
$ rpki-client -vvvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
File: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft (raw, json)
Hash identifier: tNGKDvPJ5xqpp2EvOWDS/EZpkt6rtmsEXN0/jE5pdPU=
Subject key identifier: BF:E2:13:10:98:36:0D:72:6B:18:E8:60:88:39:77:3D:20:23:52:9C
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Certificate issuer: /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial: 4D777677874128AB33DE25B2E5E23BB6669E31CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
Manifest number: 027C
Signing time: Sun 20 Sep 2026 18:32:38 +0000
Manifest this update: Sun 20 Sep 2026 18:27:38 +0000
Manifest next update: Mon 21 Sep 2026 19:39:38 +0000
Files and hashes: 1: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (hash: qt1lRixJHh9XyItwoGIF3dWNakYVeDxMJqfX168G6bM=)
2: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (hash: mgMQWupg/DJduDF+8HBUOXn5+ghStFl+2cN5huBHfGg=)
3: 3139352e3133372e3235322e302f32342d3234203d3e20323136313338.roa (hash: Z3o9pXvpDUUnSGCHalEoT4El1isIUHGFbt1DeGIHzdM=)
4: 07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl (hash: GqhCErGRqnW69NvzfQpOzxq+jECUirOFZcQnF6HaCiw=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:76:77:87:41:28:ab:33:de:25:b2:e5:e2:3b:b6:66:9e:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Validity
Not Before: Sep 20 18:27:38 2026 GMT
Not After : Sep 21 19:39:38 2026 GMT
Subject: CN=BFE2131098360D726B18E8608839773D2023529C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:54:cc:7e:41:2f:d3:ac:2f:2d:d1:06:d4:
3c:ba:68:aa:ca:1e:2a:d4:15:38:67:e7:a9:3c:d5:
e5:49:d6:d0:53:3f:31:df:3f:f3:fb:45:d9:a0:ec:
82:74:78:b8:8a:fb:bb:63:74:00:a9:f5:29:c8:75:
09:86:d4:9b:fd:42:d3:95:9d:fd:e5:14:01:9e:10:
c9:2a:74:25:99:5c:58:8b:50:44:2f:0b:69:0d:5c:
de:ad:c4:47:ea:9b:1b:0b:2b:c9:67:c4:ba:dc:c9:
50:6c:1b:01:76:f7:47:6a:50:d1:20:f4:23:fe:5b:
6c:5f:78:a8:4d:57:1b:72:4f:bc:8a:ea:10:95:a4:
f2:fc:27:d5:d9:ee:b3:a9:4c:8d:9e:08:68:25:1e:
af:b9:32:90:c5:d1:36:86:47:8e:fa:d9:7f:b8:27:
7a:96:3f:9a:8a:b3:56:93:df:fa:5e:4e:76:9d:d4:
1a:b7:bd:02:cf:f6:29:f9:c2:77:e2:47:3d:ea:c8:
c2:7f:e0:81:98:ef:e9:9e:ce:fe:d4:ac:24:88:1e:
03:6d:84:d3:a8:fe:39:21:d3:97:35:a2:b2:14:bd:
d3:bd:46:38:c1:52:95:7d:be:83:3b:69:9b:af:c9:
d8:35:44:87:36:ff:59:01:8d:70:c9:5f:94:96:32:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:13:10:98:36:0D:72:6B:18:E8:60:88:39:77:3D:20:23:52:9C
X509v3 Authority Key Identifier:
keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:db:37:6c:95:89:1e:cc:8f:ea:58:50:20:a4:36:7c:e9:
91:e8:62:5d:ff:fc:76:e8:f3:bd:7c:a8:08:71:b0:e4:4a:33:
de:14:e9:f6:b2:84:e1:a2:a8:e9:51:3a:df:1d:1a:41:c1:e5:
9f:f3:67:27:05:2c:04:87:69:4d:e7:ca:ca:fa:d2:0b:d4:1a:
64:3c:4c:31:42:99:9d:db:2f:9b:85:d9:a8:72:89:28:4a:6f:
ee:fb:2e:f2:b1:30:a6:60:e3:9a:d0:65:32:fa:f7:3d:a2:61:
2f:02:54:f8:67:42:14:1b:37:72:cc:2e:bb:36:6f:88:44:dc:
1e:52:d0:38:d0:10:d4:4d:75:cc:16:24:0d:40:2f:32:57:0d:
4f:06:e7:13:70:8b:20:ab:a6:9e:76:e5:bd:cd:26:aa:c9:c4:
90:25:15:e2:0a:f7:98:19:b2:26:06:df:30:24:19:0b:cd:02:
e3:da:2c:36:00:fc:08:b0:f9:b0:eb:44:81:24:9c:d3:34:8c:
e1:85:bd:6f:5e:c2:52:65:8f:b8:1c:59:0c:37:67:d6:80:92:
60:28:5a:28:91:6c:3a:d1:4b:f7:3b:0f:bb:11:61:cd:82:a1:
40:d7:1a:b3:94:65:1b:36:1e:ad:5a:46:0c:76:8e:38:96:cc:
bf:cf:f4:d7
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUTXd2d4dBKKsz3iWy5eI7tmaeMcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdiMWZiMTgzOWE0MTRmMmJiYWFmYmUwZWZjZDBmMjAy
YmNmNzRmZTAeFw0yNjA5MjAxODI3MzhaFw0yNjA5MjExOTM5MzhaMDMxMTAvBgNV
BAMTKEJGRTIxMzEwOTgzNjBENzI2QjE4RTg2MDg4Mzk3NzNEMjAyMzUyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLK1TMfkEv06wvLdEG1Dy6aKrK
HirUFThn56k81eVJ1tBTPzHfP/P7Rdmg7IJ0eLiK+7tjdACp9SnIdQmG1Jv9QtOV
nf3lFAGeEMkqdCWZXFiLUEQvC2kNXN6txEfqmxsLK8lnxLrcyVBsGwF290dqUNEg
9CP+W2xfeKhNVxtyT7yK6hCVpPL8J9XZ7rOpTI2eCGglHq+5MpDF0TaGR4762X+4
J3qWP5qKs1aT3/peTnad1Bq3vQLP9in5wnfiRz3qyMJ/4IGY7+mezv7UrCSIHgNt
hNOo/jkh05c1orIUvdO9RjjBUpV9voM7aZuvydg1RIc2/1kBjXDJX5SWMlrFAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUv+ITEJg2DXJrGOhgiDl3PSAjUpwwHwYDVR0j
BBgwFoAUB7H7GDmkFPK7qvvg780PICvPdP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMS8wN0IxRkIxODM5
QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvQjdIN0dEbWtGUEs3cXZ2Zzc4MFBJQ3ZQZFA0LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
MS8wN0IxRkIxODM5QTQxNEYyQkJBQUZCRTBFRkNEMEYyMDJCQ0Y3NEZFLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAHrjbN2yViR7Mj+pYUCCkNnzpkehiXf/8dujzvXyoCHGw5Eoz3hTp9rKE
4aKo6VE63x0aQcHln/NnJwUsBIdpTefKyvrSC9QaZDxMMUKZndsvm4XZqHKJKEpv
7vsu8rEwpmDjmtBlMvr3PaJhLwJU+GdCFBs3cswuuzZviETcHlLQONAQ1E11zBYk
DUAvMlcNTwbnE3CLIKumnnblvc0mqsnEkCUV4gr3mBmyJgbfMCQZC80C49osNgD8
CLD5sOtEgSSc0zSM4YW9b17CUmWPuBxZDDdn1oCSYChaKJFsOtFL9zsPuxFhzYKh
QNcas5RlGzYerVpGDHaOOJbMv8/01w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:20:51 2026 by rpki-client