
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier: ShYkEk9np1iTllFEnyLixILVVrRPVcbUi+C8+dv9z7A=
Subject key identifier: 18:98:37:C1:C8:48:CC:A2:75:67:E1:AD:33:3F:75:75:44:58:B3:7E
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 7FDAF5F31BA1CAE1C29107982B4643EF7C7F5980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number: 3EAE
Signing time: Tue 22 Sep 2026 07:12:47 +0000
Manifest this update: Tue 22 Sep 2026 07:07:47 +0000
Manifest next update: Wed 23 Sep 2026 08:25:47 +0000
Files and hashes: 1: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: wWs8ib9AxdStlITj+fRhlFovwHg1pfm3ljVihr6bW+k=)
2: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: iEqw6oJFOmidQ4uO2TC0uMGKQbiMPYv6XpkzxfqW6/I=)
3: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=)
4: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: aPsopjlXsO9PjZXI0aAo9bHjjiesxBjYYeoVF6XSASU=)
5: 323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa (hash: VOrAFxco2wif90ptN+7JtyQbdIcEhDu8JRBfxWeM5AA=)
6: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=)
7: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (hash: ZqVNXzi+RxnP2gAp/IhyHOF5/qmgOKGR7WPfV3jMwnQ=)
8: 323630323a663939323a64313a3a2f34382d3438203d3e203230343733.roa (hash: 2w2powaZlQJtb8QkEXb0ohWSFkr6EssBYE5641X43+A=)
9: 323630323a663939323a66383a3a2f34382d3438203d3e203236323836.roa (hash: znzq1JNqY7nwa0VK1203olEAlMeBqmP7Bua598HbZwY=)
10: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: dfiSzAj0dxIHRnbrV3sYNv7QdmVgZOpy7/5qQbU3b3U=)
11: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: K8umBIyysIyTKzGAPqQYfyOuH8+F5WnTKQ7wEtfjocE=)
12: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: s+c+vU3waXUiNwSnK1Npss1KDfBtJGbDf5gLD4ryzVI=)
13: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0=)
14: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: dhvuFNP+dKjaylM9bJGDtxRtOBzy7kE4O1dRl7JrhAc=)
15: 323630323a663939323a62303a3a2f34342d3438203d3e2030.roa (hash: 7NmmEvA5OxLCgc1HX461LiLWtFz8UfSVNBj0uTzj9Mw=)
16: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: Jp0C0pT8pWJqRBdKs6Z8Yx69PQ+TPEU5WL+UawocJjE=)
17: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: YYf0/nCM78+V7tIM0LmBS6Dvc8Dkds5cV7+r3azqm7c=)
18: 323630323a663939323a66633a3a2f34382d3438203d3e2030.roa (hash: P0Wxd7YHxu1Ww7VvfRSNOiu4DOsQueuhZO3fCro/WXE=)
19: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
20: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: YcD6OJ+CkZWZoPFilNIvkHcy621Zn+qrN1B3xkNtwQc=)
21: 323630323a663939323a66643a3a2f34382d3438203d3e2030.roa (hash: l9MHeHwPWDpfcYYZeuJdPzAITqqbSJxHyHz6Xc6Iztc=)
22: 3230392e3136332e3130352e302f32342d3332203d3e2030.roa (hash: FKbwQeudM+xj3ZmHz0Rd3chH8oOM/OG/CAqhkbAOwiU=)
23: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 08:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:da:f5:f3:1b:a1:ca:e1:c2:91:07:98:2b:46:43:ef:7c:7f:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Sep 22 07:07:47 2026 GMT
Not After : Sep 23 08:25:47 2026 GMT
Subject: CN=189837C1C848CCA27567E1AD333F75754458B37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:61:e4:2d:f7:a1:ad:f2:f4:e1:e7:8b:33:
76:e2:1c:24:71:90:f8:e8:22:8b:11:08:3f:43:f3:
b3:8e:81:cf:37:7f:75:f4:a6:bc:b9:d7:77:19:e9:
0d:50:97:c2:fd:f5:ba:e6:83:d0:5c:e6:7e:82:f2:
2b:ac:0b:56:d8:b1:09:d9:06:95:18:d0:c8:c5:83:
92:04:a6:bb:1d:7e:7b:49:e8:6c:13:03:34:a0:c0:
ad:dc:ae:4d:51:fb:e6:2a:6e:d8:ba:ec:4f:ff:f4:
a3:49:07:dd:3a:db:22:ec:02:82:9d:af:a1:2f:66:
59:a1:5e:be:fd:d5:c0:82:c1:cf:35:1b:cb:b0:5f:
36:ab:43:10:38:e5:15:09:6a:89:86:b4:43:12:c0:
88:5f:6a:64:09:5f:c0:02:9f:ab:b0:4f:90:ef:1b:
66:ae:68:9a:8d:b1:b4:42:94:99:ff:b9:ff:74:c8:
3a:6b:32:b6:15:82:95:68:28:d1:ca:ae:df:10:e1:
dd:ae:d9:ec:53:78:26:59:c2:81:16:e4:cb:c4:b7:
68:80:17:55:0b:2b:17:e7:cb:d9:52:17:60:b9:10:
cc:0d:16:23:ed:36:e7:94:58:23:45:d4:29:06:6a:
45:e9:b4:ff:0f:06:c8:94:c5:6f:ec:ee:a8:c9:eb:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:37:C1:C8:48:CC:A2:75:67:E1:AD:33:3F:75:75:44:58:B3:7E
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:35:09:4a:ab:02:8d:b3:f1:51:60:e5:bd:59:54:07:5c:
2b:9c:06:6d:9a:c1:2c:83:d3:94:17:4e:5f:9a:f8:f3:32:e9:
85:1d:50:4a:a8:34:27:72:8f:f6:22:68:17:3f:c1:4c:30:f1:
3c:3a:b1:a2:cf:4a:2f:28:4e:e2:30:16:e6:3d:0d:38:c4:46:
3b:9a:72:7b:b4:14:c0:0a:c9:31:f2:24:6d:b1:73:2a:04:4f:
fe:3e:8e:85:f9:43:5f:53:ae:6b:64:9c:80:5c:8f:8b:be:5f:
b8:87:c9:8f:96:b0:0e:10:fe:5e:b5:31:fc:14:1e:9b:15:a9:
cf:64:a4:12:0d:28:a1:6a:1b:59:b1:42:f2:aa:1e:70:22:95:
71:50:69:7f:18:cb:8b:83:b1:48:31:eb:d2:43:a5:40:65:aa:
19:80:f0:56:bf:39:db:e7:53:bb:41:05:cb:ee:7e:0b:76:8a:
83:5f:80:e8:db:bd:45:34:a7:b4:3e:a3:f4:53:fd:38:ab:87:
3b:d4:55:50:98:1a:8a:bc:b3:98:37:bf:8b:db:67:d4:32:20:
d6:b8:b3:7c:24:df:54:d0:39:6d:4a:ec:8d:6c:d0:06:05:9e:
d2:17:2d:02:8d:5e:e7:86:85:06:25:f0:87:1f:3d:7b:6b:8d:
69:04:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:35:02 2026 by rpki-client