Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: bW0wxUPCb1czEh9WiRFdxMwcA0Xx9j9Lsl7DywvrQl0=
Subject key identifier: AC:35:9C:6F:30:E2:17:9E:C6:1C:54:CA:34:9F:70:D7:7D:8B:66:11
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 2A4FF735B2C563D979415CA590E2E1E7A86A0989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 2C
Signing time: Sun 29 Mar 2026 07:29:28 +0000
Manifest this update: Sun 29 Mar 2026 07:24:28 +0000
Manifest next update: Mon 30 Mar 2026 09:55:28 +0000
Files and hashes: 1: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: Qh/LG/F4isEj+gYbLysNkfAgBC1Y4uPtTNWgF70XZtE=)
2: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4f:f7:35:b2:c5:63:d9:79:41:5c:a5:90:e2:e1:e7:a8:6a:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Mar 29 07:24:28 2026 GMT
Not After : Mar 30 09:55:28 2026 GMT
Subject: CN=AC359C6F30E2179EC61C54CA349F70D77D8B6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:f8:29:96:04:0b:49:41:f0:f6:68:f0:01:
cc:b6:92:9b:05:0e:23:b1:94:7a:36:7e:b3:27:b5:
a8:fb:96:f9:21:9b:4e:d9:4d:ee:50:66:6b:75:37:
99:a1:f0:78:e8:e5:41:5a:39:c2:9f:61:02:59:1a:
c9:10:3d:26:b5:fd:b0:93:05:e0:b2:c7:3e:61:32:
5e:15:e8:08:1a:4f:af:28:31:ad:78:62:8b:f8:f2:
6b:a1:f0:38:e8:8e:18:6d:54:c3:65:a0:7e:4e:b2:
98:c6:64:c3:23:d5:c7:dd:76:6c:3a:83:97:69:8b:
39:68:17:17:b3:10:29:84:0c:87:61:2e:70:b4:8c:
d5:11:22:dc:c5:c2:38:de:b6:5f:17:16:33:c8:89:
ab:a1:4a:2e:d2:49:a2:3c:ec:92:41:08:f5:27:91:
5f:90:8a:b2:43:33:c7:2d:80:6f:b8:2a:4f:0f:20:
6f:db:5e:2a:4f:36:03:b3:3b:03:77:71:eb:ae:19:
4d:f0:4d:c8:35:a4:15:c8:eb:84:4b:38:ba:0f:0b:
04:8a:fe:4f:67:c2:88:23:2d:a0:40:44:eb:63:c0:
4f:56:6c:be:18:54:b3:82:f2:c3:f4:78:27:5a:e7:
b7:d7:af:43:9f:8e:2c:d2:69:cd:32:87:c0:4e:99:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:9C:6F:30:E2:17:9E:C6:1C:54:CA:34:9F:70:D7:7D:8B:66:11
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:34:01:69:19:67:51:8e:3c:3f:25:81:c5:47:7c:a9:ff:31:
db:6e:18:65:2d:82:7f:08:93:2d:61:5a:91:84:cc:0e:b6:17:
8f:83:28:9b:68:d3:38:b6:91:2a:5d:73:02:de:e4:a3:58:a7:
4c:55:2d:90:78:98:06:39:61:89:87:03:3d:0a:e0:78:ac:e6:
cb:0b:c8:58:48:21:8f:1f:8f:f6:66:07:93:e0:27:ca:7e:6a:
8a:18:1a:c9:68:a3:55:2f:6b:b9:46:b0:eb:ee:c1:ee:70:6b:
eb:ae:fd:28:fe:cf:2a:c5:96:d8:6a:46:e6:21:a0:66:7b:82:
c5:ca:12:3f:fe:7c:8f:ce:b5:0e:97:1e:4a:d6:c4:9b:b7:da:
e1:f7:80:eb:ba:4a:f4:e6:25:f6:2c:5f:5f:5b:9d:31:4e:03:
a3:c5:87:91:d0:f8:e6:f5:94:9d:e4:80:20:27:d5:21:9c:52:
89:f9:42:8d:52:6b:3e:0e:a2:8a:78:13:ff:cf:54:36:e7:93:
21:0b:5e:de:54:04:96:47:0e:c8:72:ca:e9:36:80:c6:f9:2c:
78:b4:03:82:21:ec:f8:2c:ea:59:e5:e6:a4:6f:60:a8:58:d1:
fd:4b:18:d5:53:e5:d4:da:ac:da:3d:d0:73:4f:86:c8:32:1c:
bb:3d:a0:28
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUKk/3NbLFY9l5QVylkOLh56hqCYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwN2FjMmVjZTczZTUwYzllYWUyZmYwODZmMjRkNDVh
ODE3NWI3YjAeFw0yNjAzMjkwNzI0MjhaFw0yNjAzMzAwOTU1MjhaMDMxMTAvBgNV
BAMTKEFDMzU5QzZGMzBFMjE3OUVDNjFDNTRDQTM0OUY3MEQ3N0Q4QjY2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHPgplgQLSUHw9mjwAcy2kpsF
DiOxlHo2frMntaj7lvkhm07ZTe5QZmt1N5mh8Hjo5UFaOcKfYQJZGskQPSa1/bCT
BeCyxz5hMl4V6AgaT68oMa14Yov48muh8DjojhhtVMNloH5OspjGZMMj1cfddmw6
g5dpizloFxezECmEDIdhLnC0jNURItzFwjjetl8XFjPIiauhSi7SSaI87JJBCPUn
kV+QirJDM8ctgG+4Kk8PIG/bXipPNgOzOwN3ceuuGU3wTcg1pBXI64RLOLoPCwSK
/k9nwogjLaBAROtjwE9WbL4YVLOC8sP0eCda57fXr0OfjizSac0yh8BOmfoXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUrDWcbzDiF57GHFTKNJ9w132LZhEwHwYDVR0j
BBgwFoAUNwesLs5z5Qyeri/whvJNRagXW3swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NzI4OTg4ODAxODc2MDJhNTBhMDM5MTAvMi8zNzA3QUMyRUNF
NzNFNTBDOUVBRTJGRjA4NkYyNEQ0NUE4MTc1QjdCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvTndlc0xzNXo1UXllcmlfd2h2Sk5SYWdYVzNzLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NzI4OTg4ODAxODc2MDJhNTBhMDM5MTAv
Mi8zNzA3QUMyRUNFNzNFNTBDOUVBRTJGRjA4NkYyNEQ0NUE4MTc1QjdCLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAhzQBaRlnUY48PyWBxUd8qf8x224YZS2CfwiTLWFakYTMDrYXj4Mom2jT
OLaRKl1zAt7ko1inTFUtkHiYBjlhiYcDPQrgeKzmywvIWEghjx+P9mYHk+Anyn5q
ihgayWijVS9ruUaw6+7B7nBr6679KP7PKsWW2GpG5iGgZnuCxcoSP/58j861Dpce
StbEm7fa4feA67pK9OYl9ixfX1udMU4Do8WHkdD45vWUneSAICfVIZxSiflCjVJr
Pg6iingT/89UNueTIQte3lQElkcOyHLK6TaAxvkseLQDgiHs+CzqWeXmpG9gqFjR
/UsY1VPl1Nqs2j3Qc0+GyDIcuz2gKA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:44 2026 by rpki-client