
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
File: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft (raw, json)
Hash identifier: 3LogvMvWJRyoZxJhJaHZjxjoNAnTN7zMj3em3FbgfPk=
Subject key identifier: 29:41:2D:98:18:2C:38:6A:35:FE:D9:42:FC:5D:C5:3B:D8:E4:E7:FE
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 2E327A8E319A32C529ABBB30D578967771D52FB0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
Manifest number: 0227
Signing time: Wed 25 Mar 2026 13:44:07 +0000
Manifest this update: Wed 25 Mar 2026 13:39:07 +0000
Manifest next update: Thu 26 Mar 2026 14:42:07 +0000
Files and hashes: 1: AS396064.asa (hash: djFXHfa2rXK9kZIpu8Ef90RQVXdsC+vkaTA2daMwG3A=)
2: 1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl (hash: bmDvr3hvBmM11uFEeczYN+hQMlq3ljP3d1aC+RUXIQ8=)
3: 32332e3133362e32302e302f32342d3234203d3e20333936303634.roa (hash: uT+NwPbVKc5sZXDTfAnZ7NBSduHWPZF9xzdlVQV9EOs=)
4: 323630323a663662613a3a2f34302d3430203d3e20323135323438.roa (hash: Kk9CSrNwPsOKUe+v4ZVIi4qEv+Arhq2bOgPkVNwdmaU=)
5: 323630323a663662613a3a2f34302d3430203d3e20333936303634.roa (hash: 5NqZHrqVruAMz6KYjbzv903TP3Du/TFRNl5Uu+JLsuw=)
6: 32332e3133362e32302e302f32342d3234203d3e20323135323438.roa (hash: UEvy/Fk/6V0NUZWmLYAvbYkSNSZ7wnUqypnNnCctoPE=)
7: 3135352e3130332e3235302e302f32342d3234203d3e20323132303334.roa (hash: vFsfLtXifEPclvz93gDK73bkEeIrvx8m8FwVJdoxlHk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 14:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:32:7a:8e:31:9a:32:c5:29:ab:bb:30:d5:78:96:77:71:d5:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Mar 25 13:39:07 2026 GMT
Not After : Mar 26 14:42:07 2026 GMT
Subject: CN=29412D98182C386A35FED942FC5DC53BD8E4E7FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:8b:ca:31:46:0f:36:fb:51:ac:1c:37:37:
e4:ef:0b:52:10:40:97:d4:e8:7b:33:92:0a:fa:b3:
54:cc:ef:02:8f:b8:a8:4e:f7:c6:24:0d:0f:86:3d:
26:7d:97:60:d4:c9:c9:91:20:e5:db:84:79:51:05:
bb:b4:80:6e:04:d7:2d:82:1a:dc:83:13:e7:49:7d:
85:c8:63:1a:0f:8b:4c:f9:6d:8c:34:2c:20:f7:c3:
cf:73:5a:47:5e:79:65:cb:9c:74:f4:37:5a:cb:26:
68:25:85:e0:e7:12:70:6f:d4:6b:94:68:af:65:18:
33:60:a4:cf:d3:34:4e:f9:cf:5c:ea:a7:7b:14:84:
c7:0f:8a:85:3d:2c:7a:70:e7:ae:81:e2:48:0f:8a:
dd:b3:d5:31:9b:c1:87:20:71:58:c4:da:fd:c1:4b:
4d:5b:e3:61:b1:e6:ce:f4:d4:cc:79:59:7b:b2:60:
f2:ce:e3:29:bc:46:71:a2:c0:0b:2e:1f:9d:52:68:
27:c7:ca:a8:cc:05:bf:cc:ef:52:a3:12:52:9d:3a:
ff:74:40:11:4a:1a:41:a5:70:27:ce:96:72:4d:11:
a7:78:72:73:dc:c2:79:69:62:96:06:3b:9c:da:7f:
4a:96:5e:2d:61:50:68:98:3a:4f:42:40:3f:ed:ea:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:2D:98:18:2C:38:6A:35:FE:D9:42:FC:5D:C5:3B:D8:E4:E7:FE
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:3f:3c:74:5d:d3:54:7c:e4:24:02:6a:50:0f:34:19:9c:
4a:91:62:62:7d:f9:d1:17:8e:03:77:6a:33:84:35:75:30:38:
ee:f9:99:ff:c7:8a:ac:af:e4:a6:4d:53:6b:e2:a7:5a:1b:ea:
f6:61:76:67:65:84:75:7d:61:65:7e:e1:9b:4b:ee:ba:5b:8d:
3a:57:d5:a4:a2:ce:fb:3d:81:6f:f8:5d:98:57:b1:06:6c:c5:
86:c5:05:a3:fe:f2:62:07:8c:30:45:ab:ed:04:15:84:93:28:
f9:35:86:67:36:0d:a9:8b:53:b1:06:86:ce:18:6f:18:a7:fc:
a3:67:79:48:72:5c:cc:41:6e:c3:a1:43:26:0f:6b:9a:8f:a6:
52:55:a4:81:58:23:d5:32:6c:ea:8e:ed:17:e7:a5:59:c1:6d:
14:cf:a8:94:c8:4c:35:08:e4:7b:2c:ce:d5:8b:5a:37:db:f5:
48:64:40:a4:3e:9b:23:a4:c6:6a:95:94:3d:bf:b0:04:a2:64:
66:0f:e1:2a:ab:4a:7c:ae:ca:c3:38:90:ac:51:70:1c:35:65:
b1:41:6e:bf:53:e9:35:66:05:0a:b0:20:d5:6b:96:94:14:27:
3f:24:67:7d:9e:d9:ce:95:a7:53:3f:75:92:7d:d7:20:e6:22:
0d:76:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:21 2026 by rpki-client