
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier: 8bjnYptXsEc2AvDzGsj+VexXXrLIZy0bTX+zA6EEags=
Subject key identifier: 1E:A3:E2:6D:8B:DD:08:71:DD:2B:4A:31:56:A1:DA:4A:E8:E7:48:C8
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial: 38E791CC7D3A14EEAB8C14E953DA0E38A69797BA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number: 025A
Signing time: Wed 23 Sep 2026 07:58:13 +0000
Manifest this update: Wed 23 Sep 2026 07:53:13 +0000
Manifest next update: Thu 24 Sep 2026 11:24:13 +0000
Files and hashes: 1: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: UXWml1Lhai6XsZe/+0NNX1kVxg/g2Ofeo4uBVrbG2X4=)
2: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: apK/0hsVpmhUeemtv6EK//BPPuH/vapkmzdJ2BaKCqI=)
3: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: pBcgsCzE8VSZrRxLNHX2La9Up2EYDGqL+n7eIiT6ks8=)
4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: iwoYZhylLRyGGuc3nrlVE4dmniVHDpFsit+R9hN9VHo=)
5: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: vWVn4Krh8HFG73AqoAv0VK8xxfGftrDUl+DwuXFUflE=)
6: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: eylv3pM8cCS5agfH8t/3YdzCfQAg5TuoUu9iOo1hCUQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e7:91:cc:7d:3a:14:ee:ab:8c:14:e9:53:da:0e:38:a6:97:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Validity
Not Before: Sep 23 07:53:13 2026 GMT
Not After : Sep 24 11:24:13 2026 GMT
Subject: CN=1EA3E26D8BDD0871DD2B4A3156A1DA4AE8E748C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:0d:c0:3c:62:9f:aa:63:89:82:06:f8:c0:
97:33:41:4a:57:60:87:ef:c7:c1:ab:0c:4a:ac:5e:
6e:76:f3:15:4f:b8:6b:48:34:76:79:9c:0b:e8:4c:
90:9e:4c:cf:2a:00:47:52:b3:c2:b5:eb:f7:ce:c1:
2f:e2:bf:0f:82:c1:e7:a2:95:14:8b:dd:79:e6:15:
d5:cd:f2:c0:74:18:75:53:2e:00:48:4a:78:e2:47:
ca:aa:4e:91:50:2d:3d:aa:88:b6:0e:68:5b:96:84:
6f:79:03:2d:2c:63:25:09:90:b1:4e:4f:9c:47:b7:
79:3f:3b:2a:aa:da:91:f2:8e:64:7f:ca:89:d3:0d:
aa:1c:ba:11:f9:78:84:a4:88:07:68:82:a1:2c:3a:
00:88:b9:2c:69:3d:7c:1f:b1:70:9c:0e:48:5e:20:
8c:8a:9e:56:b4:08:95:f7:c0:6c:82:16:b8:c9:90:
75:a2:a9:71:71:a8:6d:b8:88:49:4c:9b:ce:6d:ba:
d5:80:ae:0d:78:65:ed:bd:d4:ed:1a:f5:ee:1e:7f:
b6:6f:94:71:3a:de:86:38:4d:9a:b8:dd:ad:4f:e7:
64:8d:37:bd:e5:52:8f:0c:df:53:87:a1:1e:75:c8:
6e:7a:8c:cb:fc:bc:5a:f1:b3:41:9e:9f:03:5d:96:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A3:E2:6D:8B:DD:08:71:DD:2B:4A:31:56:A1:DA:4A:E8:E7:48:C8
X509v3 Authority Key Identifier:
keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:7b:90:d2:f6:ef:b0:20:84:da:3c:49:74:60:a8:27:e2:
46:6f:e3:72:8e:12:13:40:00:59:52:6b:bf:64:3a:03:5d:cc:
26:0b:ce:c4:fe:b9:59:7f:bc:d9:5c:2b:6d:10:72:e9:ea:63:
26:d3:29:ce:f3:17:43:39:fb:35:5b:c0:1a:bf:56:2d:3b:33:
5c:4b:84:79:da:c6:28:e8:3e:9c:6e:94:9f:c9:17:de:87:b1:
4a:ce:07:03:8b:06:4f:5d:ff:96:04:6a:28:49:f2:e3:75:da:
49:28:3b:8e:57:b8:43:26:c0:c0:d6:12:98:ea:b6:b2:73:f1:
67:98:6b:ec:0c:d8:3a:7b:18:e4:48:fb:08:92:60:30:4b:e8:
33:72:b8:5e:1c:1e:5b:3a:12:7e:b7:f1:5f:54:62:f6:0b:7f:
77:54:33:6a:66:f6:69:d7:40:a6:27:d3:d3:6a:a0:0e:91:e8:
f7:49:33:98:00:70:78:db:7a:13:99:1f:40:2f:e2:fa:57:df:
00:eb:e4:7b:1a:78:5d:59:6b:b7:a6:b2:9b:04:4f:ae:6c:b2:
9a:c1:7a:57:d9:61:05:b5:a5:19:e0:ab:c3:54:0d:6a:8d:32:
70:09:18:6b:a4:45:a8:15:ce:ed:eb:6e:0a:81:13:19:8a:fa:
50:ff:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:25 2026 by rpki-client