
$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json)
Hash identifier: 9eriHJNzcslB3yPjH7O/ImobzO0GGSPU3EI7RSsxuTg=
Subject key identifier: CD:32:86:F9:5A:E1:AE:22:29:2F:22:BA:61:41:36:14:38:10:46:AD
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial: 18301C3838FD89C56444EFC96DF0E7BF53EFD62B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
Manifest number: 82
Signing time: Sun 01 Mar 2026 22:47:54 +0000
Manifest this update: Sun 01 Mar 2026 22:42:54 +0000
Manifest next update: Mon 02 Mar 2026 23:51:54 +0000
Files and hashes: 1: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: xiudFLcyQcNTdJI+3SjLwfB4Ly6IXBPOWQ4BDolmt3c=)
2: 326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa (hash: nCaZK5znVYJTFYBYBBiKoIVkT1bc2I4KpDdvg2uat2U=)
3: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:30:1c:38:38:fd:89:c5:64:44:ef:c9:6d:f0:e7:bf:53:ef:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Validity
Not Before: Mar 1 22:42:54 2026 GMT
Not After : Mar 2 23:51:54 2026 GMT
Subject: CN=CD3286F95AE1AE22292F22BA61413614381046AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:2b:57:98:ee:53:cb:d7:e4:97:04:5f:1d:
1b:8e:a6:3e:fa:05:af:f2:d7:10:e5:d8:12:b5:ae:
77:b5:d8:9f:80:a1:c7:d2:cc:8b:75:51:98:13:6f:
5f:97:82:e5:73:b7:d7:c2:7c:bb:ac:50:b7:59:62:
cb:1b:87:48:13:6d:7a:6d:35:3e:72:0c:13:ae:45:
e3:2f:14:26:57:c8:37:30:37:1b:39:14:d0:c3:65:
6b:a3:b8:14:30:80:e6:22:4c:bf:b3:4a:f1:f0:f0:
05:9a:78:6c:cb:09:42:ab:39:03:d3:cc:e7:0d:8e:
ae:5c:c2:fa:79:75:30:b2:0e:a0:54:2b:9f:25:45:
5a:db:fe:ca:b3:fe:c2:66:99:90:f0:96:1b:c4:17:
42:3f:c1:19:bf:c5:1f:04:24:22:57:0f:c3:9d:ef:
cd:7b:a9:ef:d2:16:18:4c:3b:95:1e:f5:d5:18:3c:
58:a8:5b:be:40:3c:a3:96:1a:0e:a0:f0:3c:9c:ce:
15:0f:61:f7:e3:86:cf:0f:71:83:ed:06:5c:03:4d:
8c:3f:69:69:86:c9:eb:c8:4c:bf:05:c2:44:e4:34:
6d:11:2b:71:35:73:99:a4:c6:07:06:64:30:14:cf:
56:4f:a6:e1:02:c1:e8:0e:f6:15:45:5b:e9:28:ec:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:86:F9:5A:E1:AE:22:29:2F:22:BA:61:41:36:14:38:10:46:AD
X509v3 Authority Key Identifier:
keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:68:71:2a:26:36:1d:4b:35:0d:f7:b3:28:ef:34:e2:78:c6:
f5:c5:4e:ef:b4:97:0c:10:da:2c:e9:a4:e6:48:e9:31:fa:0a:
b4:39:59:90:69:8c:08:16:21:46:db:9f:b2:83:4e:1e:d0:ef:
be:36:aa:c3:c9:1e:53:6c:c8:4e:bf:69:54:cb:91:ba:aa:0f:
e6:23:94:06:0b:a7:66:3b:58:ce:df:b1:89:31:27:b3:70:d9:
39:60:b4:f4:5b:b1:ab:e8:ed:51:02:ed:38:57:35:1a:89:dd:
3d:21:0b:9d:1e:bb:4f:53:3a:5e:06:ac:a8:12:f8:8b:b7:dc:
bf:08:14:d6:92:a4:2d:61:cc:58:d6:83:71:89:59:08:72:44:
1d:ab:ca:7c:0b:6d:be:ed:d8:5d:a6:dc:26:f1:e3:61:c7:fb:
0e:9f:34:a2:bc:e4:5d:5f:81:ac:b5:22:d0:25:2c:4f:f6:a2:
de:d5:ed:df:ad:d8:6a:da:68:34:75:ed:be:ef:5b:92:33:14:
13:57:af:fd:c4:1a:8c:68:50:72:31:9f:8a:50:cb:55:36:64:
26:9b:c6:cf:72:cf:11:23:86:ef:83:86:e2:aa:30:75:74:45:
82:10:be:9c:f1:10:08:70:16:f4:92:8f:ea:31:ac:ce:d5:b5:
f5:ea:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:21 2026 by rpki-client