
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier: xrZL+BS2R5RkP3q3s6vTqToLQNJ34/fPao11cLaQBY0=
Subject key identifier: 02:BA:B4:8F:B2:17:75:4B:F8:31:D8:97:A7:6A:2D:42:39:35:14:16
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial: 55462E9FAB54B81EF0DCB2C3D1EC66C6F8789351
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number: 0317
Signing time: Tue 12 May 2026 23:13:30 +0000
Manifest this update: Tue 12 May 2026 23:08:30 +0000
Manifest next update: Thu 14 May 2026 02:21:30 +0000
Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=)
2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: x64opNK8L7ZxE882BaHBDcW4rPucMEpduv2T5Bzv9/Q=)
3: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=)
4: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=)
5: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=)
6: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 02:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:46:2e:9f:ab:54:b8:1e:f0:dc:b2:c3:d1:ec:66:c6:f8:78:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Validity
Not Before: May 12 23:08:30 2026 GMT
Not After : May 14 02:21:30 2026 GMT
Subject: CN=02BAB48FB217754BF831D897A76A2D4239351416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:53:db:51:a8:ea:71:5e:6b:dd:80:da:a2:
9d:e7:1f:57:f4:70:38:28:3d:e7:d8:91:a7:b5:06:
b9:b9:05:98:8d:06:29:f8:c8:5a:37:59:38:20:68:
51:b7:0f:98:f6:46:75:35:76:db:df:d1:e4:4e:1a:
cf:de:d1:63:d6:2c:4a:67:89:92:35:dc:f5:e7:a5:
78:32:3d:63:88:3b:3b:c5:ab:a6:8f:c3:cc:17:bf:
8a:fc:0c:90:39:02:8e:cd:b1:69:f2:08:d1:5c:bb:
3a:2a:95:97:b8:e2:de:47:1a:45:a4:49:78:7a:28:
4d:c5:aa:ca:ef:88:77:50:06:ce:7c:b1:c3:14:52:
fc:e9:71:ef:24:92:da:26:9f:a9:d7:dc:dc:5c:92:
18:15:37:15:d5:25:be:6d:d6:2d:87:76:8a:d4:07:
4a:6c:08:98:ba:21:9f:82:99:eb:6c:58:4c:83:a6:
ac:82:1f:08:d1:48:4e:9e:2e:22:04:e6:ac:3f:4e:
22:00:da:0c:fe:92:1e:c3:be:74:15:1e:7e:c8:ba:
51:2c:a4:e9:2c:3b:bf:05:cb:fb:86:ac:ed:64:ef:
2e:66:52:5f:5c:6f:01:4b:0f:7a:a2:e9:32:99:5d:
f9:5e:0a:92:f0:96:25:bf:7c:13:ea:be:f0:40:ba:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:B4:8F:B2:17:75:4B:F8:31:D8:97:A7:6A:2D:42:39:35:14:16
X509v3 Authority Key Identifier:
keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:09:03:a9:f8:ad:d2:c7:04:cd:e0:f3:3f:a6:a0:5a:a4:45:
bf:3c:e8:f7:03:0f:33:7b:f7:34:bd:b2:84:79:b6:cc:07:06:
9a:af:78:b3:72:d3:7c:9c:52:2e:f9:39:b0:1d:7b:c3:08:cc:
1e:65:e2:88:0f:21:a8:65:b7:91:5a:43:4c:c7:bd:5c:69:45:
89:87:dc:ab:1a:54:18:4e:ad:31:a3:38:1f:80:6a:9d:6b:ae:
99:64:7e:ff:6d:85:a0:52:75:27:e1:4a:32:f1:69:cb:13:5a:
bf:13:72:41:f2:55:72:eb:39:74:bb:55:80:c6:0e:74:13:f9:
4a:78:cc:29:37:a6:4c:32:85:74:89:78:e6:ad:ac:d4:7a:29:
0c:56:3f:fc:86:18:43:ce:60:aa:ca:9e:6f:e6:c7:42:87:4a:
80:2a:2e:4a:d4:61:0a:1d:7b:fe:25:60:71:94:53:63:da:83:
bc:54:5d:2e:bc:81:48:31:78:79:3c:b0:09:8f:5f:4c:4b:fa:
a0:f4:03:f6:d7:8e:00:23:09:09:b8:cc:fb:43:b4:e3:4f:34:
17:f8:ed:ba:2e:32:6f:d6:e1:ed:fa:d8:92:73:ba:db:2a:a9:
3c:00:f6:79:1a:15:5c:84:d5:22:80:8d:77:23:f4:06:e0:94:
74:fc:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:57 2026 by rpki-client