
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier: g4CRUMhO0E8mECL71+BYQ9qqTvCF6yJuQ8OqgbcfPpE=
Subject key identifier: 66:BA:59:44:E5:42:2E:BE:83:70:6D:4C:B4:22:DB:02:47:39:E9:91
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial: 57B7E4E591D816B65478290997462C8DC24CFEB4
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number: 0253
Signing time: Fri 18 Sep 2026 02:53:09 +0000
Manifest this update: Fri 18 Sep 2026 02:48:09 +0000
Manifest next update: Sat 19 Sep 2026 03:24:09 +0000
Files and hashes: 1: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: UXWml1Lhai6XsZe/+0NNX1kVxg/g2Ofeo4uBVrbG2X4=)
2: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: apK/0hsVpmhUeemtv6EK//BPPuH/vapkmzdJ2BaKCqI=)
3: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: eylv3pM8cCS5agfH8t/3YdzCfQAg5TuoUu9iOo1hCUQ=)
4: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: pBcgsCzE8VSZrRxLNHX2La9Up2EYDGqL+n7eIiT6ks8=)
5: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: y67DkdP+puPQy+gKW0CKxSHJ7+a6dRxZv4NGTHHP+PY=)
6: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: vWVn4Krh8HFG73AqoAv0VK8xxfGftrDUl+DwuXFUflE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 03:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b7:e4:e5:91:d8:16:b6:54:78:29:09:97:46:2c:8d:c2:4c:fe:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Validity
Not Before: Sep 18 02:48:09 2026 GMT
Not After : Sep 19 03:24:09 2026 GMT
Subject: CN=66BA5944E5422EBE83706D4CB422DB024739E991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:a4:67:25:96:21:ee:cf:21:90:81:3d:72:
21:70:02:6e:86:3d:6f:53:cc:ab:33:eb:ba:e6:f9:
c9:6a:fe:9a:49:34:a4:69:15:92:db:39:9a:29:4d:
d6:a0:10:0e:73:3b:5e:c0:3a:f2:86:69:cc:36:75:
b4:cf:73:25:01:95:a0:ca:27:2e:75:6a:c0:bb:53:
49:91:d9:73:7d:ff:33:9f:ea:38:fe:8d:9b:99:20:
2d:cd:44:3d:4d:3b:36:61:f6:89:f6:98:d4:ef:fc:
c2:06:66:67:1e:18:69:2b:34:a4:8c:6a:20:7e:75:
60:ee:08:ac:18:4d:03:29:ad:2a:51:6a:ea:9c:a8:
0c:a1:e7:74:88:23:49:38:56:57:7b:d4:1a:e1:90:
44:82:3f:46:4f:95:7a:f3:14:b2:a4:fa:7e:a1:68:
a3:6c:b4:a1:a8:cf:27:c1:8b:62:9c:0e:24:61:d3:
59:3f:fe:62:a3:8d:44:bc:f9:cf:80:e9:f6:57:c0:
60:25:7f:b8:69:7f:f3:a8:5e:05:96:46:dc:c9:0a:
2f:eb:16:ef:f0:55:b8:3b:a4:0b:e0:a5:c1:aa:21:
e9:10:7e:bd:9e:91:e9:7a:98:b9:3f:cc:27:42:cb:
2c:25:b6:02:02:59:2f:00:e9:62:cb:f8:ff:76:ed:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:59:44:E5:42:2E:BE:83:70:6D:4C:B4:22:DB:02:47:39:E9:91
X509v3 Authority Key Identifier:
keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:45:6c:b4:c8:8b:83:7c:1f:c5:97:1d:21:64:f1:07:0f:
00:98:3c:51:40:18:aa:a8:ae:62:1e:27:e2:4a:09:b3:e7:0a:
ce:a2:dc:6d:53:6e:06:cf:55:d0:ba:8c:f4:f0:a3:15:24:a7:
29:10:b2:80:ec:8b:3c:f6:57:c9:4d:35:aa:8f:4f:97:92:7b:
30:a0:8e:fa:25:eb:cd:5a:70:80:56:ff:a7:c9:17:ae:e5:e4:
3f:35:ef:87:38:18:77:fe:45:fd:01:36:41:88:29:24:27:d2:
85:23:f2:36:25:24:43:17:10:ad:1c:2b:4f:4b:9d:7e:5d:c8:
40:4c:af:55:71:27:b0:79:e2:2f:27:a9:25:48:3b:cd:a2:fb:
18:0e:65:72:bf:ce:fb:b1:24:9e:8f:05:1c:62:2c:3d:8d:64:
ad:0b:79:ea:e6:b5:3f:73:70:3f:b0:bc:28:a9:cb:ae:3d:e6:
6d:f9:92:2e:41:30:9f:ff:e7:85:24:8d:44:3f:47:76:36:bc:
44:4b:80:05:de:fb:cb:4a:a7:f6:3c:9f:fd:27:64:2a:ff:1e:
5e:cc:8a:9b:7e:41:7e:0c:91:57:62:3d:0a:c5:a4:1c:70:7a:
d3:da:97:f9:e4:34:24:1a:1f:30:f5:83:41:a2:59:8a:0b:81:
77:92:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:39:20 2026 by rpki-client