
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: oqD4ueqqfyLqZTqsgo/MXL3JvNm+/myKjK01YqVXljs=
Subject key identifier: 3E:41:C1:1F:4C:11:1A:7E:B2:CB:F0:74:2F:83:49:56:E6:D0:C3:86
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 063AF35884318612D4AABE2245729AEC9F796E4C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: 3C
Signing time: Sun 01 Mar 2026 01:23:04 +0000
Manifest this update: Sun 01 Mar 2026 01:18:04 +0000
Manifest next update: Tue 03 Mar 2026 01:23:04 +0000
Files and hashes: 1: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
2: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: WlD7iY/lS6RlNBZHjY+5fpJodbcaIgz4rF54zg+1AvI=)
3: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
4: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
5: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
6: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
7: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
8: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
9: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
10: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
11: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3a:f3:58:84:31:86:12:d4:aa:be:22:45:72:9a:ec:9f:79:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Mar 1 01:18:04 2026 GMT
Not After : Mar 3 01:23:04 2026 GMT
Subject: CN=3E41C11F4C111A7EB2CBF0742F834956E6D0C386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:cf:79:84:3b:37:b9:5b:23:fa:de:bb:e3:
ac:3b:53:20:b2:36:3c:d6:25:0b:a8:27:be:d5:80:
e5:a1:5e:66:16:21:65:3a:ab:62:98:24:87:ca:aa:
9b:70:68:c2:19:86:bf:cd:56:9e:56:a5:89:5e:b2:
04:9f:7f:da:3e:17:b1:65:d2:7e:b2:a1:f6:39:bb:
33:0e:ab:db:9b:84:58:75:0d:15:94:42:17:7f:0b:
31:86:e4:ea:c2:ea:e8:a7:82:a9:02:22:86:c8:3a:
2f:1b:bd:2c:0a:c2:4d:6e:f1:26:37:b1:64:6d:ad:
a7:5b:ad:93:4e:72:cf:ef:19:09:33:fc:47:89:48:
61:31:0b:9a:75:9d:5e:be:b7:4f:5e:fb:38:3e:ae:
de:84:e3:a8:97:8c:fb:73:52:03:78:74:12:a9:52:
07:32:8b:b1:d2:61:d2:e0:ea:80:65:15:12:fc:30:
e7:4d:0e:17:98:84:9f:e1:c6:f6:7c:50:11:c0:b7:
36:0e:f7:c2:49:e3:f5:a6:62:42:b2:4b:1d:35:dd:
a5:46:10:7d:6c:16:2c:bc:9d:f6:bf:78:14:7a:44:
e9:4a:f3:ff:a8:fa:9d:ba:ae:aa:d8:d2:a7:33:27:
3b:7b:51:b2:c0:dd:5d:60:4e:8d:ca:d2:7c:33:8c:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:C1:1F:4C:11:1A:7E:B2:CB:F0:74:2F:83:49:56:E6:D0:C3:86
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:41:55:69:8e:65:34:b6:96:56:ab:ad:ba:b0:14:b4:56:
85:35:a8:f8:1d:fe:f2:9a:c3:42:db:0f:24:20:cd:6f:9d:a4:
04:52:d6:98:72:f2:c8:8e:18:6e:04:ee:b1:39:25:dc:f2:de:
a6:04:84:40:a5:4c:f4:a6:16:67:f6:46:80:df:64:a5:b2:40:
fe:01:a4:75:69:bc:76:8d:89:f8:1b:db:31:0f:17:39:92:e0:
b3:ed:03:a8:ce:db:ee:2d:9c:e6:52:04:cd:e1:68:c4:5e:5d:
20:5e:e8:c3:80:ab:a6:c9:62:b8:71:76:b5:d7:c0:b9:c6:0c:
04:ee:16:5c:db:35:aa:54:c1:b9:67:76:ba:b1:ec:c5:d2:3c:
52:7e:c5:43:65:b4:25:55:75:71:a6:16:1e:ea:f5:b0:e4:0f:
b0:52:84:66:bf:7c:15:78:5b:98:2a:c7:6c:d2:16:60:bb:92:
06:11:91:42:f4:8c:5d:54:35:d4:4d:4d:0c:73:f9:20:c8:14:
1d:ed:88:f6:88:b2:37:63:89:13:ff:ad:78:90:d4:21:89:57:
46:a5:f5:84:a4:45:e2:48:61:a4:64:c3:a0:54:10:b2:6c:f0:
38:6d:75:cd:1e:92:89:3a:22:9c:2e:24:d5:75:b8:c7:aa:f2:
19:63:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:06 2026 by rpki-client