
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: 3H7RLQWeTzn4d4nJiwq6VqDqIdNBepj3X2Mh8bic6i0=
Subject key identifier: 8D:84:1C:95:0B:E4:F0:F3:E8:23:DA:FE:13:17:BB:28:8F:92:AA:99
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 6814BF49C4A8E91165832F9EE93ED2A53D571A6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 04D8
Signing time: Tue 22 Sep 2026 02:14:21 +0000
Manifest this update: Tue 22 Sep 2026 02:09:21 +0000
Manifest next update: Wed 23 Sep 2026 04:58:21 +0000
Files and hashes: 1: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
2: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
3: AS46766.asa (hash: ua/Tuq8s2dVClQnst6QnXutcZ+HLjsMGe70Yt0Tr1SY=)
4: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: m+jaMkxe08hb//5laroeDw4SvqtcxrXlJLqyKSQJRy8=)
5: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
6: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
7: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: rYuzWBFkpPP6SLb5p6LhiTn/0eA8j7jFtIQiVWPeNGQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 04:58:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:14:bf:49:c4:a8:e9:11:65:83:2f:9e:e9:3e:d2:a5:3d:57:1a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Sep 22 02:09:21 2026 GMT
Not After : Sep 23 04:58:21 2026 GMT
Subject: CN=8D841C950BE4F0F3E823DAFE1317BB288F92AA99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:15:b1:77:59:d9:ab:b8:52:5d:43:98:13:
03:06:6c:db:a8:8a:29:99:4f:43:a4:b9:1b:5d:a7:
64:23:39:99:0e:87:be:b7:00:e0:1a:a5:a1:b9:e1:
b8:8f:4c:85:a8:ad:ee:05:68:3e:67:5f:59:60:58:
2d:fc:43:31:9f:ae:5c:32:a6:72:b1:e5:de:b4:53:
82:1d:88:7a:a0:b6:18:a7:e9:59:cc:6a:7b:4a:8b:
84:86:62:72:d0:52:27:78:57:de:90:7e:41:82:f7:
49:12:12:4f:08:db:05:55:53:44:68:0a:74:60:b9:
f6:30:8b:e4:1b:a2:ee:67:fc:3e:dc:14:82:6e:a9:
8a:65:38:40:b2:58:37:9a:56:1e:20:50:8a:77:9d:
e1:f0:01:a4:7f:10:84:f2:ed:45:e9:71:af:0b:91:
2d:09:0a:f5:f1:b5:86:bc:66:05:fb:0b:59:99:e6:
70:7f:b2:71:4a:1c:59:e1:bd:b1:8c:66:e4:0b:23:
ce:5d:04:da:0d:a0:a2:b9:79:c3:44:92:4e:7a:e9:
62:54:65:e9:f0:be:99:cf:b2:b7:a7:56:ed:28:a1:
18:c6:78:9d:69:2f:8f:40:fb:d8:9b:a9:56:e2:c9:
f8:b4:52:71:7d:1c:6f:09:da:06:ca:b4:bc:1a:b9:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:1C:95:0B:E4:F0:F3:E8:23:DA:FE:13:17:BB:28:8F:92:AA:99
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:35:c5:29:e7:ac:84:59:76:1c:9c:5f:78:9b:30:4c:2b:e9:
53:30:59:4f:46:68:bf:a6:30:62:f4:1c:bb:9b:8d:0e:2a:db:
bf:6a:1f:5b:9a:ef:a5:ea:ec:41:0b:35:ea:82:32:19:d4:94:
20:63:b9:8f:9c:18:31:f2:01:45:3b:c3:40:92:f8:d5:6b:32:
7c:7c:dc:42:4b:a2:09:9b:cd:c9:74:e4:9e:a3:b7:5f:99:33:
e7:e2:d9:65:db:32:3a:c5:eb:13:e0:93:fe:50:79:30:e7:18:
d2:df:64:36:66:e9:a7:63:94:87:c2:d7:24:16:29:7d:33:3c:
a7:78:c1:1b:e3:e8:d3:bd:6b:7b:dd:84:3d:e1:13:e5:62:a2:
47:20:66:61:cf:14:4d:89:73:c1:76:f7:d2:ae:d3:c3:79:c4:
10:08:7a:ab:cd:51:7a:2d:c5:8a:49:e5:c5:90:e1:a0:be:e9:
ea:e7:54:8b:3b:6b:d3:22:32:36:82:1f:66:07:34:88:7f:7e:
b8:9e:30:09:d3:77:b4:53:fb:92:58:0f:33:bc:3b:70:a7:be:
83:69:04:de:ea:aa:fa:47:b1:bd:b6:0d:e4:fa:dd:d7:e3:95:
0c:a6:10:c5:c0:4a:08:49:5b:77:1e:98:c3:3d:60:4e:f9:ac:
8a:53:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:27:11 2026 by rpki-client