
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
File: E9EB50E364277CEB063DCA8C371364FE1CC98844.mft (raw, json)
Hash identifier: XPAaAEr6LSmZ1+xj0fgsHfYWFscM1+3IN1gPezFKVj4=
Subject key identifier: C0:7C:F7:3E:EF:68:35:FE:F9:FF:7A:0C:17:8B:F7:DD:94:69:0F:98
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial: 0371BEDA296F79440F635E9C7B8FCE3A25953B35
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
Manifest number: 0167
Signing time: Wed 25 Mar 2026 21:33:50 +0000
Manifest this update: Wed 25 Mar 2026 21:28:50 +0000
Manifest next update: Thu 26 Mar 2026 22:17:50 +0000
Files and hashes: 1: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (hash: cKqMdpDpNZeTs1zZYtMh7ZzpU6gFPVvUC9QJ/l/EB4c=)
2: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (hash: YwN5VXKRuA2ytsXsaIhEWVD7EcVizXTIn2zeRxkXdwE=)
3: 326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (hash: aVrMh8neYSAJZJNMsJHXuG1FOsph/b6J1zm/1t3TlUc=)
4: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (hash: 1AS9kktYm6E1YYts/FKhRmEDrmEx5mjh3ZBgDRukxtY=)
5: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: G0zoH/bSXVa8bPsjD+KTz7+M5ISsfMbmvIPi6yzb9tA=)
6: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (hash: K5I4cRIERA7dRNGahq9lka9oTRhszkIRCdPhlO48i7g=)
7: E9EB50E364277CEB063DCA8C371364FE1CC98844.crl (hash: nRCDFF6MK1cg0S4eibmvoh84fU7yw369KEzQWOwbLXs=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:71:be:da:29:6f:79:44:0f:63:5e:9c:7b:8f:ce:3a:25:95:3b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Validity
Not Before: Mar 25 21:28:50 2026 GMT
Not After : Mar 26 22:17:50 2026 GMT
Subject: CN=C07CF73EEF6835FEF9FF7A0C178BF7DD94690F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:f7:da:a3:52:05:e2:70:a3:f6:1a:26:5f:
de:41:8b:d1:45:58:c7:ee:a7:13:e4:a9:b7:ec:84:
0f:bb:90:e4:8b:b9:ee:4c:3c:a6:28:b2:b4:00:90:
b0:81:67:d2:e8:cc:73:13:bf:4e:4d:29:b4:a4:f1:
6d:18:cc:ad:79:25:30:f3:b5:14:c0:b1:37:4a:2e:
cd:45:e2:60:48:8f:e6:3a:fe:72:0b:a3:af:b5:ad:
9c:29:f3:54:67:4c:ea:6d:b8:85:0d:a0:b1:eb:d9:
dd:41:90:c0:20:56:cd:cf:da:cc:70:2b:d8:f7:7c:
84:fc:37:d9:eb:0a:06:9a:cc:f3:20:d5:38:95:13:
de:72:40:df:ad:45:2f:77:8e:fa:c3:a5:5d:37:13:
05:90:df:9c:1d:6f:59:57:01:25:be:7f:ab:1f:b5:
e2:54:3b:c2:40:04:15:89:d8:e4:32:88:7c:5f:4b:
7a:29:67:57:83:d2:b2:d5:88:cf:1b:5e:53:3f:4c:
4e:33:ab:b8:6e:03:5a:9a:94:52:48:f9:81:94:51:
89:10:ce:aa:10:8a:b7:a4:10:df:df:f5:3c:7b:a9:
f3:65:2d:05:dd:2a:e7:6c:a5:7d:03:61:90:7b:3d:
4b:5b:ff:d7:ba:e6:26:d2:43:fa:8f:3b:37:a0:75:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7C:F7:3E:EF:68:35:FE:F9:FF:7A:0C:17:8B:F7:DD:94:69:0F:98
