
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
File: 652C0199E6562FB6119E25923016982629C2108D.mft (raw, json)
Hash identifier: 3T5LjRnDbBpkvRTulBat6pdlDRPDYGfKo5bK5ZcNkP0=
Subject key identifier: AA:0C:0F:8A:C2:A6:82:D3:B3:37:E7:B6:7B:A9:34:D8:5F:C3:11:4F
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 5334AFBEEE699487D2725F77BF500D1E8EF3771F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
Manifest number: FE
Signing time: Thu 16 Apr 2026 11:27:51 +0000
Manifest this update: Thu 16 Apr 2026 11:22:51 +0000
Manifest next update: Fri 17 Apr 2026 14:28:51 +0000
Files and hashes: 1: 323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (hash: ZTuzUBd8F+6HeeOFmS8JC85pek1UrzJEnRIsKAeVglc=)
2: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (hash: kAoBY+HPJ+v2B5y0tTwW0KdPdiz3ZVlVKWhx52C/bb0=)
3: 323630323a663932613a653130303a3a2f34342d3438203d3e20313430393135.roa (hash: 2EGlmklKNEj2X3VAACc5ImzmapK/a+f/dwpE/uH21pE=)
4: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (hash: 33uUixA0uJZoNLjO6KgeYE3kw/aA7v5tf1atLI8laIQ=)
5: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (hash: EVy9CWEs34kEUh8TkA4Rmz3njW+txDVeXC4tnInrqdQ=)
6: AS198304.asa (hash: +rQdbqDMetYc7KkWOy7DXQ+dwSl7QVxC5ENne6yyO0o=)
7: 323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa (hash: YX1mxzfkZu8LGScEYjaMn4TI1hSQfjHgcc9tVmbWEew=)
8: 323630323a663932613a613434303a3a2f34342d3438203d3e20323032373334.roa (hash: 7xduKNxFnF4F+moKthO8GxxT77HpW4VFZLxpGPnwP2Q=)
9: 323630323a663932613a613437343a3a2f34382d3438203d3e20313339333137.roa (hash: gY/kBif7jhVfPZuIqYEp13QW/DiRe/GtQlvuralOCJs=)
10: 323630323a663932613a613437303a3a2f34382d3438203d3e20323038373534.roa (hash: JA+7vvkApnndXq6JQ4v/gpd5o6G7r0mhztl1imiG/Sc=)
11: 323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (hash: nHGY9JwHA1gV3ZB01r0NsQMlXvaKKqpqjnW3pCpd9Fc=)
12: 323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (hash: Jp73CAhT8X4qbMvWPriH8XdxbLv++q2700sN8D3HLOc=)
13: 323630323a663932613a613437613a3a2f34382d3438203d3e20323136303536.roa (hash: 0Pqy++OUhFsmQuylEZfhVLwMq0m790qyN5/JFrzL8g8=)
14: 323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (hash: QXjsuQCqZvo7gSFq8pe5a2qbRx0ksORhzu/TOa4aKlE=)
15: AS40929.asa (hash: 3MG84fVQYRe/C+dWPJVZUu9DZHCg7bFqzez+o5muoVU=)
16: 323630323a663932613a646561303a3a2f34342d3438203d3e20323133363035.roa (hash: d+oVpHutbFyQRry0VWAIg6yAHPeo2/Kc+Lvm+iA5ji0=)
17: 323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (hash: eYJ5D/9jy4JCP/LWnKkem2A6/sqvpj4yLievQ5xZkqc=)
18: 323630323a663932613a313331343a3a2f34382d3438203d3e20323034353138.roa (hash: +hGf1zwD/VOsHCtsdJm6vjqzA9Qar1hq3f+g1LScl20=)
19: 652C0199E6562FB6119E25923016982629C2108D.crl (hash: Z6hJymhDSAxUYbfJm1pE7NOqqFyomiflJ+40fvq1mAg=)
20: 323630323a663932613a3a2f33322d3438203d3e203434333234.roa (hash: F/3+/hcXQwWmQPT2L9BIEO/JJlFnHVZNoQMnNhm+tc4=)
21: 32332e3137352e32342e302f32332d3234203d3e203434333234.roa (hash: D17tZy0W46+eBaikW356HvxnGVw+z5QvhP9P2uKPsGA=)
22: 323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (hash: p2TAJ+SoheZVgt720I7qYK/LH2/2CMUTnLeIel9iBps=)
23: 323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (hash: 7bJdTrlT6VfYPtZ524N64q5rra/HSG/apOSRN+7RXaM=)
24: AS53808.asa (hash: WAEZrHuRhdK1Z36FrLyWoQXwLDK1zrdvX2vbKzmSJsU=)
25: 323630323a663932613a6330303a3a2f33382d3438203d3e203430393239.roa (hash: X4uCLc+QUi4BlYjs6hSIP26jH4L3kRKB3mx5SEMVmvs=)
26: 32332e3137352e32342e302f32342d3234203d3e203533383038.roa (hash: 3g+bm1Ov3KS4q8fCecAmN/EtcwCqqHTyfkZNmIpgPag=)
27: 3134392e3131322e3131372e302f32342d3234203d3e2030.roa (hash: wNF04zTzM01ZsoUyNOrqB+433Orn6dMaQ3nxpWytFbE=)
