
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
File: 3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft (raw, json)
Hash identifier: 8xGY8mDJfX3Fd5lXX1svhndlBqoGkRM8gRtF3DwStuU=
Subject key identifier: 8B:D4:BA:82:29:63:2F:4A:A1:3B:53:5F:DF:03:47:23:AA:A7:2B:81
Authority key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Certificate issuer: /CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Certificate serial: 072627F2E8CF28AB84433F5ED9CF50DD72BF70B7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
Manifest number: 21
Signing time: Tue 25 Aug 2026 11:04:41 +0000
Manifest this update: Tue 25 Aug 2026 10:59:41 +0000
Manifest next update: Thu 27 Aug 2026 00:03:41 +0000
Files and hashes: 1: 38352e3135352e3132362e302f32342d3234203d3e20323134333434.roa (hash: 0DB7s9al7RLpxWdRWQkg8WSpwyL2/PIxpLSTvn5HzAI=)
2: 326130363a613030343a666630333a3a2f34382d3438203d3e20323134333434.roa (hash: Fch7NV+M7HwpwgT8hMssz5dHHaLPrC93QzHTyYN+N7M=)
3: 326130363a613030343a323030303a3a2f34302d3438203d3e20323134333434.roa (hash: 1D8X9kxUUskGkFIPDvUqS1a+r1AGrrO/CIdMtju/AtY=)
4: 326130363a613030343a663330303a3a2f34342d3438203d3e20323134333434.roa (hash: r9x0/nErCsGq0USyqNIwYZx0Zz6rJMyg3ageBz9k7hk=)
5: 326130363a613030343a666630323a3a2f34382d3438203d3e20323134333434.roa (hash: Rpoxo+W741nQxWdQnu6cWSiOcJwrjMgG3XrE0Jxxpgo=)
6: 326130363a613030343a3130303a3a2f34382d3438203d3e20323134333434.roa (hash: 1XO6BaxJAehfczsdJQ8Rzbbou7d39qHfdDB4qDEUpn8=)
7: 326130363a613030343a666666663a3a2f34382d3438203d3e20323134333434.roa (hash: 35yf8q/WF+ftBqPGIIAa3y1w8C8sN/ndAbGwnqOMhUo=)
8: 326130363a613030343a666630313a3a2f34382d3438203d3e20323134333434.roa (hash: rj66gGeGCSu6M9bNO1IZ+A5V4bKw807AYT4Qm+efr9k=)
9: 326130363a613030343a323130303a3a2f34302d3438203d3e20323134333434.roa (hash: HxFZfUTbrZHfmVNt1/vqaLBxMyvs1FhTf0T5G/ahvr8=)
10: 326130363a613030343a313030303a3a2f34302d3438203d3e20323134333434.roa (hash: M6nGBPKue6YCxf9SFh1T7J0FxLdC8JG0866fChE4pXs=)
11: 326130363a613030343a663230303a3a2f34342d3438203d3e20323134333434.roa (hash: z92MdQiIZJ3sKcgs/C+2o9rNwmAHaLw2ex5q/qeFzig=)
12: 326130363a613030343a376166653a3a2f34382d3438203d3e20323134333434.roa (hash: L2NhANx5wsG7RkkEaUYspESRMYdf/CaWrDA0nOnXnvI=)
13: 3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl (hash: kSWlV3LEt7IoR8+63fxI+EEza6gsH8f/XqIsTdoeYb0=)
14: 326130363a613030343a663130303a3a2f34342d3438203d3e20323134333434.roa (hash: ukEukH98qa55+nHTcDyFZyqm8562MtPrS7Qu8JdsjfE=)
15: 326130363a613030343a666630303a3a2f34382d3438203d3e20323134333434.roa (hash: Imul87Q0laBEeGR6b4JgXOeVMgCJd+ACSUs3lfjQcHw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:26:27:f2:e8:cf:28:ab:84:43:3f:5e:d9:cf:50:dd:72:bf:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Validity
Not Before: Aug 25 10:59:41 2026 GMT
Not After : Aug 27 00:03:41 2026 GMT
Subject: CN=8BD4BA8229632F4AA13B535FDF034723AAA72B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:81:29:f9:56:5f:90:06:f4:5f:c2:ee:1c:
37:70:0e:53:cc:ec:33:b3:9c:b4:4a:19:ee:89:eb:
26:cc:01:04:79:2e:de:d0:7f:a9:84:e7:77:6b:ef:
cf:bd:10:da:1d:ae:d3:8e:0f:5f:d4:61:e2:47:8f:
84:33:13:db:fa:47:87:42:c8:0f:ad:81:9c:02:8c:
c6:38:39:b6:c0:85:aa:c0:6b:cd:13:ed:19:db:93:
75:04:8b:13:7f:40:e1:59:5f:55:a0:60:4a:72:3f:
14:4d:79:c0:37:47:9e:23:1a:d2:9d:11:56:f6:77:
fc:5f:82:98:68:25:04:5c:17:4a:34:bc:fc:93:e0:
8f:91:4d:19:fc:ce:01:05:c6:2d:70:5a:7e:fd:4b:
c2:68:94:f0:34:1d:f7:7a:e8:ae:25:ed:5b:0e:c1:
98:46:12:a9:a6:a3:90:9f:0e:0b:a3:22:bb:e6:76:
74:21:0f:9f:6d:21:d8:09:04:b1:42:3f:e0:e6:60:
4d:90:f8:a3:e8:66:40:a0:32:42:29:92:b0:99:c7:
8d:98:2a:24:2f:8f:e5:39:aa:e9:a1:41:07:8c:33:
86:cc:c6:2b:68:e4:5d:0c:86:97:48:e7:54:5c:82:
87:95:3d:e7:11:98:75:e7:1e:c4:cf:55:de:22:0e:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:BA:82:29:63:2F:4A:A1:3B:53:5F:DF:03:47:23:AA:A7:2B:81
X509v3 Authority Key Identifier:
keyid:3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:bc:e5:ed:dc:2d:59:be:a6:fe:03:0f:68:b3:42:2c:38:
b3:b8:b0:0e:f8:93:85:64:fb:43:2f:40:9f:83:ad:5c:01:08:
70:bc:85:d3:34:c0:5a:95:0f:6a:f7:fd:20:b0:7b:31:35:c6:
13:ff:4d:26:81:13:f5:66:8b:f8:08:19:4f:3e:a6:7c:22:a8:
fa:ee:80:2b:b7:29:7a:13:71:78:64:d8:cc:63:27:1d:0c:e2:
47:91:bd:ea:dc:50:33:5a:a2:9f:71:50:f6:60:fb:82:a8:e0:
e6:c9:81:44:63:01:10:43:89:65:0f:6c:13:01:68:5c:37:dc:
f4:9e:cf:7d:6b:f1:da:79:e2:31:72:c4:02:68:13:08:35:e8:
a6:17:36:2a:1a:43:c1:0b:35:5d:46:8a:24:9f:37:4e:72:71:
02:5f:fc:11:f6:3e:ab:d2:2e:51:e6:39:7f:a2:73:91:06:c5:
67:eb:ac:39:84:d5:da:3d:3e:ee:fa:5f:88:64:84:6c:a4:16:
13:a6:d2:fe:15:56:4f:d7:71:2d:1d:28:9c:7b:4b:7b:e7:3b:
55:17:a8:0d:6c:ce:f7:4e:6a:f4:ca:c9:fc:f1:31:9b:cf:14:
fc:f0:87:ea:35:a7:78:27:eb:03:47:90:cf:e8:39:f0:7a:cf:
c8:bf:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:40:39 2026 by rpki-client