
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier: d/QoFTdX+hksu9Nc7gqGjDru0UMSqUmy+oiCrMTqPR4=
Subject key identifier: 10:22:9C:B4:62:E9:8A:5C:36:6A:4A:E4:4C:A0:AF:FB:5E:FA:40:C8
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 58379D16A1BEA40EBA738DF8734BC68B2AC524A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number: 0274
Signing time: Thu 14 May 2026 10:42:07 +0000
Manifest this update: Thu 14 May 2026 10:37:07 +0000
Manifest next update: Fri 15 May 2026 14:16:07 +0000
Files and hashes: 1: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=)
2: AS396064.asa (hash: eyJLzQZvuCnuEVNWe0S3R3sX+ERMvK36E5/huL9LFlQ=)
3: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=)
4: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=)
5: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: 1GIUxs1kvKnyljvhdDffnlHuJpgqQbJDIqg3dCJkD3E=)
6: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=)
7: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:37:9d:16:a1:be:a4:0e:ba:73:8d:f8:73:4b:c6:8b:2a:c5:24:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: May 14 10:37:07 2026 GMT
Not After : May 15 14:16:07 2026 GMT
Subject: CN=10229CB462E98A5C366A4AE44CA0AFFB5EFA40C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:05:37:06:f8:8c:3d:e5:da:39:25:70:a6:
2d:fa:b7:8c:f5:9f:48:0e:f0:35:7e:53:da:27:9f:
0e:f3:d9:e4:1a:8c:35:3f:84:a0:ca:23:1b:fb:b5:
cb:09:3b:78:f1:78:af:6e:4d:11:77:e5:98:8f:dd:
1f:0c:1b:85:4a:8d:cb:49:c3:7c:3b:a7:df:17:38:
45:c9:ce:4b:9c:0f:19:83:92:10:ce:6b:67:be:f3:
9e:16:ec:e7:ad:9d:cf:1c:8a:a4:fc:47:df:06:08:
b2:ad:62:02:45:04:7d:c2:6b:0f:19:ae:aa:47:3f:
11:7f:52:5e:47:4a:00:06:f6:b8:03:df:1a:c0:9e:
34:b4:f3:45:bd:73:8a:18:f8:e5:83:32:f4:7b:1d:
61:52:8d:10:e0:e0:06:4a:0c:db:f8:ba:b2:38:c0:
39:ad:31:c7:af:2f:55:fa:4f:1d:2b:ff:85:0a:4b:
95:e5:f9:1f:a6:77:e5:bb:f3:bd:05:c6:93:87:72:
1d:85:ce:98:81:a6:2f:00:be:8c:ad:cd:0a:59:ef:
33:db:d3:93:d0:26:5d:10:d9:e5:c8:26:04:80:83:
bd:e1:74:41:b2:4c:b8:a8:d5:26:6d:a0:b7:f3:cf:
4c:bb:8d:96:d3:dd:6a:17:79:da:40:14:ac:61:1c:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:9C:B4:62:E9:8A:5C:36:6A:4A:E4:4C:A0:AF:FB:5E:FA:40:C8
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:23:96:e9:a8:9c:f5:9a:14:70:a6:e2:4d:ca:84:6f:4c:68:
fd:17:03:70:26:55:3c:a7:4f:28:0d:d5:37:8c:bc:49:59:08:
a5:04:28:b9:69:b3:6a:96:f5:b0:6d:88:ae:ca:85:8f:5a:06:
a6:87:72:a0:5c:a8:d9:7d:29:d1:7d:5f:6d:49:7b:3f:8b:5f:
0c:ca:dc:71:4c:c5:66:01:3e:d2:33:48:8d:ce:77:68:97:8c:
5f:34:77:48:bf:87:05:8c:7c:6f:26:c5:cc:dc:3b:4e:80:3e:
97:41:4b:95:1e:08:33:2f:24:c5:59:ac:bf:76:09:7a:a7:1d:
f7:4d:d5:d6:63:79:3e:49:d3:90:37:ce:7e:80:44:cd:4b:28:
b2:cb:ab:0c:76:ec:82:d8:c4:86:46:71:26:fd:8b:78:3e:eb:
fe:60:57:b6:64:1d:27:f9:ae:6a:ff:fa:8f:fb:2f:9a:27:04:
61:68:97:59:43:d3:2f:66:94:e9:ab:c6:e2:74:90:f2:89:2a:
b5:09:98:94:01:10:76:b7:4a:10:c1:2e:39:3d:c5:0c:bb:50:
0e:48:3c:0e:51:2d:11:7a:3e:d8:69:61:ec:a2:1f:80:72:da:
71:b7:2c:ac:85:1a:3a:fc:36:22:90:80:99:ee:b0:9d:f6:7a:
38:7f:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:02 2026 by rpki-client