
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier: YHD3hZbuE0TxNs72IHwLZaIWIl9NXOmnf866vOl0ZN4=
Subject key identifier: 17:01:E7:B7:EB:DE:5A:7E:F6:C8:AA:2B:9C:E8:55:F4:E7:39:34:B6
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 08D6CB7032BDEB5983A86AA8F484A79A63C0E4A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number: 3EC4
Signing time: Sat 26 Sep 2026 03:19:07 +0000
Manifest this update: Sat 26 Sep 2026 03:14:07 +0000
Manifest next update: Sun 27 Sep 2026 06:47:07 +0000
Files and hashes: 1: 323630323a663939323a61303a3a2f34342d3438203d3e2030.roa (hash: dIrRhUCsqIlQRkKASf3euKWdJjEjwQuOt/Ix4ZqqXVk=)
2: 323630323a663939323a66373a3a2f34382d3438203d3e2030.roa (hash: vzUfgaw6t33aMyp+BMlfruWNIdCIRwsxwR92D/70/Gg=)
3: 323630323a663939323a66363a3a2f34382d3438203d3e203236323836.roa (hash: ZqVNXzi+RxnP2gAp/IhyHOF5/qmgOKGR7WPfV3jMwnQ=)
4: 323630323a663939323a66613a3a2f34382d3439203d3e203430363736.roa (hash: e0fhRMu+yRz12dIijmE9iRjZQQKxfzNFVogUT3jtPD0=)
5: 323630323a663939323a66323a3a2f34382d3438203d3e20323733323032.roa (hash: iEqw6oJFOmidQ4uO2TC0uMGKQbiMPYv6XpkzxfqW6/I=)
6: 323630323a663939323a36303a3a2f34342d3438203d3e20313532393030.roa (hash: YYf0/nCM78+V7tIM0LmBS6Dvc8Dkds5cV7+r3azqm7c=)
7: 323630323a663939323a35303a3a2f34342d3438203d3e203430363736.roa (hash: dfiSzAj0dxIHRnbrV3sYNv7QdmVgZOpy7/5qQbU3b3U=)
8: 323630323a663939323a39303a3a2f34342d3438203d3e2030.roa (hash: aPsopjlXsO9PjZXI0aAo9bHjjiesxBjYYeoVF6XSASU=)
9: 323630323a663939323a64313a3a2f34382d3438203d3e203230343733.roa (hash: 2w2powaZlQJtb8QkEXb0ohWSFkr6EssBYE5641X43+A=)
10: 323630323a663939323a61303a3a2f34342d3438203d3e203433363431.roa (hash: VOrAFxco2wif90ptN+7JtyQbdIcEhDu8JRBfxWeM5AA=)
11: 323630323a663939323a66643a3a2f34382d3438203d3e2030.roa (hash: l9MHeHwPWDpfcYYZeuJdPzAITqqbSJxHyHz6Xc6Iztc=)
12: 323630323a663939323a66633a3a2f34382d3438203d3e2030.roa (hash: P0Wxd7YHxu1Ww7VvfRSNOiu4DOsQueuhZO3fCro/WXE=)
13: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: dhvuFNP+dKjaylM9bJGDtxRtOBzy7kE4O1dRl7JrhAc=)
14: 3230392e3136332e3130352e302f32342d3332203d3e2030.roa (hash: FKbwQeudM+xj3ZmHz0Rd3chH8oOM/OG/CAqhkbAOwiU=)
15: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: K8umBIyysIyTKzGAPqQYfyOuH8+F5WnTKQ7wEtfjocE=)
16: 323630323a663939323a66383a3a2f34382d3438203d3e203236323836.roa (hash: znzq1JNqY7nwa0VK1203olEAlMeBqmP7Bua598HbZwY=)
17: 323630323a663939323a35303a3a2f34342d3438203d3e20313939393539.roa (hash: b0Y9KTtLcurzLdN0rHLtotfhQYSBbk9yeBAxIWe6UDM=)
18: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: 5s+ghrMdb2W57mZG/4QhvcGwEgKcUD6y8HAjU3ZXbMg=)
