
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier: VjshqwUVvPPLlSlK/8Q0EQ9ycKQtdUu/PbaIMQIF/hs=
Subject key identifier: 89:81:13:2C:1D:3C:49:BB:E6:A1:91:13:E6:E5:2D:E4:3A:1E:E9:27
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 4E16A2AEBDBC5B55A5DB4AE63A7A7DD6447112C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number: 04E9
Signing time: Fri 17 Apr 2026 23:14:20 +0000
Manifest this update: Fri 17 Apr 2026 23:09:20 +0000
Manifest next update: Sat 18 Apr 2026 23:30:20 +0000
Files and hashes: 1: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
2: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
3: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: GzrdTake5t0OKWth4S/rVQ4o3ezmsUv08UKjAIRFSGU=)
4: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 23:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:16:a2:ae:bd:bc:5b:55:a5:db:4a:e6:3a:7a:7d:d6:44:71:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: Apr 17 23:09:20 2026 GMT
Not After : Apr 18 23:30:20 2026 GMT
Subject: CN=8981132C1D3C49BBE6A19113E6E52DE43A1EE927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:a7:78:09:17:c3:8f:85:56:9a:e4:f3:53:
ac:85:62:8c:1b:c4:e5:38:ee:e9:13:2e:47:8b:26:
23:8e:ce:e4:a2:0f:83:36:0e:d2:9b:98:cc:ec:24:
2e:fa:71:65:7f:68:92:53:7c:04:f5:57:7c:b0:84:
7c:6c:2c:d8:74:ec:a5:9b:95:4d:76:27:d3:78:38:
24:9e:c3:c6:b5:63:5f:25:fc:e1:31:64:16:91:9d:
87:53:a1:61:d1:c5:d2:42:37:4a:55:e2:f4:44:71:
75:21:66:40:9b:ab:42:5c:46:35:51:ac:5f:87:4b:
b8:14:5d:92:70:17:f8:f1:f3:be:6a:cb:3a:16:27:
63:c9:96:77:b8:0f:c5:c8:67:7b:60:c8:33:fe:48:
30:11:aa:68:41:b1:81:29:47:7c:00:20:dc:04:23:
ec:56:16:14:38:50:eb:f7:3a:be:94:61:0d:2c:1c:
d6:c2:4b:99:7c:39:28:32:a8:95:b5:63:b7:4f:6d:
c9:09:63:ea:5b:a0:96:3a:a8:ee:ad:31:3d:d2:10:
17:60:ce:c2:6d:93:11:65:67:13:c7:09:e2:76:79:
85:64:d5:53:f4:9c:2b:d2:c7:49:59:6f:29:9c:fc:
ae:39:dd:0b:a3:94:eb:d1:0a:34:39:27:6a:4d:5a:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:81:13:2C:1D:3C:49:BB:E6:A1:91:13:E6:E5:2D:E4:3A:1E:E9:27
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:42:30:48:f6:e3:18:9f:74:d3:9c:34:4e:5a:47:ad:96:fb:
51:40:41:d3:8b:4d:d3:58:e2:00:28:67:d7:79:4c:5b:53:0b:
c7:2e:a1:26:92:e3:15:e7:8e:1c:56:44:33:de:0e:bd:e1:bd:
e9:ce:c4:f5:8c:a6:97:1e:26:b2:58:48:bd:4b:a0:b5:5e:53:
5b:60:31:61:a9:a9:95:05:e3:ff:de:ee:98:61:42:e2:4b:00:
aa:ec:6c:83:22:3e:82:bc:87:6f:a5:76:62:63:e7:b6:e8:87:
3c:60:86:72:72:cb:a6:a0:eb:54:5f:0d:d9:34:8d:38:3d:16:
69:27:8b:5d:c0:58:9c:77:77:cb:e9:75:bf:f5:ba:7e:0b:ba:
63:cf:26:22:91:95:35:9d:b4:00:59:33:47:46:4f:b3:9a:35:
87:68:f0:8e:2b:35:5e:41:67:f2:b6:4b:fd:1f:29:2e:3c:6a:
63:79:75:95:ea:e9:5e:9e:17:4a:d9:76:62:d2:73:7a:f4:62:
39:05:9a:25:ed:55:92:48:f7:e4:e0:04:6d:6c:7a:6c:e9:2b:
df:ab:1d:cd:20:ac:07:c7:85:be:fa:48:b2:c0:c0:2e:1e:e1:
c1:a1:69:f1:ea:5e:e0:55:99:c4:3b:67:b9:0d:2d:26:c4:a6:
8a:1e:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:31 2026 by rpki-client