
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: p4j80tJpP/ME9Or8FGBGKVa6la3sMKnKjj426BV6Rcs=
Subject key identifier: DE:CA:0C:AC:9D:E6:59:DF:1D:90:8E:DA:65:83:0B:B4:45:A1:D3:09
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 6B84EAFF8E7980F2C5607C4D441EC8D5EFA80F66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 0508
Signing time: Tue 27 Oct 2026 16:34:00 +0000
Manifest this update: Tue 27 Oct 2026 16:29:00 +0000
Manifest next update: Wed 28 Oct 2026 17:34:00 +0000
Files and hashes: 1: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: m+jaMkxe08hb//5laroeDw4SvqtcxrXlJLqyKSQJRy8=)
2: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: DIDtzRiO9MEep3B+whXgDXCWm+gRvNNrVV2MRLZw9os=)
3: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
4: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
5: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
6: AS46766.asa (hash: ua/Tuq8s2dVClQnst6QnXutcZ+HLjsMGe70Yt0Tr1SY=)
7: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 17:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:84:ea:ff:8e:79:80:f2:c5:60:7c:4d:44:1e:c8:d5:ef:a8:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Oct 27 16:29:00 2026 GMT
Not After : Oct 28 17:34:00 2026 GMT
Subject: CN=DECA0CAC9DE659DF1D908EDA65830BB445A1D309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:3e:df:29:b3:5b:25:e2:85:69:5a:83:21:
49:97:ac:33:5f:98:14:df:a7:cb:d1:3d:d7:af:a7:
30:a9:d7:d6:3f:b1:02:28:92:bd:63:e4:10:89:61:
a7:96:08:26:e0:b0:06:db:b5:27:55:4a:08:c0:3c:
46:41:75:bd:bc:b6:3c:e9:a0:ec:20:cb:9e:79:63:
72:2f:61:b3:69:45:18:41:f6:6c:41:7d:48:30:bb:
10:ba:0a:12:39:6f:3a:9b:38:cb:d0:b5:50:8b:0b:
ac:6b:e1:b8:74:f1:65:65:1d:fe:63:b6:66:12:77:
18:ca:5a:0b:cd:70:81:f2:36:89:c4:f3:21:d4:b7:
a4:02:f2:2c:c1:52:cc:78:3e:b7:fd:fc:01:27:64:
01:a6:8e:56:26:72:bb:55:50:cb:be:85:a8:7f:c6:
2f:03:f0:fa:f9:cb:e9:06:8e:24:23:6a:89:12:55:
2b:02:ec:22:10:d9:c0:30:e9:b1:01:74:09:14:36:
5a:dc:49:eb:73:5d:d0:19:3b:32:64:ae:8d:98:ca:
a3:a3:82:bc:21:64:d1:be:7a:7a:22:07:50:c7:4d:
14:dc:63:2a:ca:68:e3:a1:86:63:5c:56:da:3e:16:
38:0d:eb:74:19:7e:be:2e:8a:ec:d8:c5:d9:a6:d0:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:0C:AC:9D:E6:59:DF:1D:90:8E:DA:65:83:0B:B4:45:A1:D3:09
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c7:b8:7a:4b:b2:79:98:32:77:f6:70:18:68:b0:68:1f:d8:
9f:c5:90:5c:ea:b7:d4:40:90:05:f4:9f:c9:34:14:3a:3c:80:
41:c3:6b:1a:c5:1b:d8:9b:3e:21:55:75:34:34:e8:b4:3e:a9:
36:43:c5:e5:03:4b:ad:55:d0:6b:47:5c:ba:ca:3c:46:2f:fc:
ae:fd:2e:4a:5e:52:96:72:14:d9:1f:0e:83:33:a9:13:6b:e4:
33:02:65:3b:26:4f:98:e9:58:d2:77:02:14:0c:2e:5a:0c:aa:
9c:bf:f3:51:26:82:e5:31:6a:9f:b1:2f:71:72:8f:8b:67:92:
93:11:8f:2e:a7:b1:24:7a:6d:f8:6a:8c:fd:d2:0e:7a:5f:1e:
53:61:1c:4f:3a:a3:30:76:6c:fb:73:8e:e3:9a:a9:21:37:b5:
59:16:28:23:12:fe:d9:61:58:fc:be:8a:d9:ed:3c:bf:bc:4b:
1e:91:4e:51:f8:0f:4c:30:5c:6c:6e:74:d8:c9:e0:28:93:e7:
15:b9:47:06:ae:7e:60:14:48:de:6f:da:d4:4f:68:ee:69:e8:
36:e0:95:7e:b1:ef:d7:4d:ec:5d:bd:cd:5c:7d:01:4c:33:f0:
1c:1a:3d:45:c2:0d:ce:37:50:ee:85:e7:9d:ae:a8:ab:fe:33:
29:fe:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:58:36 2026 by rpki-client