
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: Jf0VzCrPmtIUgpfSfoTNYUJbT2LaHmEQkP1ngZvMjIo=
Subject key identifier: 6A:DD:8B:ED:18:CF:77:F3:B7:A1:F3:64:2E:6A:5A:11:E1:63:92:4C
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 0A50993E0168D24F701FABA1079FE09600FE6C44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 03BE
Signing time: Sun 01 Mar 2026 20:06:07 +0000
Manifest this update: Sun 01 Mar 2026 20:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:59:07 +0000
Files and hashes: 1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: cAj3Sc2Yf4hqZ9JEa50Emjy1b0I66TIzw4UanafKllM=)
2: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
3: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
4: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
5: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
6: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 21:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:50:99:3e:01:68:d2:4f:70:1f:ab:a1:07:9f:e0:96:00:fe:6c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Mar 1 20:01:07 2026 GMT
Not After : Mar 2 21:59:07 2026 GMT
Subject: CN=6ADD8BED18CF77F3B7A1F3642E6A5A11E163924C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:85:cb:70:45:39:97:1d:74:5d:42:87:41:
2d:01:6a:8a:1f:b9:93:cb:ab:a0:76:76:fd:d8:46:
95:97:eb:2e:5d:40:60:a0:b8:13:1d:95:ed:7f:8a:
bd:79:8b:9d:a8:7c:fc:63:0a:81:f3:5c:ba:f4:06:
c5:29:d4:3f:fa:74:06:da:97:c6:75:e0:fb:ea:0f:
7c:13:39:b3:31:d0:87:2c:51:49:62:b3:3f:13:c7:
35:7c:1e:85:bd:c3:2d:2e:b9:20:08:24:ce:b3:bb:
40:80:1b:45:ff:51:c0:36:82:f3:61:e6:95:ff:10:
b5:d0:3a:df:ee:56:ac:b6:6e:b8:90:4f:72:bf:de:
83:4a:dc:03:9a:60:73:6f:cc:dd:f8:09:68:62:39:
7c:f4:a2:01:b4:5c:44:64:f1:61:7f:62:60:aa:84:
83:c9:61:2f:eb:28:93:f9:3a:e9:62:43:ae:6d:44:
6d:8f:7d:66:84:86:e7:07:60:28:c7:f9:02:93:1d:
ca:8f:ca:9f:68:3e:de:5a:b7:53:22:de:88:1a:e7:
b0:25:17:16:7b:27:52:4b:1c:64:12:ca:39:ea:9f:
26:38:27:65:eb:72:63:5c:67:ce:e9:c0:df:73:a0:
a4:2a:82:54:29:97:36:66:74:fd:e8:d5:b9:e0:8d:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:8B:ED:18:CF:77:F3:B7:A1:F3:64:2E:6A:5A:11:E1:63:92:4C
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:99:53:67:32:fd:46:5b:da:4c:b3:d1:77:82:92:b0:a0:0d:
2c:22:ab:41:70:d5:05:1c:8e:8e:84:0b:fb:2e:70:19:97:31:
9c:e0:5b:9a:5e:f7:d7:89:1e:73:46:09:0f:d2:22:77:9e:7f:
b7:f4:52:cf:b1:86:91:ba:d6:f9:ce:1d:b4:86:7c:e2:aa:74:
93:e3:92:f2:20:4d:e6:54:c6:8e:89:02:dc:f7:04:76:5a:7c:
b8:dc:33:bc:c5:94:17:22:c2:3a:f3:35:5c:ae:05:d0:5b:83:
07:dd:89:11:b0:ed:d7:fd:49:98:7c:1a:72:e0:69:cc:a4:7c:
30:f4:0e:c2:33:16:7c:bf:67:a4:61:60:e8:c7:24:54:6b:80:
1b:14:0b:23:70:2e:a9:85:ed:2a:66:dd:6a:ae:7d:bf:37:26:
d6:0b:61:50:d3:dc:c0:56:66:36:de:3c:14:d1:b3:38:73:36:
32:d9:d3:0a:d0:3d:26:b5:16:d5:85:31:5b:40:ff:e6:bc:e9:
f4:d6:73:fc:18:2a:c3:2e:76:9d:4f:df:d9:bc:c5:bf:82:da:
f2:5c:6b:d6:e5:1b:57:fd:3f:aa:93:2d:3e:fb:08:41:fa:f6:
a8:2d:b2:4b:c6:66:12:86:40:1f:73:bb:40:9e:c8:5a:4f:13:
8a:11:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:07 2026 by rpki-client