X509v3 Authority Key Identifier:
keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:cb:bf:2e:7d:9b:85:69:3e:84:88:96:65:45:0f:16:ba:
f3:cf:35:89:49:b5:ae:e1:f1:03:9c:09:45:78:03:31:ba:3e:
9e:c8:87:25:16:07:7e:e2:1f:60:1c:12:65:b4:55:da:04:61:
d9:03:26:e6:fc:1c:5f:53:e4:1f:02:bf:0a:8b:67:da:7d:27:
a0:81:cc:cd:0d:60:cb:a8:1f:2f:ec:8d:ae:b2:4f:1e:1e:5d:
e3:de:94:ab:a7:0b:bf:07:b9:57:ce:dd:99:ab:0c:17:a0:12:
e2:10:e7:a7:27:4a:87:79:31:54:d1:71:c4:79:fb:97:6a:fc:
2e:80:f9:ff:3e:c7:d3:71:14:a5:b6:c4:ee:ff:ce:c2:db:d8:
93:df:c4:42:56:24:d2:65:13:ae:b6:53:a3:b2:11:87:45:18:
3f:49:1b:c6:b5:0e:02:b8:da:46:7e:e1:a0:a5:77:af:dc:64:
5f:b4:e5:04:08:ce:5d:03:5b:99:03:58:34:44:f6:07:45:e9:
be:8f:74:fe:1f:3c:a4:07:b2:f6:29:37:3e:dd:2d:a0:a1:1e:
8f:0d:82:c2:53:24:49:02:d5:0b:bb:d7:a9:63:78:f1:86:df:
13:51:65:68:48:d5:94:b7:0c:00:d0:0f:70:96:64:7b:27:29:
d5:56:5d:3e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUA3G+2ilveUQPY16ce4/OOiWVOzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFQjUwRTM2NDI3N0NFQjA2M0RDQThDMzcxMzY0RkUx
Q0M5ODg0NDAeFw0yNjAzMjUyMTI4NTBaFw0yNjAzMjYyMjE3NTBaMDMxMTAvBgNV
BAMTKEMwN0NGNzNFRUY2ODM1RkVGOUZGN0EwQzE3OEJGN0REOTQ2OTBGOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09/fao1IF4nCj9homX95Bi9FF
WMfupxPkqbfshA+7kOSLue5MPKYosrQAkLCBZ9LozHMTv05NKbSk8W0YzK15JTDz
tRTAsTdKLs1F4mBIj+Y6/nILo6+1rZwp81RnTOptuIUNoLHr2d1BkMAgVs3P2sxw
K9j3fIT8N9nrCgaazPMg1TiVE95yQN+tRS93jvrDpV03EwWQ35wdb1lXASW+f6sf
teJUO8JABBWJ2OQyiHxfS3opZ1eD0rLViM8bXlM/TE4zq7huA1qalFJI+YGUUYkQ
zqoQirekEN/f9Tx7qfNlLQXdKudspX0DYZB7PUtb/9e65ibSQ/qPOzegdagvAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUwHz3Pu9oNf75/3oMF4v33ZRpD5gwHwYDVR0j
BBgwFoAU6etQ42QnfOsGPcqMNxNk/hzJiEQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTQzZDU4MzZmZjFiMjkvNC9FOUVCNTBFMzY0
Mjc3Q0VCMDYzRENBOEMzNzEzNjRGRTFDQzk4ODQ0LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUNDOTg4NDQu
Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk
NTgzNmZmMWIyOS80L0U5RUI1MEUzNjQyNzdDRUIwNjNEQ0E4QzM3MTM2NEZFMUND
OTg4NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCLgMu/Ln2bhWk+hIiWZUUPFrrzzzWJSbWu4fEDnAlF
eAMxuj6eyIclFgd+4h9gHBJltFXaBGHZAybm/BxfU+QfAr8Ki2fafSeggczNDWDL
qB8v7I2usk8eHl3j3pSrpwu/B7lXzt2ZqwwXoBLiEOenJ0qHeTFU0XHEefuXavwu
gPn/PsfTcRSltsTu/87C29iT38RCViTSZROutlOjshGHRRg/SRvGtQ4CuNpGfuGg
pXev3GRftOUECM5dA1uZA1g0RPYHRem+j3T+HzykB7L2KTc+3S2goR6PDYLCUyRJ
AtULu9epY3jxht8TUWVoSNWUtwwA0A9wlmR7JynVVl0+
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:35 2026 by rpki-client