
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: 9JMckqDSsShDjeGC7YrYeIcOFAS3q2yQ9xtS3NCatWw=
Subject key identifier: D5:FA:C5:FD:2C:61:20:34:89:EA:1D:BC:27:08:92:93:D5:42:23:36
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 7057AE07BA6C0AC81CD5A7699F76AE53FF02F3C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 04BF
Signing time: Fri 04 Sep 2026 14:07:44 +0000
Manifest this update: Fri 04 Sep 2026 14:02:44 +0000
Manifest next update: Sat 05 Sep 2026 18:03:44 +0000
Files and hashes: 1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: yF8CBIztYwDPxnJXDRmn8pAfBcELiNMWayqBJxVoGFQ=)
2: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
3: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
4: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
5: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
6: AS46766.asa (hash: 6wDkNZ3qZ+r1HBHECirXhU8oMm1LeeKSTbHzsSZj0Bw=)
7: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 18:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:57:ae:07:ba:6c:0a:c8:1c:d5:a7:69:9f:76:ae:53:ff:02:f3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Sep 4 14:02:44 2026 GMT
Not After : Sep 5 18:03:44 2026 GMT
Subject: CN=D5FAC5FD2C61203489EA1DBC27089293D5422336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:43:81:53:06:68:e4:32:96:58:25:e7:09:
31:0d:37:02:a7:2a:dd:5e:09:a7:fd:6c:ab:ba:b8:
f7:7f:55:fe:5a:71:a0:91:a3:52:5b:4f:e5:25:48:
a8:fd:14:6d:59:a5:0a:df:5a:46:be:8c:d9:19:2e:
07:8e:6f:6c:be:f3:db:42:f9:c9:53:ce:d0:b2:d8:
4a:74:1c:05:50:48:2f:31:a8:a4:f3:c2:47:3c:79:
16:dc:61:32:08:df:85:05:70:da:eb:0c:75:95:f2:
c4:03:1f:cd:b1:71:a3:c1:dd:39:06:83:8d:e9:1c:
69:86:27:01:1d:35:52:dd:17:53:bb:00:85:6c:52:
a5:90:ec:5e:2d:eb:98:57:25:2e:bd:ee:7c:6b:16:
c2:dd:e5:ea:c3:6f:4e:ab:2a:6a:36:c5:9e:16:94:
53:02:cb:b2:af:76:bc:2e:ce:da:be:60:60:d6:a6:
85:75:82:bf:3f:7f:97:49:d6:20:ed:e1:68:cf:87:
d5:2d:f7:70:8f:f5:6c:fd:84:5d:0c:59:88:40:e3:
0e:43:ec:79:7e:6b:e2:d3:aa:0d:b7:a5:78:59:7b:
b5:72:fd:80:81:21:c4:ae:ea:e8:da:c0:a2:59:b4:
77:0d:7c:d6:94:fc:ce:d0:7d:d2:80:c1:d6:83:a6:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:C5:FD:2C:61:20:34:89:EA:1D:BC:27:08:92:93:D5:42:23:36
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:a6:f8:75:c6:a7:1e:10:56:8b:65:bd:d8:a3:61:fe:67:
15:58:37:fd:92:e8:50:db:e2:9f:e2:5f:65:2f:98:57:30:c4:
f2:99:f5:54:7d:37:58:37:8c:70:6c:83:23:65:eb:d4:e5:8b:
8e:27:ba:d9:86:78:6a:4a:78:a3:91:47:c4:1b:f8:3b:d3:83:
67:a6:93:df:0f:0d:14:c5:91:52:42:97:a7:47:5b:f0:09:27:
05:a0:f1:dd:d5:be:f9:93:f5:8f:8d:3e:11:6b:4d:72:b1:5d:
74:c8:c2:51:e6:8f:96:89:ad:35:5e:6f:d1:5e:42:fe:3c:49:
c9:6f:c5:f5:9e:22:30:4b:82:17:da:36:88:74:d5:b9:17:d2:
ea:a0:be:7a:2f:00:a1:32:c9:ab:7a:c8:bb:2c:db:a4:76:c5:
5c:fd:9f:0c:a8:a8:ef:63:3d:a5:b5:e0:0e:b1:01:7a:60:e5:
8e:ed:c5:03:20:38:38:a6:bd:7c:fe:e5:80:f2:3f:76:d1:32:
fa:80:3a:74:5d:2a:c2:dd:e5:ef:da:b6:92:40:95:71:1b:57:
44:0a:de:dd:bf:19:41:78:93:bd:bc:0c:36:a3:72:e7:ba:f3:
b7:d7:aa:b2:26:3f:43:aa:71:00:93:14:16:9c:6a:57:44:a4:
75:0a:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:11:50 2026 by rpki-client