
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier: HGnUiZp1a58C+6LU/qlCCSJPAT8/7eP4WXaE7wxF2nI=
Subject key identifier: B4:B4:32:62:6A:E3:40:DD:CC:48:68:D8:5A:36:84:02:8E:36:9B:62
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial: 63B23A2C40D6A995A06455C44EF75E3BE8A2CE31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number: 02E7
Signing time: Mon 13 Apr 2026 14:44:53 +0000
Manifest this update: Mon 13 Apr 2026 14:39:53 +0000
Manifest next update: Tue 14 Apr 2026 17:14:53 +0000
Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=)
2: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=)
3: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=)
4: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=)
5: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=)
6: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: 0FsvmNPJURVArTdZ/4i4d0FeN6KzXXGuQw3OK/MZCl0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b2:3a:2c:40:d6:a9:95:a0:64:55:c4:4e:f7:5e:3b:e8:a2:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Validity
Not Before: Apr 13 14:39:53 2026 GMT
Not After : Apr 14 17:14:53 2026 GMT
Subject: CN=B4B432626AE340DDCC4868D85A3684028E369B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:c4:a6:d5:13:92:68:c4:b7:a7:3f:1e:ef:
32:3a:6c:1d:d2:35:79:64:44:6a:b6:88:f0:35:a3:
35:31:dc:bc:00:1f:c1:0e:8c:8c:bc:d2:b8:a7:48:
2d:77:7e:6e:66:ea:41:df:f3:ac:a1:9e:11:7f:30:
77:cd:e8:ea:5e:4e:b3:93:a1:49:4f:12:4c:e7:91:
12:ac:68:c1:76:04:2f:ad:59:ce:c3:2e:df:ca:c9:
16:5f:e1:52:2c:10:1c:37:12:7a:fb:77:58:96:8d:
6e:75:e7:73:2e:42:ee:b6:27:c0:cf:7d:14:fb:4e:
5e:00:0b:a6:64:c7:08:44:76:7c:61:9d:61:38:75:
11:7c:62:5b:2b:b5:68:ac:ea:cb:93:5d:44:b8:6a:
a2:0d:f6:ee:32:8d:c8:45:48:09:6a:a5:5d:8b:2b:
57:be:eb:fe:ee:6c:64:2a:1a:89:41:fa:18:24:65:
3e:cd:b9:ef:9a:59:69:1b:35:17:cc:2a:5a:65:0b:
32:d1:81:60:f1:32:b4:82:f5:46:c0:e2:1d:09:ca:
7d:c5:b5:d4:6d:33:4c:e6:b7:bb:87:14:99:8e:ba:
39:55:d0:60:12:ab:2c:46:8e:53:b3:43:e8:dc:4b:
89:ba:0f:1b:f1:5a:df:ee:c9:d2:d3:e7:35:89:e4:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:32:62:6A:E3:40:DD:CC:48:68:D8:5A:36:84:02:8E:36:9B:62
X509v3 Authority Key Identifier:
keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5c:e0:2a:ee:bc:73:4b:d9:8d:c3:87:70:d0:9f:5b:68:19:
2c:52:82:4a:80:cd:1e:34:43:18:61:2b:f7:bc:07:4c:f9:b4:
83:10:40:46:1b:eb:1e:ea:5c:90:64:86:00:71:60:f0:52:d6:
81:b7:1b:4e:d0:e1:73:30:9b:c3:2f:e9:ed:e5:42:00:fe:f7:
0f:c9:f5:2d:c6:db:54:50:25:86:43:76:41:fa:cc:8e:56:16:
1b:70:3f:f1:d9:14:4d:88:6d:bf:37:93:ab:b3:c7:f3:5d:5a:
3c:bf:6c:4d:b9:0e:50:c1:47:59:14:9d:a4:78:89:93:05:79:
03:e7:66:6e:7f:1c:55:56:ef:2c:07:af:1d:97:5a:19:8f:d7:
9a:ba:05:06:60:06:02:4f:94:a5:77:f4:a5:d2:6d:16:4b:89:
4a:d0:fa:94:f5:55:b1:51:31:93:8f:d5:58:eb:bc:83:66:d5:
1c:1f:08:a0:36:ac:02:7b:18:08:03:25:4e:4d:15:0c:ff:45:
61:25:85:95:81:cf:4f:a8:de:16:41:01:91:4d:85:e8:3d:19:
fd:7a:ac:32:31:61:90:6f:ac:c3:37:d4:0e:bc:76:2c:a6:9b:
64:3e:bc:de:48:c8:8e:4a:41:ad:8b:c0:a9:52:31:09:93:22:
70:80:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:57:08 2026 by rpki-client