
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
File: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft (raw, json)
Hash identifier: WxLK6hD6gMIemq84+lQozUidW+4TV//dSx2/69K2/q8=
Subject key identifier: E8:16:9E:00:E5:15:71:8D:50:2B:DC:10:30:83:82:43:70:03:4F:C9
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 3360F3897A1A1A287E9C030CF04ACFA1687BED26
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
Manifest number: 1393
Signing time: Sat 28 Feb 2026 23:36:36 +0000
Manifest this update: Sat 28 Feb 2026 23:31:36 +0000
Manifest next update: Mon 02 Mar 2026 03:04:36 +0000
Files and hashes: 1: 326131343a373538313a333533303a3a2f34382d3438203d3e203136393039.roa (hash: Bd6yXBUpoPF+hYuIfFqAPjVU5fz9MqxpaV5ObqZvP6I=)
2: 326131343a373538313a333530303a3a2f34302d3438203d3e20333936393638.roa (hash: hWe0MopsuhhbsZ3S9o8OBwj8cjLWddVpusY7Oex+A3s=)
3: 326131343a373538313a333530303a3a2f34302d3438203d3e20343031353037.roa (hash: 6Df05/vahSbRv4znE3OLfIl0VdNL2j9/fGDSnrxXLG8=)
4: 326131343a373538313a333530303a3a2f34302d3438203d3e203136393039.roa (hash: bvCK0vzABX0GIgAHss3mxvyUiQC1fMmgnIs36fcNdHo=)
5: 326131343a373538313a333563373a3a2f34382d3438203d3e203136393039.roa (hash: exjF0q0aJJV12jth59pchkZ6rTciHjjsF3VzxPVljDU=)
6: 7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl (hash: JhHDfk4qymu6Qq7QbCEn517jzzPILROJ4aTCAeyZcCI=)
7: 326131343a373538313a333538643a3a2f34382d3438203d3e203136393039.roa (hash: hgnX7HeDxBSCgwy+vwPQXIv6xTdi2QxsPHoyfkkcUvs=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:60:f3:89:7a:1a:1a:28:7e:9c:03:0c:f0:4a:cf:a1:68:7b:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: Feb 28 23:31:36 2026 GMT
Not After : Mar 2 03:04:36 2026 GMT
Subject: CN=E8169E00E515718D502BDC103083824370034FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:11:5e:e4:8c:d4:60:76:ba:56:81:cf:dc:
cf:af:b2:c8:86:27:d2:07:d6:60:a6:6f:e5:05:ce:
11:3f:7e:56:65:9e:59:cf:1d:7b:f1:c6:35:2f:f9:
e2:04:1f:e7:d5:b2:a6:a0:cb:a8:3f:a4:17:68:c2:
27:e2:fa:b7:78:f7:9b:47:35:0f:dd:89:c9:05:a4:
1d:83:d7:5b:d4:21:65:7c:a8:18:76:74:62:80:80:
8e:ba:d1:92:95:50:80:34:16:de:dd:26:83:ac:a0:
7f:73:b7:b0:f2:b7:87:58:94:c5:06:98:d1:d5:41:
2c:e6:b2:2e:0f:77:59:98:c0:92:55:b4:51:33:09:
8c:f6:78:db:38:e9:83:6e:b7:2d:7c:60:3f:e6:de:
6e:ee:e5:fc:ff:73:15:ad:e9:28:cb:a7:fd:2b:40:
fb:a7:00:a4:89:e8:73:4f:cf:11:49:1a:e9:02:24:
98:b7:f6:ec:ed:7a:73:93:f1:e4:65:5e:7e:5c:5f:
5b:d8:95:8c:64:e4:92:bf:2e:16:13:a7:1f:2c:01:
88:43:1f:8b:c7:f1:cd:a8:91:ae:0a:e3:3a:54:f4:
ce:15:3a:ba:3b:69:8a:71:ed:03:b3:ff:e4:58:e8:
4a:7a:f8:f0:6e:dd:0e:53:2c:c1:00:23:f0:43:e4:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:9E:00:E5:15:71:8D:50:2B:DC:10:30:83:82:43:70:03:4F:C9
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:95:76:08:92:8b:0a:51:2f:db:71:1c:d5:93:3f:f3:25:
23:ac:42:c3:f3:0c:2c:1a:4c:3f:9d:74:e1:08:64:d1:44:db:
bb:0c:89:b2:70:42:e9:40:8d:6f:be:a4:49:c4:45:70:89:bd:
e9:31:93:fd:5d:eb:43:f6:a4:b9:d0:0d:1a:64:c3:63:8d:7a:
6d:7d:58:9c:5f:42:67:a2:fe:de:d6:33:b8:65:61:8c:71:01:
cf:d1:0b:0b:f4:95:5b:ef:41:e3:e2:3f:12:6f:d3:bb:61:6a:
f3:d3:a3:81:0c:b4:7d:d2:94:b6:79:ab:02:b9:f1:16:e7:21:
7d:bd:a0:71:6a:60:95:76:77:70:64:de:e2:03:5a:b6:35:22:
2b:2a:49:43:82:16:7c:3c:0a:68:9a:69:39:02:b5:be:38:4d:
b9:4c:f8:c5:86:6e:e4:71:b7:c4:0b:79:7a:b1:fb:ef:d9:ff:
87:91:45:8a:ad:a6:fa:bc:32:0c:2b:0e:23:b2:b5:a3:9b:89:
49:0a:d0:e7:8e:d7:0d:16:a1:b7:90:98:d0:8a:17:86:5d:6b:
35:0d:94:35:3b:59:9c:47:37:32:db:a4:81:fd:00:6a:03:b6:
d5:c5:c0:5c:8e:25:2f:58:c8:25:67:e2:e7:57:a0:ad:1d:1e:
b4:e5:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:14:11 2026 by rpki-client