
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: aBHAwPa2AppRaWQi57Xfkl34fy+BX+nAbKdt1qs790w=
Subject key identifier: 9D:50:5F:E2:A4:9D:A5:FC:7F:10:1C:4E:E3:7E:ED:A3:6F:5C:B1:09
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 14A1E657C5DC187CAF8CCF4B5DA378F35AED5B52
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: 5C
Signing time: Sat 18 Apr 2026 02:23:04 +0000
Manifest this update: Sat 18 Apr 2026 02:18:04 +0000
Manifest next update: Mon 20 Apr 2026 02:23:04 +0000
Files and hashes: 1: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
2: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
3: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
4: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
5: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
6: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
7: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
8: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
9: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
10: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: IqGzxJ67mwFq1ZCJVsx/qrI7GT7WZLy4k4mHXmxlK+0=)
11: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:e6:57:c5:dc:18:7c:af:8c:cf:4b:5d:a3:78:f3:5a:ed:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Apr 18 02:18:04 2026 GMT
Not After : Apr 20 02:23:04 2026 GMT
Subject: CN=9D505FE2A49DA5FC7F101C4EE37EEDA36F5CB109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:c2:c5:a8:54:13:37:87:2f:5d:6f:8e:72:
c9:e2:bf:46:cb:de:3d:dc:ab:ed:3e:07:fb:1a:7c:
cf:db:37:9b:f2:ec:1e:16:fb:a4:40:a8:b8:3a:4c:
f4:22:21:ab:25:65:27:96:85:4e:e5:e3:ee:9d:e8:
57:f0:81:93:23:06:0f:2c:26:82:29:01:e3:42:f2:
fe:85:cd:b5:b5:66:f2:09:7e:24:3e:75:db:41:55:
cc:a5:dc:85:3c:62:bf:41:81:0c:49:9d:c4:d1:ad:
31:2b:96:de:dc:6c:33:3b:fb:32:11:17:cf:b2:14:
62:6d:3c:7c:70:1d:1b:a5:8b:de:30:bf:aa:67:6b:
a3:83:af:e2:cf:29:a6:4b:2c:2f:2c:c4:40:44:b0:
ad:e0:ba:1c:6c:2e:37:46:3a:31:86:ec:fc:c1:b0:
2a:09:6d:bf:38:81:1e:ca:72:0a:b9:38:04:51:21:
28:ba:b4:ac:2e:f0:da:06:19:79:e2:e6:8e:63:1f:
43:5f:32:a2:6e:87:2f:2d:31:ef:94:2b:9b:b0:e0:
21:72:47:e5:76:45:11:6c:c9:19:23:80:bd:32:73:
a9:9f:4e:b8:16:68:cc:4a:58:49:39:2b:b9:9f:29:
85:24:27:5f:5a:7e:bb:9f:0a:33:fd:a7:cc:32:e1:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:50:5F:E2:A4:9D:A5:FC:7F:10:1C:4E:E3:7E:ED:A3:6F:5C:B1:09
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:52:d8:39:2d:39:cb:36:d2:32:2f:d7:ba:45:65:7b:21:c3:
f2:9f:58:b7:30:83:37:40:d6:d3:55:27:ed:ac:b5:28:0e:5a:
b2:fa:1f:72:33:97:d0:43:0d:f0:ca:cf:7f:f6:f5:b5:f2:54:
8d:ee:6f:16:80:8a:bc:50:b8:e6:8f:16:7f:54:5e:93:5a:7b:
02:22:9a:50:d5:da:4b:0b:b6:d1:6d:e0:fb:36:16:7e:56:ab:
eb:e5:e2:e4:bb:25:57:8b:51:7f:30:7a:a4:be:16:fb:a1:81:
35:d4:76:40:7f:be:0e:4b:e6:11:4c:c8:b7:fb:93:73:d7:fa:
2c:71:6f:47:26:7b:59:ce:da:33:da:a0:44:11:5d:66:20:ed:
c8:ff:f9:ef:16:96:46:9e:a2:85:f7:51:cc:8f:7c:60:91:98:
f3:75:d9:a4:5c:97:59:f8:24:b1:3c:d0:12:8d:87:49:e5:53:
ea:9e:fc:2b:92:87:bb:87:8a:c7:5c:3b:f0:26:c7:e4:f6:d0:
dd:77:e5:98:e3:bb:f2:15:e4:74:aa:1f:39:19:eb:cb:50:7a:
44:cf:66:fd:fd:1a:f7:93:d7:fd:29:0d:2d:3f:e3:00:61:9c:
20:d4:f1:a2:8c:a0:0d:00:a6:01:51:a1:51:e9:73:43:30:3d:
9f:b5:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:18 2026 by rpki-client