
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json)
Hash identifier: qYzo7AA393PsdI51vtEHbAQVxr2tFNCU3FGV7SyF/pE=
Subject key identifier: 90:47:E2:7A:E1:07:97:AA:82:65:A8:F5:3F:D6:60:3D:6C:DE:09:44
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 78C518050A8550FA4916D37F6402A8DDE96A24F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
Manifest number: 041D
Signing time: Tue 12 May 2026 20:05:17 +0000
Manifest this update: Tue 12 May 2026 20:00:17 +0000
Manifest next update: Wed 13 May 2026 20:50:17 +0000
Files and hashes: 1: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: LYgZcAysAqTVRfiLPXt05OGj2/jQNQyJSA64BahR3p0=)
2: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=)
3: 323630323a663961323a31303a3a2f34382d3438203d3e203436373636.roa (hash: 4WeoHWRvFw0AjbvhEY/m4kAMvgGDc13uyJpzQvCGzG0=)
4: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: A35TZilD3tdRnuMtzXBTo9r9ce5RUz54R0i9uPUN9DY=)
5: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=)
6: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c5:18:05:0a:85:50:fa:49:16:d3:7f:64:02:a8:dd:e9:6a:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: May 12 20:00:17 2026 GMT
Not After : May 13 20:50:17 2026 GMT
Subject: CN=9047E27AE10797AA8265A8F53FD6603D6CDE0944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:b8:fa:62:21:99:b0:3d:0e:e4:12:0a:76:
36:d0:a3:40:56:e8:87:9e:f1:67:2d:b0:a4:6b:f0:
05:58:c0:e0:d3:d1:09:70:ff:cb:e9:0a:ef:9c:72:
3c:ba:b1:39:23:8a:5d:f6:06:e6:ee:8d:70:22:94:
4c:b0:18:ba:17:42:a5:2c:67:ab:14:51:ca:e5:19:
64:ec:2f:f3:6f:8e:8c:41:96:19:0e:12:c8:5b:9c:
c3:25:83:65:8e:86:b1:b2:46:68:c0:c2:e6:d7:b9:
f9:85:06:f8:d6:e8:3a:4a:4d:12:3f:4c:35:cb:dd:
f2:3a:cb:8a:9b:25:f0:3e:b5:72:22:99:0c:1b:92:
f6:9d:7d:a2:54:27:77:74:02:86:ec:3b:cb:5a:39:
82:21:5b:f9:2f:21:a1:72:ce:00:7e:28:82:cc:0c:
dc:61:31:16:50:67:67:d7:aa:d4:6c:4e:93:6f:bb:
65:59:ec:62:1c:a4:a9:97:65:ff:c3:53:db:0b:2b:
89:76:b4:63:ac:25:cf:f9:f3:b3:a5:2e:16:83:8e:
b6:b1:72:56:d0:cb:73:6e:3a:14:01:af:89:93:c8:
a8:4e:5c:76:52:d9:dc:d9:00:3e:f5:1b:d1:d6:ef:
48:03:de:0d:ba:7c:f3:21:aa:5e:43:b3:f0:ba:cc:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:E2:7A:E1:07:97:AA:82:65:A8:F5:3F:D6:60:3D:6C:DE:09:44
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:07:06:b8:bd:98:34:f9:94:79:95:3f:b1:ae:71:e3:c5:
fe:33:13:43:ba:96:0d:19:e2:c5:e9:90:94:51:bc:b7:de:c4:
34:4a:f3:81:cc:a5:80:c9:7a:71:65:bd:49:51:93:cd:f8:e4:
66:5b:48:d9:90:41:16:bf:dc:9f:51:59:a9:a0:2d:ca:c1:22:
9e:e0:29:08:9d:e9:24:65:48:09:71:3a:19:fc:8f:1a:8f:6e:
31:5d:48:12:74:9c:e1:a2:e4:94:eb:e0:54:5c:7e:43:68:d8:
8e:97:eb:55:ae:5b:c6:42:77:c5:2b:61:f3:de:f2:8b:9c:31:
2f:58:0e:6e:d3:63:be:ca:b7:cb:95:6b:0c:27:f4:91:b2:07:
c1:26:4d:a1:ce:57:1b:33:ba:28:96:18:94:f0:77:96:ab:2d:
56:b9:7a:cd:51:62:83:b4:8e:a6:af:45:ea:4f:40:4a:eb:1c:
52:fc:3b:68:c4:4c:30:98:7c:a7:f5:f4:4e:35:fb:e0:82:6e:
db:17:93:2d:e7:f8:2e:59:d1:bd:89:e1:52:37:ee:05:a4:17:
91:3b:70:27:89:4f:14:76:50:8b:89:f5:85:23:42:3c:a1:8d:
88:d3:fe:85:81:dd:fa:9d:5d:fb:a9:3f:8a:fe:f1:58:15:a9:
4b:5d:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:22 2026 by rpki-client