
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier: YFYxzJwA4tI87vmMQmZPps2Xu8L+g4BqIK17qunyqNo=
Subject key identifier: 18:87:ED:9A:83:22:F1:74:3D:6C:3A:7D:3C:21:79:75:FD:F2:63:FC
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial: 3637C175BE69F2DF0A5757A05ACB1C1AE5208BCB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number: 97
Signing time: Sun 01 Mar 2026 07:32:51 +0000
Manifest this update: Sun 01 Mar 2026 07:27:51 +0000
Manifest next update: Mon 02 Mar 2026 07:34:51 +0000
Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: W8aOBYEHKDDAP6s9vKlSDcb99/0YCDSCPJcBbsN/TVs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:37:c1:75:be:69:f2:df:0a:57:57:a0:5a:cb:1c:1a:e5:20:8b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
Validity
Not Before: Mar 1 07:27:51 2026 GMT
Not After : Mar 2 07:34:51 2026 GMT
Subject: CN=1887ED9A8322F1743D6C3A7D3C217975FDF263FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:93:7f:b9:6f:69:48:7b:6d:26:1f:a8:39:
89:1e:90:74:63:02:d7:c1:e9:e9:a6:dd:2a:8d:b1:
55:07:78:02:f7:4f:bb:b9:13:d8:d0:a9:b0:02:2a:
fe:67:6a:24:a0:38:02:ae:19:33:0c:00:62:3d:d7:
57:d0:92:84:ac:3f:63:e0:19:f7:53:92:d8:ad:32:
8d:85:f9:66:ff:8a:95:a5:38:98:2b:ac:5e:e0:94:
45:d7:40:89:6b:55:a4:98:de:9f:c8:ff:fc:dc:bf:
6c:ab:4d:b0:69:0f:1f:70:9a:eb:29:6a:20:c7:3a:
f8:60:f7:94:35:0b:23:8b:45:51:b2:22:73:72:a1:
28:26:ff:c0:77:bb:58:e4:07:f3:d6:c2:c3:12:4c:
35:72:7b:70:33:f9:0f:68:db:23:85:6f:2a:b0:79:
73:5c:67:a7:e4:57:f6:60:25:7f:43:e0:8d:10:c0:
b0:3f:6e:ab:b8:6e:b8:70:f1:db:e1:7b:15:fe:88:
a5:a4:26:51:12:56:12:a4:28:6e:e1:10:3c:20:38:
46:0e:4d:8d:d0:c1:50:61:05:55:de:f3:1b:b3:ad:
13:14:5c:f2:1c:d4:54:63:ef:85:8b:1d:d2:48:bd:
22:c8:30:96:17:80:74:e6:e7:16:d6:5c:34:fc:fa:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:87:ED:9A:83:22:F1:74:3D:6C:3A:7D:3C:21:79:75:FD:F2:63:FC
X509v3 Authority Key Identifier:
keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:65:ff:16:5f:e3:b8:ba:7c:59:0a:da:db:7f:31:11:ae:90:
e3:11:6f:b9:1e:73:f8:3b:24:8f:17:8e:5e:cf:75:6d:18:07:
59:40:8d:0e:f9:23:6e:76:f5:3d:56:3e:26:a7:b4:ee:4f:9e:
01:ad:f9:26:c1:6e:7b:76:65:27:62:e0:ad:38:fd:69:b7:0c:
91:4c:4b:28:96:1c:7d:e1:f0:05:1e:88:e2:d5:72:dd:e8:b3:
9a:88:c0:5f:6e:3e:be:32:ea:1a:96:e3:97:9e:eb:d9:c1:a5:
6a:f7:40:7b:b5:92:9e:4f:28:7e:40:6e:c9:86:be:08:96:27:
ff:f1:36:a9:36:fc:d6:c7:67:bb:73:a9:2d:53:2a:7b:d6:f4:
97:2c:4f:d2:78:08:f6:8b:3a:97:ab:72:5e:95:cf:c4:c9:b0:
ef:df:64:76:c7:6a:c7:ee:fb:d0:d6:4d:b4:cd:e7:df:9f:ef:
1a:7a:08:aa:eb:a7:f9:64:8d:b3:eb:57:64:72:6f:22:6f:00:
2c:cb:bd:9a:3d:7e:a4:de:df:79:d4:3b:db:3f:65:92:d5:ff:
c4:56:34:23:2d:31:aa:26:b2:b1:3b:2f:ff:df:54:27:f7:9b:
2b:d1:7c:9e:bf:0c:ff:44:3a:b0:ca:34:20:b9:a4:4b:44:10:
f1:af:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:39 2026 by rpki-client