
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
File: 3537F961668E4765578095AB33A4351BB72C9A63.mft (raw, json)
Hash identifier: FbamEyQfZhMU1alRsNJII+NTs8fLfWKEX9/tCCtpSjE=
Subject key identifier: 1A:6B:E9:12:2E:F8:A8:E5:2C:D0:F0:B5:5D:6D:79:37:6A:08:2A:3A
Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63
Certificate serial: 39AF326B4600122D1DDBBD6AFB210D12C0176E96
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
Manifest number: C6
Signing time: Tue 22 Sep 2026 05:33:42 +0000
Manifest this update: Tue 22 Sep 2026 05:28:42 +0000
Manifest next update: Thu 24 Sep 2026 05:33:42 +0000
Files and hashes: 1: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: e6xgcJdZcTjLmV7L7mIIS0ZbS4iA5+TX8cpRfsgZaUk=)
2: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: tHR53zr4UgIS56fxg0rrIzo3BRWKByol9KLXj3FQw2s=)
3: 326130363a313238323a35303a3a2f34342d313238203d3e20323035383438.roa (hash: OC/TIgS3EUwSF1HOLVrigQUtFIT/Fgbjxz6kNvqUJ94=)
4: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg=)
5: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: 0PI46warPOAGZrQe90bl3lA4fAE4MCISdbWQKd8cmUk=)
6: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: VD8/e5WUGI5SMs1h4LuaM43eCjUy2NSH/je82Dvnymo=)
7: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: JwzUDkANLXs6XgTehrq1Pd6d6jeZ2m35Wq5ZDkXHhLE=)
8: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: 292hBxtVOQ3Gd5+8ak4aSN6nAB9tGh6AJvrUIN5uGbs=)
9: 3537F961668E4765578095AB33A4351BB72C9A63.crl (hash: VutnD5+SD4u1DCLCqg5FR8PsTJTiDfg1OR7OqtIJAps=)
10: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE=)
11: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:af:32:6b:46:00:12:2d:1d:db:bd:6a:fb:21:0d:12:c0:17:6e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63
Validity
Not Before: Sep 22 05:28:42 2026 GMT
Not After : Sep 24 05:33:42 2026 GMT
Subject: CN=1A6BE9122EF8A8E52CD0F0B55D6D79376A082A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:20:57:df:e7:a4:59:0b:ed:be:3a:bc:75:
18:44:81:00:48:cb:cf:ea:35:21:40:5d:71:f0:35:
43:86:16:f8:39:27:1e:a6:af:9a:38:d4:48:e3:35:
60:e8:c7:45:a8:fa:83:d8:0e:30:20:60:50:2e:af:
a3:b4:b3:3b:09:00:7d:ed:4e:1b:9a:e4:a5:47:24:
35:1d:2e:50:09:3b:1e:a4:23:c5:a7:84:a6:05:f3:
0f:54:27:f8:53:06:ac:9c:8a:b8:32:06:bf:64:1f:
23:a2:11:b9:e1:b1:ad:1a:79:a7:24:1c:c4:54:0c:
4d:78:e9:0c:0f:e7:9c:c6:62:ae:c2:64:fa:94:b6:
cc:ba:a4:ad:b0:37:83:0c:0b:dd:c6:05:2f:66:38:
e3:07:fc:33:d9:ac:bf:c5:ee:16:d3:ea:54:c2:c6:
45:6b:d1:11:0c:be:d2:87:d9:7e:0c:f4:d4:2b:ce:
1c:27:d9:43:1d:18:66:ba:eb:6d:d4:a1:5e:73:93:
19:fc:74:6c:2a:4e:ac:df:2d:59:93:ae:42:60:77:
d4:52:1d:30:45:b8:1a:a6:f8:54:b5:e0:bb:b8:5c:
b7:db:20:18:92:7e:5d:b4:2e:20:53:b7:21:e9:da:
b3:9f:1e:bf:7e:f6:d2:b8:36:59:61:75:d7:6c:ad:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6B:E9:12:2E:F8:A8:E5:2C:D0:F0:B5:5D:6D:79:37:6A:08:2A:3A
X509v3 Authority Key Identifier:
keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:97:85:a6:bc:ab:ec:07:9d:5d:8b:08:7c:e3:c1:d5:a2:d4:
e5:6d:ae:3b:71:fe:dd:88:11:23:82:04:e3:65:2d:4e:52:de:
52:e4:e4:4c:18:ed:c8:8a:86:0a:a5:18:0b:18:3f:a8:4e:6a:
4a:9c:8e:ac:55:bb:fd:bf:c8:80:c3:f0:cc:3c:d1:ba:ed:e6:
dc:2c:f6:5a:ef:89:c4:7c:fa:a2:4d:0a:73:d1:9c:b8:13:92:
8e:da:03:e8:cc:30:ba:59:e7:53:c4:e1:5f:30:49:09:3c:32:
59:41:a8:ca:01:65:a2:ac:da:ad:5d:6f:4e:d2:36:c4:aa:44:
4e:61:84:cc:28:12:51:33:9f:7c:ec:c9:27:88:f6:3b:2f:aa:
fc:af:4c:d9:04:a2:5b:83:14:72:3b:87:84:da:1e:da:4f:56:
ef:1e:89:3c:e7:e5:d0:22:6b:44:e3:78:c8:e5:23:25:d8:0b:
bb:51:d5:01:13:f7:39:dc:92:d8:93:01:ad:14:39:8a:4f:93:
fc:e4:1c:89:63:ec:83:5a:94:0c:86:51:95:7f:5a:43:35:87:
b3:d4:4c:b2:28:4e:4d:42:35:c9:9f:2f:e6:5f:af:2e:9d:48:
a1:d3:46:6f:97:4c:91:1a:9b:ae:9e:f7:64:eb:26:83:a9:62:
73:c1:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:41 2026 by rpki-client