f:e5:09:84:0f:b8:b4:
0b:61:54:6f:ad:1b:a1:72:af:bb:6f:ff:07:f4:81:
e6:2a:87:eb:e6:05:a9:52:c5:91:4a:21:31:f1:38:
14:ab:ed:b4:34:3d:75:e3:78:38:2b:08:c2:db:25:
ec:21:fb:3d:10:f9:ec:5d:76:bf:97:cd:ac:68:ad:
92:93:9f:f8:5c:4d:9e:17:93:88:40:e4:12:0f:d2:
47:10:85:4d:31:d8:be:e6:61:56:ac:30:e6:7e:39:
9c:d0:7d:97:e6:14:fa:f5:54:17:bd:b3:74:66:da:
34:a4:e8:e1:27:02:32:2a:5f:bc:06:15:37:1a:58:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:E8:DF:6D:BB:AF:67:22:02:93:8E:27:A0:C4:DE:48:55:4C:F3
X509v3 Authority Key Identifier:
keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:04:93:8b:da:01:56:f3:f4:b4:88:c7:d2:de:91:a4:a3:28:
62:0d:28:b7:ae:cc:fc:4f:97:eb:19:0f:1b:d7:b8:56:55:b3:
28:0d:88:da:36:b5:2f:9a:64:65:58:15:cd:5c:90:a5:cb:05:
f0:54:6f:b3:22:61:ed:fb:c0:3f:ef:8d:4a:c2:16:15:05:6f:
20:2d:d4:f3:ed:83:37:1d:16:3d:63:7e:89:80:c3:36:ea:80:
6e:9a:2c:5a:93:44:2d:f3:a8:6f:05:a5:7d:30:1c:5a:57:c5:
ce:c3:28:b1:62:7f:38:6c:9a:8e:c9:74:17:77:4c:54:4f:b6:
99:31:32:1c:64:71:c7:84:23:e3:db:27:0d:c2:f7:74:f6:23:
37:c8:ff:d2:7e:0d:48:8c:d5:ee:5c:e8:b1:20:7f:96:4a:38:
90:29:14:6b:15:f1:c4:00:ec:c9:8e:3b:d6:39:93:33:bb:d5:
12:f6:23:b6:83:b9:81:b8:67:58:ae:3a:46:ea:52:20:fa:a0:
65:2d:82:40:65:6f:50:57:01:a4:93:a8:8b:36:4b:0d:8f:2f:
29:08:a9:da:19:96:51:c6:fc:71:ab:11:1e:f2:cd:de:38:68:
74:4a:b1:4a:e9:6c:6a:09:79:aa:8f:8c:34:d3:a0:b2:b8:c9:
0b:14:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:14:45 2026 by rpki-client