
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: qsuPMZwzpGsdiq5aec95Kx8yRqmNxei5tDNEr+z6RZ4=
Subject key identifier: 7A:D4:DC:C8:71:83:78:55:97:5E:C4:BF:96:DA:46:29:DB:98:D8:16
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 01C3874E984D466E81F07B421D597D3174F4CCAE
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: A1
Signing time: Tue 28 Jul 2026 15:48:07 +0000
Manifest this update: Tue 28 Jul 2026 15:43:07 +0000
Manifest next update: Thu 30 Jul 2026 15:48:07 +0000
Files and hashes: 1: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
2: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
3: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
4: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
5: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
6: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
7: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
8: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
9: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
10: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
11: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: KkrsBysqekAwTIysiizy2jYPmv0Nfr8nU4S1n3iOuUU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c3:87:4e:98:4d:46:6e:81:f0:7b:42:1d:59:7d:31:74:f4:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Jul 28 15:43:07 2026 GMT
Not After : Jul 30 15:48:07 2026 GMT
Subject: CN=7AD4DCC871837855975EC4BF96DA4629DB98D816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4b:6b:04:67:0f:2d:2b:a0:ff:52:a1:9a:e7:
eb:9c:7a:7c:78:9d:31:6a:02:5d:84:4c:e6:63:73:
df:aa:5d:f0:ec:f2:e5:5d:3a:ba:ec:46:f7:91:6a:
e8:f1:b6:c8:82:26:e3:ef:83:d0:fb:a0:a1:c7:f4:
94:2b:5c:ef:91:2b:d6:32:84:7b:9e:49:03:e3:06:
05:a5:b9:7b:11:ff:1a:50:17:b9:fa:12:87:86:9a:
4e:bc:5a:d2:e9:b9:d5:bf:31:67:10:df:cf:60:26:
e6:0e:41:f8:7e:89:8f:cd:40:56:96:6e:a0:a3:e1:
30:80:c7:92:c6:1e:0b:8f:fd:25:ff:a8:35:b1:f7:
61:5d:94:88:69:cf:53:cb:76:b5:f2:bf:92:ce:3a:
20:47:ca:f3:d7:81:52:20:02:ee:ff:bd:f1:b8:53:
d4:eb:e4:5a:a9:52:28:15:29:85:24:31:8d:b8:e9:
12:65:78:52:ef:58:8e:15:77:cb:15:e1:50:8d:6e:
72:1a:fa:00:aa:52:0d:15:66:a1:0e:65:7c:ac:9b:
e7:09:73:6b:90:86:53:7e:7d:26:c3:de:94:74:81:
c7:4e:aa:1e:f7:17:59:0e:4d:7a:95:b6:17:6e:e3:
54:a7:c6:11:01:88:cb:56:0a:13:86:dd:e7:25:e0:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D4:DC:C8:71:83:78:55:97:5E:C4:BF:96:DA:46:29:DB:98:D8:16
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8a:81:87:4a:c2:e3:ff:d8:1f:9e:0e:08:ec:71:61:05:6c:
2c:de:fd:24:0e:92:f8:ff:f8:24:2d:c4:2e:87:e1:4a:cd:83:
ca:8a:2b:9c:a4:43:3d:b3:aa:df:31:96:fb:cf:27:93:1d:a5:
ab:17:1d:83:4d:09:dd:53:1f:57:64:b1:b8:0c:5f:68:cb:d6:
c5:78:66:25:17:b8:4e:2e:12:27:3c:65:42:c1:7f:49:ef:3a:
d0:12:1e:bf:3b:36:14:ff:da:e2:3b:a8:0f:b2:0a:63:b3:c3:
9f:ee:b6:b5:b5:cc:ca:d5:f8:17:01:3e:63:b2:22:ed:c1:15:
77:97:a2:7e:0f:9b:94:0b:4b:e3:ff:2d:09:bb:23:d0:12:55:
d2:dd:bc:e3:db:e3:97:0b:50:fc:ba:b3:36:bf:3c:d2:ec:0c:
20:c0:29:a4:ab:69:e9:aa:e3:22:5e:5c:00:f5:46:3b:6a:8c:
41:0e:b2:21:72:10:c8:d9:10:df:9d:ff:3f:4b:90:ac:76:20:
0b:76:ed:a7:35:cd:a6:fc:f6:5a:31:78:e7:9a:93:34:9b:b5:
a7:7b:03:ad:0b:b9:96:ef:02:b1:cc:5a:79:d3:3f:57:7a:a5:
da:65:49:55:28:e4:a3:3a:1e:a3:33:5f:27:66:6a:4d:da:1f:
07:1b:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:26 2026 by rpki-client