
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: vDs6TRiuZc71tM/6WfshCz0T5NugTggtuE/D3WqlCXM=
Subject key identifier: B6:E5:69:3A:33:EA:F4:FA:40:53:A1:88:C9:59:E0:56:A5:EA:CE:36
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 37DB1ABC0B6B5F66A7B274037BF1FBEF8009FAA5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 03FB
Signing time: Fri 17 Apr 2026 02:59:19 +0000
Manifest this update: Fri 17 Apr 2026 02:54:19 +0000
Manifest next update: Sat 18 Apr 2026 06:37:19 +0000
Files and hashes: 1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: 5rKeaVrffMdfEvfvTDqQPERgQ1QeuO36RIlpZMEKJok=)
2: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
3: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
4: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
5: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
6: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 06:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:db:1a:bc:0b:6b:5f:66:a7:b2:74:03:7b:f1:fb:ef:80:09:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Apr 17 02:54:19 2026 GMT
Not After : Apr 18 06:37:19 2026 GMT
Subject: CN=B6E5693A33EAF4FA4053A188C959E056A5EACE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:e2:95:a3:ab:80:4c:fa:e9:ef:e2:74:09:
ce:59:79:63:d3:89:ed:d4:48:e9:0e:b8:60:4a:7a:
a2:78:eb:e1:46:fa:06:6e:76:c7:ce:68:87:d1:34:
30:b3:3f:0e:9a:f6:f7:f0:6a:81:2c:65:27:cb:16:
62:79:ee:4b:17:25:50:0e:88:9a:7a:bc:b6:38:d0:
6c:9f:aa:5f:45:1d:53:b0:7a:35:e6:f9:26:06:99:
e7:a4:21:e6:df:ea:f4:14:c7:18:fb:ac:17:0f:db:
bb:e1:71:5a:aa:4f:a4:b0:01:79:d5:78:b9:ba:39:
27:76:9b:1f:7a:61:f5:ec:80:6b:a6:62:02:01:46:
4f:67:e3:41:8d:3c:63:aa:52:dc:66:65:6e:d8:a6:
c9:f4:db:1a:c6:f1:86:7e:3e:bc:50:7e:6b:78:04:
07:71:c0:1d:c9:d0:23:3e:74:be:53:1f:37:72:cc:
3f:d0:f1:57:13:da:20:bf:2a:ae:17:ee:22:e2:6b:
a8:c8:2b:44:b5:6d:2e:a2:ba:05:da:10:c5:9d:7e:
75:79:4b:74:a2:4e:95:40:35:e3:d0:8b:7f:bb:7d:
4e:63:53:00:b3:fe:b4:3c:bc:ab:e8:96:fb:5c:92:
a1:fd:41:aa:b6:df:7c:da:41:84:2a:dc:00:74:68:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E5:69:3A:33:EA:F4:FA:40:53:A1:88:C9:59:E0:56:A5:EA:CE:36
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:97:90:c9:b0:46:1c:85:30:e4:7a:ce:c7:10:af:43:6f:
0d:57:81:13:bb:43:63:c7:b9:01:b4:50:ee:da:d1:8b:17:95:
62:18:47:01:be:3d:69:0a:af:cb:f1:e4:50:01:cd:e9:8c:fe:
a7:10:72:39:bb:52:a5:d2:66:17:90:40:7b:55:f9:23:be:bb:
6b:4c:ca:7d:2a:74:61:7c:41:dd:97:65:ba:40:c7:b5:40:bb:
06:2b:fa:e2:bd:2d:ea:ae:82:03:a4:07:5a:83:f4:4a:d9:76:
39:e3:aa:6c:24:b1:b9:4a:24:bb:87:ea:98:c0:84:85:d6:09:
b2:ab:7b:b9:a4:96:14:d5:1c:c0:e4:8b:72:b1:a9:49:f7:01:
ac:44:f2:48:3b:38:85:8f:80:03:29:6c:b7:81:f3:a7:d5:03:
54:e2:6f:86:ee:24:d0:be:9c:d9:32:90:f2:50:8d:34:18:1e:
f0:e1:2f:93:41:1e:ff:25:49:23:9d:53:43:0f:1f:0d:03:f3:
e0:3d:c7:d5:bf:d1:98:1e:f6:e1:7e:cb:40:fa:11:3f:bf:1d:
07:f9:c7:f7:67:93:a7:6b:5a:aa:d2:06:b6:bf:a9:76:2d:f8:
8b:1c:1f:e9:eb:c2:13:5f:a4:b3:37:b1:45:8c:16:f2:36:67:
00:69:ea:42
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUN9savAtrX2ansnQDe/H774AJ+qUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5
YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjYwNDE3MDI1NDE5WhcNMjYwNDE4MDYzNzE5
WjAzMTEwLwYDVQQDEyhCNkU1NjkzQTMzRUFGNEZBNDA1M0ExODhDOTU5RTA1NkE1
RUFDRTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o7ilaOrgEz6
6e/idAnOWXlj04nt1EjpDrhgSnqieOvhRvoGbnbHzmiH0TQwsz8Omvb38GqBLGUn
yxZiee5LFyVQDoiaery2ONBsn6pfRR1TsHo15vkmBpnnpCHm3+r0FMcY+6wXD9u7
4XFaqk+ksAF51Xi5ujkndpsfemH17IBrpmICAUZPZ+NBjTxjqlLcZmVu2KbJ9Nsa
xvGGfj68UH5reAQHccAdydAjPnS+Ux83csw/0PFXE9ogvyquF+4i4muoyCtEtW0u
oroF2hDFnX51eUt0ok6VQDXj0It/u31OY1MAs/60PLyr6Jb7XJKh/UGqtt982kGE
KtwAdGi0pQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLblaToz6vT6QFOhiMlZ4Fal
6s42MB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3
LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB
QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It
NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k
YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw
Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz
QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFLzl5DJ
sEYchTDkes7HEK9Dbw1XgRO7Q2PHuQG0UO7a0YsXlWIYRwG+PWkKr8vx5FABzemM
/qcQcjm7UqXSZheQQHtV+SO+u2tMyn0qdGF8Qd2XZbpAx7VAuwYr+uK9LequggOk
B1qD9ErZdjnjqmwksblKJLuH6pjAhIXWCbKre7mklhTVHMDki3KxqUn3AaxE8kg7
OIWPgAMpbLeB86fVA1Tib4buJNC+nNkykPJQjTQYHvDhL5NBHv8lSSOdU0MPHw0D
8+A9x9W/0Zge9uF+y0D6ET+/HQf5x/dnk6drWqrSBra/qXYt+IscH+nrwhNfpLM3
sUWMFvI2ZwBp6kI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:57 2026 by rpki-client