28: 323630323a663932613a613435303a3a2f34342d3438203d3e20323037363138.roa (hash: JLb25ZxSGp5EpQKaxM3hHQNAFbR478I5lY6aepa0XPQ=)
29: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (hash: 2HgLzd+gynGabzidkPluIBMAmXgeRg5AWmNASYFvWAg=)
30: 323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (hash: mTj4Kpj9skM4imBRREZv8jcja5D2jsvUqRlIxwoc3SI=)
31: 323630323a663932613a613437313a3a2f34382d3438203d3e20323131373239.roa (hash: BYOSvSzHK3d/aeAGCn7LrqqSyr0aELRrR6V1K4HBENw=)
32: 323630323a663932613a613437653a3a2f34382d3438203d3e20313530323839.roa (hash: 5jdaGtzWyEuE6pwfQTMlcahgSsIJf1oc0wSJrUGoFWM=)
33: 323630323a663932613a663030303a3a2f34302d3438203d3e20313430393135.roa (hash: HuKbQrOvcjKaYoy37BUB5dGKW0EZLAtznzlUcwdKtQQ=)
34: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (hash: 77eb0TAjk47MkAe5OX0t+bmIiF/5o238LUqAq2w/M6s=)
35: 323630323a663932613a613437663a3a2f34382d3438203d3e20343031383335.roa (hash: VR8n5OiM1XagsyzshXLRVRO8kZHjcaV2UvwohfY+qAQ=)
36: 323630323a663932613a613437393a3a2f34382d3438203d3e20323037353239.roa (hash: /qmxO62TEMzZ2vSC6btQrvhe0ZmEtLUcutZduW5u2X4=)
37: 323630323a663932613a3a2f33322d3438203d3e203533383038.roa (hash: 4FkS6cxLOa3BJuHaPuW7A4f2/YG2W6yW4OgbVOHPnHE=)
38: 323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (hash: t859eM/21Ihz32sEe0c1AsW78lvki7bEFnJsJ550pww=)
39: 323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (hash: BLqZYyTalxRWLkSRCH3NbfzX0BV/EB7yx8snEAYqCaA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:34:af:be:ee:69:94:87:d2:72:5f:77:bf:50:0d:1e:8e:f3:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Apr 16 11:22:51 2026 GMT
Not After : Apr 17 14:28:51 2026 GMT
Subject: CN=AA0C0F8AC2A682D3B337E7B67BA934D85FC3114F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:ef:e9:62:af:36:b5:b5:d6:c6:7c:ed:6d:
5f:5c:57:ad:e1:88:ee:ef:40:48:1e:46:ab:fb:b1:
40:82:af:1e:ba:28:54:1d:81:5a:4a:9f:b3:dd:55:
78:a3:c2:a0:03:07:db:9b:fe:10:16:24:fb:db:e7:
64:e5:a3:cd:68:4a:5b:52:cf:a9:75:64:78:31:0a:
5c:73:b0:bd:fa:c9:c0:17:7a:f9:34:2e:17:99:5f:
44:ec:e3:cd:e8:6b:8f:a1:e7:dd:a8:19:b0:a6:c7:
f3:1b:48:f3:95:74:57:17:61:8a:77:a8:7e:29:0f:
33:f5:b1:d5:1c:13:3e:1f:69:75:3f:ad:17:40:80:
10:30:d4:a0:bd:68:25:39:ea:b0:7b:89:dd:e1:84:
b3:f9:da:79:a2:e6:09:e9:c5:aa:d6:4f:48:09:0d:
65:7c:25:d9:4a:0e:66:d6:77:fd:94:30:99:14:6c:
8f:f8:9e:03:cf:5b:6d:6d:b1:65:95:b0:7d:8e:6e:
87:45:92:c8:41:52:ce:55:74:79:c2:0e:a9:a3:27:
c0:f4:3f:b2:12:d7:5d:81:62:ca:d9:72:cb:8f:f8:
41:18:7a:0f:f3:10:a0:0c:fb:9b:02:12:bc:de:88:
5d:ef:fa:0c:e3:76:c9:a9:16:f1:29:3e:f8:15:89:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:0F:8A:C2:A6:82:D3:B3:37:E7:B6:7B:A9:34:D8:5F:C3:11:4F
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:34:b1:50:f6:5f:2f:3e:f4:36:b5:7b:d9:7a:4c:b5:fb:
18:32:63:20:7f:46:9b:0f:8b:12:f5:3f:4b:71:a8:93:34:b7:
fb:b2:bf:12:a8:4a:3b:3f:21:c5:20:47:25:f0:1e:26:e8:e6:
a3:cd:20:4b:57:57:2f:1c:b7:43:b5:d2:e1:98:0d:3a:47:2a:
c4:b4:ef:a6:de:5d:73:76:43:62:f7:f8:d4:37:c5:69:b3:a8:
5e:a7:8e:33:87:b6:d3:32:1d:49:fe:03:de:bd:6d:0d:cc:f6:
41:cc:d6:b5:d2:2a:3c:35:03:43:ed:20:0c:c7:72:9c:93:64:
0b:ca:34:bc:c5:16:5c:2c:e6:09:ab:83:32:72:e1:ae:6e:40:
65:77:96:84:96:43:77:06:66:1f:55:db:e5:ee:62:6f:cd:f6:
37:af:7d:7d:12:d4:9b:8f:08:3e:2b:b4:a6:b2:0e:6b:5e:b0:
54:03:67:22:d8:21:0d:ad:0d:38:15:ba:e3:84:12:fe:5c:9a:
cb:20:50:e2:1a:a6:d4:a1:a0:89:5e:e7:99:cb:1f:92:24:ff:
dc:08:03:35:c3:63:8e:14:0e:92:f1:e5:3f:34:c3:28:94:8e:
61:c9:39:c3:da:32:bf:af:c5:6d:fa:3b:7a:7a:da:91:e4:12:
ef:2c:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:45 2026 by rpki-client