19: 323630323a663939323a62303a3a2f34342d3438203d3e2030.roa (hash: 7NmmEvA5OxLCgc1HX461LiLWtFz8UfSVNBj0uTzj9Mw=)
20: 323630323a663939323a65303a3a2f34342d3438203d3e203333333837.roa (hash: Jp0C0pT8pWJqRBdKs6Z8Yx69PQ+TPEU5WL+UawocJjE=)
21: 323630323a663939323a63303a3a2f34342d3438203d3e203236303432.roa (hash: YcD6OJ+CkZWZoPFilNIvkHcy621Zn+qrN1B3xkNtwQc=)
22: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: wWs8ib9AxdStlITj+fRhlFovwHg1pfm3ljVihr6bW+k=)
23: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: HhVByOYrx2S9pHnEb1O7wXoTQ+/5YLny6hPGL1uYyM8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d6:cb:70:32:bd:eb:59:83:a8:6a:a8:f4:84:a7:9a:63:c0:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Sep 26 03:14:07 2026 GMT
Not After : Sep 27 06:47:07 2026 GMT
Subject: CN=1701E7B7EBDE5A7EF6C8AA2B9CE855F4E73934B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:a9:bf:aa:8f:60:72:cb:cb:32:3d:f7:d4:
af:5b:55:70:bf:65:b6:3b:48:e8:5b:3f:81:68:a5:
a0:76:da:15:fc:c2:89:70:97:64:8c:97:00:ca:96:
44:e3:fc:61:e9:af:15:8a:e3:ec:48:a6:db:7f:a5:
26:70:ab:53:36:a5:fe:11:47:84:69:8e:fa:c9:1f:
db:ae:8b:40:54:e3:b1:18:ae:da:d3:67:14:38:83:
7c:b5:06:43:ef:dc:d3:bd:a5:d6:ef:71:a5:93:7e:
50:8d:c4:61:ec:71:8b:6a:a0:d7:23:ed:df:e5:63:
a2:92:d5:a9:9d:4c:14:a9:e7:59:eb:1b:5d:05:fa:
a9:45:af:88:17:96:19:18:b4:c4:de:24:93:db:36:
dc:4f:1b:02:10:20:c5:7e:14:87:9a:84:c2:75:e4:
81:a1:e9:2c:87:b3:cd:69:88:a6:1d:04:3b:fb:46:
70:56:d7:d3:bb:ac:c0:a6:26:3a:f5:ec:bc:a3:a5:
28:35:00:be:b2:ff:e8:a9:56:a9:36:20:e5:57:7a:
7c:03:97:ef:df:94:61:32:11:ed:6f:0d:f3:27:b6:
0a:0d:83:e9:ca:94:22:31:20:9c:2b:ef:ae:42:a4:
76:a5:03:f0:fd:b5:7d:c8:8f:16:ee:65:8f:e2:7f:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:E7:B7:EB:DE:5A:7E:F6:C8:AA:2B:9C:E8:55:F4:E7:39:34:B6
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:2b:c6:e9:a3:e2:a4:cf:f3:59:17:38:9f:92:59:25:8a:
a3:57:1b:17:38:e8:31:af:58:57:0a:74:e9:a6:7f:d3:50:8d:
de:94:9b:94:16:fa:53:41:ba:29:81:36:5c:27:5c:67:82:0e:
61:08:95:ae:1b:3e:79:c6:63:79:8d:50:7f:42:90:cc:25:43:
7f:7b:77:3b:d8:2d:e3:b3:d8:c1:f9:43:ad:ab:e4:18:b0:0e:
ec:35:be:9e:23:da:c6:d0:5d:c2:cb:ce:99:f8:9b:90:a1:50:
ca:37:10:9c:0a:48:ce:2a:d8:54:53:b7:28:10:b8:7b:32:da:
35:2c:45:1d:f0:9d:18:60:52:05:00:5e:de:7b:12:de:c8:89:
c1:81:4a:c2:0b:03:b4:34:39:64:6f:a5:d8:70:90:98:69:d6:
45:11:14:f3:ca:9e:4d:71:c0:0a:48:47:e3:12:4d:92:fe:f3:
8e:e8:8a:ab:4e:9e:51:2d:5b:9f:4c:63:3e:88:9c:7c:da:0e:
bd:45:c1:88:37:ab:89:60:12:36:c4:25:05:89:c5:fb:59:0f:
01:96:d6:3a:16:db:d7:cd:00:29:cc:a1:7b:91:ed:d6:7e:a3:
6c:2f:4c:7a:e4:84:58:63:aa:9e:8c:9b:9a:cc:a2:f2:59:13:
fc:78:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:38:04 2026 by rpki-client