
$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json)
Hash identifier: wHMR97E2Rh1fKH/QaoaHfD3bZ80vQ2laIvB8pBL4CiE=
Subject key identifier: 4C:AE:FE:A4:6B:61:9B:85:45:10:4D:48:4E:36:3C:13:6A:19:1B:5E
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial: 685403112C68502151284C1E5E73C71D55F86EB9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
Manifest number: 85
Signing time: Wed 04 Mar 2026 02:42:54 +0000
Manifest this update: Wed 04 Mar 2026 02:37:54 +0000
Manifest next update: Thu 05 Mar 2026 04:25:54 +0000
Files and hashes: 1: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=)
2: 326130373a353463313a633031303a3a2f34342d3438203d3e20323031313332.roa (hash: nCaZK5znVYJTFYBYBBiKoIVkT1bc2I4KpDdvg2uat2U=)
3: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: KCGABflR2RT1O7Jef3zF5pYkJ8eUhGgwfMcaE1iJMR4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 04:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:54:03:11:2c:68:50:21:51:28:4c:1e:5e:73:c7:1d:55:f8:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Validity
Not Before: Mar 4 02:37:54 2026 GMT
Not After : Mar 5 04:25:54 2026 GMT
Subject: CN=4CAEFEA46B619B8545104D484E363C136A191B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:e3:15:40:30:f3:09:e3:3f:90:d5:82:c6:
71:8b:1c:ac:96:fa:a7:56:15:78:21:e8:85:23:1b:
80:f1:71:d5:49:1e:af:11:7d:6c:31:06:3d:99:2f:
98:70:60:3d:5f:10:36:6c:4d:57:bd:3a:0c:42:5f:
26:df:0b:5a:27:03:a1:f3:3e:e3:72:4c:38:ee:2c:
0c:57:24:79:81:92:33:bc:c1:30:9a:e7:6d:0f:f4:
c7:6c:b3:43:0c:c9:0c:97:de:87:af:a0:19:53:c2:
17:d3:0f:30:2d:7c:3d:94:a0:14:9c:17:2b:75:80:
47:54:91:b8:64:e4:a2:10:89:dd:37:bd:cf:3b:2a:
1d:b6:34:19:4b:ee:b8:7f:42:35:f8:b3:d2:80:c7:
42:79:94:ca:c1:b0:bd:9a:cc:13:96:2f:42:36:31:
77:da:ef:c4:7c:31:7b:57:63:30:8d:72:cd:0a:0b:
8a:fc:7e:e6:20:eb:3c:0a:ed:34:3b:90:67:95:46:
4c:c8:17:c4:de:8b:36:12:f4:68:be:0b:2b:10:dd:
57:ac:66:98:0f:0e:74:61:16:d1:bf:55:06:8a:74:
41:76:23:91:aa:a1:f4:b5:e6:65:3d:3a:d6:c0:29:
65:0d:ed:b6:13:9d:75:cc:f0:99:f2:f3:bc:00:e8:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AE:FE:A4:6B:61:9B:85:45:10:4D:48:4E:36:3C:13:6A:19:1B:5E
X509v3 Authority Key Identifier:
keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:aa:39:ca:f7:f7:28:ee:89:1a:78:af:0d:1a:8e:85:72:b8:
98:8f:3f:05:68:3d:3b:2f:8b:89:ff:62:2e:bf:b9:87:54:41:
af:fa:40:43:f9:8b:2a:d1:b4:54:c2:c6:91:b6:f6:c5:f3:c7:
08:31:77:ea:94:2e:4c:e8:b9:59:b9:97:c9:06:74:cd:d8:fb:
b5:e6:68:1a:75:b2:96:45:ea:36:77:97:68:15:7e:57:8e:55:
20:f6:67:cd:14:88:74:e2:97:ea:e2:40:9f:16:d8:d3:9b:d6:
46:7c:4e:9a:cf:b5:de:a6:ea:72:73:63:11:86:60:26:6c:1d:
ab:02:f5:85:bc:c7:e1:51:89:4f:e9:f0:fa:32:14:6c:86:17:
eb:21:ea:f9:90:14:35:72:af:10:00:fc:bc:56:1f:69:b4:a6:
6b:e9:df:e6:34:af:0a:a5:9a:fa:23:f2:79:51:6a:c2:4a:b2:
5d:bc:66:14:31:f8:60:bf:c8:cd:73:b3:f5:8d:8f:b8:44:94:
87:c3:7f:cc:83:93:61:9f:b9:c5:4b:c1:e1:a8:57:47:69:c9:
91:54:8a:94:9d:9f:24:2a:79:3d:83:1f:08:82:67:1a:b0:16:
82:81:38:33:dd:44:02:28:fd:27:b5:c2:51:51:a5:51:3e:a4:
ff:93:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:03 2026 by rpki-client