
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: sHDiE1sQ6wrUL2nAUpM6ydDOs5EtIh/A9PohwaedWYo=
Subject key identifier: 2A:1F:BB:5A:BD:C9:F8:32:64:CD:62:0D:5D:AE:0E:51:6E:6C:37:0D
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 37D4709B3B54BD91DD213EC41E24BBE6F7CE19DA
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: B1
Signing time: Fri 21 Aug 2026 16:23:09 +0000
Manifest this update: Fri 21 Aug 2026 16:18:09 +0000
Manifest next update: Sun 23 Aug 2026 16:23:09 +0000
Files and hashes: 1: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: ehTNi+D+r0/0yMimf67ampkWvLNMa8xoOcxjJPRC5TA=)
2: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
3: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
4: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
5: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
6: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
7: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
8: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
9: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
10: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
11: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d4:70:9b:3b:54:bd:91:dd:21:3e:c4:1e:24:bb:e6:f7:ce:19:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Aug 21 16:18:09 2026 GMT
Not After : Aug 23 16:23:09 2026 GMT
Subject: CN=2A1FBB5ABDC9F83264CD620D5DAE0E516E6C370D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:96:a0:f1:ff:56:27:7b:a9:43:ab:3b:c6:
66:45:76:3f:4e:08:13:a9:80:0d:db:c2:04:be:36:
1c:33:e1:cb:22:4c:9b:4c:0b:dc:5d:05:55:d1:35:
82:93:90:fd:cb:54:bc:4b:a3:bf:99:3d:62:65:1b:
33:21:9e:80:c9:3a:32:fc:25:b5:3a:6c:9e:11:56:
24:5d:4c:c3:f5:cf:3a:98:03:f0:a9:2e:5e:db:8b:
bf:ad:c0:ab:3c:28:66:e8:38:e1:87:b9:d6:24:95:
5a:90:06:1b:2e:2d:02:43:fd:55:75:eb:7c:c5:42:
ac:eb:e3:d0:1d:af:e8:17:35:aa:5a:74:31:7e:80:
18:14:d6:9c:96:16:bc:01:41:80:cd:ac:c0:bd:95:
1e:19:f2:46:96:48:7b:8a:3a:9b:f8:f4:0d:0a:4b:
d2:7a:16:ca:fb:40:91:09:07:fe:7d:d5:dd:a0:7a:
f5:d4:40:78:d2:89:74:cc:a6:ad:25:4d:99:7e:dd:
4a:ad:96:3c:c5:df:e3:d2:56:94:5a:9f:d5:63:99:
8e:4a:4a:49:92:db:91:3e:76:ef:06:43:48:d9:0d:
98:22:cd:8f:e7:3d:35:ef:b4:ae:c7:cd:6a:c1:a2:
91:91:80:ad:b3:f0:a5:13:7f:d8:5d:8a:61:04:4e:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:BB:5A:BD:C9:F8:32:64:CD:62:0D:5D:AE:0E:51:6E:6C:37:0D
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c4:8e:90:17:85:eb:0a:43:f6:c7:bf:a7:24:8a:34:da:32:
2f:c1:9a:54:c9:ed:a4:9c:9e:9a:d7:85:af:06:7f:74:79:e9:
c4:68:82:11:d0:8e:a4:19:bb:25:a5:ab:f7:5f:93:85:31:df:
83:e6:18:1a:e5:75:71:d9:e0:57:0f:f3:4b:65:6c:e6:d2:69:
89:4c:f5:17:1a:24:95:13:e8:d1:dd:ab:0c:4d:39:42:2a:3c:
51:02:7e:63:a5:16:2d:1b:aa:e1:d7:1d:03:68:5f:40:12:a5:
97:a0:e3:89:15:a0:b9:a9:53:45:06:85:ad:5b:da:1f:0f:0c:
3c:96:55:ca:87:a4:e0:20:ed:60:95:e8:7f:49:14:ce:df:b8:
4f:40:a2:d0:bb:8e:bb:41:e8:2b:d1:f6:68:bb:31:cd:72:b6:
f6:c8:a5:a9:eb:d6:e4:f6:ee:90:14:7e:a2:62:2e:c1:82:eb:
c3:3d:a5:02:b8:fd:8b:d7:3d:30:6d:88:b2:21:1d:67:2b:27:
4f:2d:71:46:c2:5f:ae:bd:9c:dc:b4:0c:43:60:5e:45:9a:2d:
34:7c:14:65:9b:95:f7:66:f6:a6:99:3d:7d:0c:71:4d:96:31:
e8:77:92:8b:48:84:4b:2c:b4:65:c3:44:7f:9f:fa:3c:d8:b1:
9e:53:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 18:33:20 2026 by rpki-client