
$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json)
Hash identifier: FHjJE/GtKV7kp6gsttvN3Xyf3ZSWYKVbHfuS85PpV9k=
Subject key identifier: CE:11:04:91:C9:93:19:7B:BF:26:9D:72:D3:7C:AB:41:33:A9:5D:87
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial: 31DD24E38ABBA698FA0F8D663BD9FD425E0BD91F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
Manifest number: C2
Signing time: Fri 17 Apr 2026 15:41:45 +0000
Manifest this update: Fri 17 Apr 2026 15:36:45 +0000
Manifest next update: Sat 18 Apr 2026 17:35:45 +0000
Files and hashes: 1: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=)
2: 326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa (hash: nCaZK5znVYJTFYBYBBiKoIVkT1bc2I4KpDdvg2uat2U=)
3: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: HOrma2M5CYwy2nVNLRrkZrlcLTiEDa8Hokye3LuZ6v8=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:24:e3:8a:bb:a6:98:fa:0f:8d:66:3b:d9:fd:42:5e:0b:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Validity
Not Before: Apr 17 15:36:45 2026 GMT
Not After : Apr 18 17:35:45 2026 GMT
Subject: CN=CE110491C993197BBF269D72D37CAB4133A95D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:c5:a7:ea:65:ee:38:ee:bf:c3:98:9a:87:
92:c2:98:b1:37:63:b9:5a:4f:77:ad:4d:a6:35:bc:
ab:0a:67:53:c2:c2:04:67:0e:e0:39:28:3b:19:30:
0f:8e:d6:75:7d:f0:3c:de:1e:cb:bd:28:d5:b5:f6:
6c:a7:a2:c9:f5:0d:a3:92:70:c4:54:d7:c4:ff:98:
ee:13:09:73:72:b7:d0:f2:df:e9:43:41:ae:b7:e5:
ae:4b:1e:53:64:5e:e7:35:31:ce:b6:7a:49:4c:fa:
94:77:bd:a2:6d:d3:50:96:c5:fb:50:70:40:8d:3f:
b0:db:48:8d:86:81:5f:c2:71:49:26:54:c1:c6:1d:
aa:de:dd:49:c5:06:e5:9d:e6:3c:64:ac:8b:73:2b:
6d:2d:4f:fd:13:62:37:8c:3b:ee:5b:3a:a8:95:3a:
65:b2:aa:04:07:8b:48:f8:fe:d2:e8:38:2e:2f:86:
b6:b3:9e:ac:19:7c:bd:f1:24:d2:aa:ba:5c:d2:3b:
9e:b2:24:01:11:63:0d:c5:64:dc:b9:45:df:f8:e6:
01:34:cf:11:dc:59:36:fb:04:ed:1b:c1:41:63:bf:
19:37:a3:32:d2:9b:be:8f:39:bc:13:31:20:13:6f:
8d:fc:20:a9:94:95:b7:6d:28:0c:16:9a:6f:f0:65:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:04:91:C9:93:19:7B:BF:26:9D:72:D3:7C:AB:41:33:A9:5D:87
X509v3 Authority Key Identifier:
keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:40:45:a7:0b:16:06:1f:ba:27:00:03:99:a6:65:47:12:d9:
c0:6e:85:47:e6:a7:ab:ce:fa:fa:9e:01:9b:f5:3c:11:b0:00:
ee:13:7a:c6:58:c7:ae:be:76:d0:47:b1:f3:a7:64:66:85:e3:
19:f2:2a:73:fc:87:66:57:b6:c3:81:27:60:e1:ee:47:ee:e8:
06:30:fb:15:60:29:91:4b:6c:02:dd:42:80:6d:d2:a8:8a:bc:
dd:a8:cf:4e:a5:52:57:de:05:51:f7:30:86:22:2b:f5:f6:0d:
3b:23:fa:d7:c4:61:5e:5d:32:5d:b5:c9:46:f6:05:ca:68:30:
c0:63:6c:26:41:ae:0e:0c:c0:1b:0a:d1:db:d9:8b:97:5a:47:
a7:b2:39:ef:77:a3:65:b1:a9:96:de:9c:f2:11:6d:cc:5c:06:
e3:df:cb:7e:f3:e3:97:e0:98:cd:96:25:19:64:68:f9:70:10:
83:ad:d4:9a:96:33:fc:8e:07:b4:88:85:cd:8f:a3:a5:22:fc:
d6:64:3b:ee:af:aa:ac:d6:64:0c:26:cd:7a:3e:82:43:04:d7:
f8:55:17:3d:2b:e2:40:60:e0:ee:0d:44:8f:ad:40:7c:ca:7e:
95:3e:c4:b1:b2:56:ca:bd:d8:fb:9f:6b:6d:c7:dd:e7:a9:e4:
0c:c0:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:18 2026 by rpki-client