
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: HWsOUr7YPubczW9/CPbgdrF/MBVHtsTahCy8NT9KBE8=
Subject key identifier: 2B:3F:DF:9E:75:6F:B4:90:C2:4F:98:FB:79:9D:C3:1C:B0:D7:6C:27
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 2AD225F6942005EBAE2BA703FBE41A8AD1EA5C4C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: 8A
Signing time: Wed 24 Jun 2026 10:11:07 +0000
Manifest this update: Wed 24 Jun 2026 10:06:07 +0000
Manifest next update: Fri 26 Jun 2026 10:11:07 +0000
Files and hashes: 1: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
2: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
3: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
4: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
5: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
7: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
8: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: SpQ7XB4O/muFtZV9U+YpB7ERUeWAw8Sm6AHh9gjkZVg=)
9: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
10: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
11: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d2:25:f6:94:20:05:eb:ae:2b:a7:03:fb:e4:1a:8a:d1:ea:5c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Jun 24 10:06:07 2026 GMT
Not After : Jun 26 10:11:07 2026 GMT
Subject: CN=2B3FDF9E756FB490C24F98FB799DC31CB0D76C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:b2:9b:6f:80:79:d0:b5:81:53:b3:08:3a:
25:47:00:69:02:da:d6:ff:c6:6c:bd:ad:56:da:75:
43:2d:97:2f:b0:c4:3a:03:28:e0:c9:df:f8:8c:1f:
69:41:5b:27:0c:0e:8b:77:90:ee:42:5c:4b:f3:11:
a6:5b:04:46:c5:72:ce:d7:eb:17:9a:d5:bb:29:42:
9a:4f:7d:cc:0e:2b:91:5b:2c:c4:95:14:51:e8:9c:
bd:67:42:7b:5a:97:3c:d6:b0:4c:b3:47:aa:88:93:
bf:fd:5d:a4:a3:a4:a9:a6:48:c9:3e:39:29:c7:fb:
bd:35:55:df:8c:c8:23:6d:d7:9b:be:6d:5a:46:93:
2e:f7:bc:b8:49:2c:75:f7:57:3d:f1:f0:97:4b:c8:
0c:14:82:69:a5:e9:d8:d1:c5:42:e0:ee:d5:86:87:
d5:a8:f7:32:cd:ba:2e:73:c1:8d:1c:98:dd:8a:2e:
d0:d1:66:6c:77:1f:e4:bd:e0:ad:c4:7e:bf:04:85:
40:1c:b7:5b:a0:17:11:a5:f4:ff:8d:bc:c9:be:c8:
9b:17:6c:fc:2f:8b:1a:f0:12:04:dc:10:28:53:91:
37:c5:87:4a:e1:e3:4e:3b:f1:ca:63:bf:28:eb:77:
bd:14:0b:47:8b:5a:f0:1a:78:51:13:1c:fd:ee:1b:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:DF:9E:75:6F:B4:90:C2:4F:98:FB:79:9D:C3:1C:B0:D7:6C:27
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:11:6c:b1:9b:9c:4a:f8:5b:2a:93:c8:6e:01:1d:3a:37:
05:f4:19:3d:15:17:f7:d2:e0:3b:5c:68:5b:e0:45:7c:52:35:
bd:ed:1a:fb:5b:ef:62:21:22:d9:57:bb:dc:3b:77:d8:45:be:
0b:f3:7c:ae:03:7d:a7:2d:11:6b:18:c4:d1:c0:c0:45:80:4f:
91:c4:0f:d3:cf:c0:8e:f6:c4:ce:ba:ab:06:57:4e:46:ee:31:
3c:a0:70:57:08:df:02:d4:72:6a:a1:f2:4b:bb:56:8e:9a:76:
64:a5:1b:17:2f:b1:4b:de:73:48:28:b7:9d:a6:41:ce:6e:0a:
cb:f3:63:9a:85:89:67:64:26:52:3b:e6:93:74:5f:72:36:85:
20:93:97:25:28:53:aa:ab:6b:00:d6:40:e1:9c:26:a9:55:d9:
de:0f:f8:5f:e8:57:76:41:1c:c5:57:91:45:af:eb:88:c5:7b:
39:92:5b:6a:5b:1d:0a:c5:48:37:57:c8:08:a8:b6:7d:a3:02:
49:c5:fa:2e:38:7d:a6:0b:5b:8d:d5:33:d5:51:ca:95:3a:e9:
12:f9:e4:8a:72:03:b2:3e:71:09:c5:40:2b:39:10:b0:e5:16:
54:18:80:3e:b3:6b:58:46:43:c1:4b:05:52:94:59:7f:31:69:
cb:7d:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:37:20 2026 by rpki-client