
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
File: D6D172D72D23BAC1F197C131AD720E6E8230B003.mft (raw, json)
Hash identifier: +TAK8JV5Kf7PWHZB31unVIUGEFJpo6cJ5Ebhi98Fya4=
Subject key identifier: 84:73:41:4E:91:06:FB:17:89:74:D4:FA:91:C3:DA:74:80:CB:56:EB
Authority key identifier: D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
Certificate issuer: /CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Certificate serial: 262897C9119ADC0953E802D55F6FBB2FDC08A2B8
Authority info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 11:55:01 +0000
Manifest this update: Mon 21 Sep 2026 11:50:01 +0000
Manifest next update: Tue 22 Sep 2026 14:31:01 +0000
Files and hashes: 1: D6D172D72D23BAC1F197C131AD720E6E8230B003.crl (hash: QbYrq1NzJXpGZNKmaLJLVInFMbNfCUw5adnf117kfV0=)
2: 323630323a663530633a6330303a3a2f34382d313238203d3e20323035393431.roa (hash: cWyW4xHleqLk84rEzGTR8NRbqNQlRwAtCtLspkb3tV8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 05:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:28:97:c9:11:9a:dc:09:53:e8:02:d5:5f:6f:bb:2f:dc:08:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6D172D72D23BAC1F197C131AD720E6E8230B003
Validity
Not Before: Sep 21 11:50:01 2026 GMT
Not After : Sep 22 14:31:01 2026 GMT
Subject: CN=8473414E9106FB178974D4FA91C3DA7480CB56EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:a3:09:75:ac:4e:de:ee:d3:5c:a1:eb:6e:
92:57:7f:87:d4:f2:66:8e:56:5b:00:93:2e:d0:63:
b6:2b:89:e9:c3:d9:b5:c4:ad:5f:61:33:8d:3c:9e:
f6:11:c3:4b:e6:3b:7d:ba:cc:19:d6:13:f1:f2:1b:
00:7b:d8:99:4e:a9:02:93:3d:59:d4:fd:13:9c:29:
ac:2d:ee:78:76:ba:32:8a:8e:ed:2c:a4:ad:28:82:
cd:29:d4:80:80:54:b5:fc:00:c9:ba:82:03:87:6a:
70:01:43:c0:76:c5:85:0f:b1:7a:91:c3:33:ff:e3:
12:45:77:6a:41:82:72:9d:da:88:b7:47:79:6e:48:
ea:3d:a1:37:90:aa:79:a2:c7:eb:26:c3:87:61:ea:
fb:53:b6:11:47:7d:1d:33:28:68:35:49:57:b2:72:
00:b7:e0:35:2b:39:a4:ef:c8:44:ea:43:0e:52:0e:
ca:6c:94:6b:57:b0:6d:3d:a1:c2:8e:f6:ad:c3:d9:
1b:a7:16:41:d2:c7:33:a5:cf:a6:5f:72:40:95:ff:
6f:68:de:a2:24:2a:6b:3a:ff:2c:cb:8a:d4:18:34:
de:b9:71:43:5d:02:e4:d9:e0:0a:01:13:d3:35:a5:
b8:11:42:f5:e1:07:eb:b7:ed:97:41:7c:e2:8d:bd:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:73:41:4E:91:06:FB:17:89:74:D4:FA:91:C3:DA:74:80:CB:56:EB
X509v3 Authority Key Identifier:
keyid:D6:D1:72:D7:2D:23:BA:C1:F1:97:C1:31:AD:72:0E:6E:82:30:B0:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/D6D172D72D23BAC1F197C131AD720E6E8230B003.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/2/D6D172D72D23BAC1F197C131AD720E6E8230B003.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:28:74:0a:34:c5:73:7b:40:e6:ba:4f:58:27:9e:f5:26:bf:
a7:a7:ec:84:e9:62:5b:d7:29:b1:ee:46:00:8d:01:58:35:3a:
62:fd:4e:a3:6b:25:3e:fc:95:9e:43:0d:5b:2e:d4:15:14:0e:
5b:e1:15:4f:9b:72:83:9b:4a:75:72:1e:41:07:45:c3:25:76:
d5:8c:47:2a:e3:80:b5:13:b3:15:03:9a:fb:87:23:db:ca:90:
d0:e9:aa:1f:f1:26:b3:0b:bc:49:dd:00:04:fe:5c:3c:ca:ad:
5e:5f:dc:ac:dc:58:be:83:af:be:2b:1c:5e:1d:a5:e8:9b:44:
95:3e:21:74:ec:45:bf:02:03:36:67:49:3c:ea:a4:03:4a:f6:
f4:ec:d6:f6:43:c7:f2:39:4e:1b:0c:7f:64:5d:19:f7:3a:d8:
d3:c1:0d:11:bf:fd:61:30:6e:38:7c:6b:93:0e:23:d6:6c:f6:
2d:95:99:14:d2:66:b4:3b:59:fe:5a:05:5e:9f:96:65:bf:47:
a1:57:5e:fd:db:20:ee:48:c6:2b:17:26:a5:7d:08:35:1e:d9:
70:c1:4e:b8:09:80:83:c8:c0:59:0d:a1:d0:d1:03:08:ea:58:
8c:ac:a2:43:00:68:a1:23:5e:cb:d6:21:bf:e9:5b:ea:d4:f1:
53:a1:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:59:41 2026 by rpki-client