Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: tbBgGbzSgiOV/R7aQ6Qj6SyJfsHObUoTNymM39Vp8b8=
Subject key identifier: E8:ED:77:93:E7:7F:E6:1D:EE:BC:46:2B:4C:F2:0F:1B:56:A0:6F:C5
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 75EAD5E5821B121BFC6CF164A9D65CECF3224C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 010A
Signing time: Tue 25 Aug 2026 10:47:08 +0000
Manifest this update: Tue 25 Aug 2026 10:42:08 +0000
Manifest next update: Wed 26 Aug 2026 11:11:08 +0000
Files and hashes: 1: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: F3thEc+FzHG14m/hw0nQV2r6fG3qAjXb5JGiiypVEx8=)
2: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ea:d5:e5:82:1b:12:1b:fc:6c:f1:64:a9:d6:5c:ec:f3:22:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Aug 25 10:42:08 2026 GMT
Not After : Aug 26 11:11:08 2026 GMT
Subject: CN=E8ED7793E77FE61DEEBC462B4CF20F1B56A06FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fa:ea:f3:6e:b2:ce:25:98:f8:f8:da:9f:02:
5a:e6:c7:8a:eb:24:be:ea:bd:bc:77:02:16:8b:60:
89:ea:79:5c:b6:a6:3a:bd:c2:f1:cd:df:2e:51:fc:
f7:06:4e:47:91:84:16:93:f5:31:84:2d:2c:00:f6:
8f:5c:e2:c4:26:d8:6f:e2:9f:35:95:e2:00:5c:05:
9e:ed:9f:2d:c9:f3:ff:0d:9f:c6:bd:e4:a5:be:e3:
4c:1e:f4:51:73:9a:bb:d1:de:c5:e6:d1:49:84:4a:
56:84:aa:09:a4:61:c3:02:87:e6:95:a1:94:6f:c8:
b1:e5:70:a3:06:0d:47:7c:f3:e1:8d:09:5d:4d:db:
ee:3b:50:1e:86:22:28:c3:9d:a8:b8:b6:25:7d:5b:
90:00:69:b1:5c:d6:64:bb:5c:eb:0f:22:f3:96:fe:
26:6a:9f:37:65:a6:36:b1:98:00:f5:fb:b5:23:f8:
43:33:f9:55:6b:ee:fa:42:74:62:b1:69:23:89:5e:
4b:fb:31:2c:e6:35:86:e4:26:82:05:58:df:b3:85:
97:91:2d:03:08:17:d6:69:ef:1e:17:d4:8d:d5:ec:
f0:11:ef:3b:8d:00:15:4a:91:5c:19:88:85:ce:07:
f3:cf:3b:36:56:9b:5e:9f:64:37:3d:de:4c:3c:76:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:77:93:E7:7F:E6:1D:EE:BC:46:2B:4C:F2:0F:1B:56:A0:6F:C5
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:ce:3e:8b:c6:94:a1:3c:94:8c:60:6e:0b:52:2f:15:56:
74:56:40:70:45:b2:a0:fc:5f:9a:c7:5b:2b:f1:46:c1:22:38:
89:bb:f3:0a:7e:06:e5:01:75:fe:33:3a:b7:f2:83:df:5b:2a:
25:61:4f:7b:88:45:2a:62:a8:ce:e9:51:1f:ed:73:20:a2:5d:
12:c0:93:80:9e:50:09:93:0a:b8:54:c2:12:c4:f6:4a:38:d3:
ab:a9:8f:98:99:20:65:f2:fc:9b:68:c7:8c:a6:7a:53:96:0c:
ed:d3:57:02:9d:05:69:bf:f9:69:b6:9c:90:dc:ca:42:86:72:
cb:3f:60:9e:16:1d:e9:0d:89:9f:03:bb:8b:92:3d:85:04:fd:
e5:b2:ea:54:fb:c6:a9:4c:fc:41:c2:bf:2e:e9:1a:1f:46:78:
97:a8:66:6b:25:13:37:ba:ec:05:07:b1:3e:8d:9e:01:cd:d1:
2c:4c:53:dd:2b:f8:c3:57:f5:e6:22:e3:f1:af:b5:d0:18:e7:
0b:60:dc:4a:d1:78:b4:54:5c:e4:f9:08:cc:67:8e:a2:89:9c:
b7:fa:9c:58:b0:90:3b:fb:6e:24:98:0f:6c:29:55:6a:13:71:
0a:6e:fe:c2:50:6e:28:f8:53:02:57:fa:79:9b:89:bc:e3:27:
3c:87:bb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:38:08 2026 by rpki-client