Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: ZYUupS/d8b20PVxtYgHTa7TVjMxqy83RW+tb+KtYkSY=
Subject key identifier: 9F:B0:C1:35:9F:F0:45:FC:C1:00:A3:AD:E6:3B:7A:70:83:73:78:E8
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3AFCD2B3899232BBC720A5A371F0EC4A42F6BFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02F7
Signing time: Sun 17 May 2026 14:53:04 +0000
Manifest this update: Sun 17 May 2026 14:48:04 +0000
Manifest next update: Mon 18 May 2026 18:41:04 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: EMGy+194+rm9lbRgSRkmBiQYlsd45KOjgm5HfOb2B9g=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 18 May 2026 18:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fc:d2:b3:89:92:32:bb:c7:20:a5:a3:71:f0:ec:4a:42:f6:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 17 14:48:04 2026 GMT
Not After : May 18 18:41:04 2026 GMT
Subject: CN=9FB0C1359FF045FCC100A3ADE63B7A70837378E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:71:33:dc:e0:73:5f:e5:a1:c8:71:c7:be:
47:84:8f:e4:9e:c4:37:d5:66:d9:39:d6:10:dc:a0:
9f:c7:b3:19:12:a2:9a:f9:d6:99:a2:1f:18:34:12:
15:45:e0:32:4c:b8:2c:3b:4f:e9:48:7f:27:19:98:
7f:ca:df:d1:3f:c4:cc:b1:c7:35:53:ba:71:6f:4d:
51:cb:eb:f9:0e:70:f9:ea:2a:c1:dc:d5:1d:97:0b:
ed:87:b6:bb:57:0e:f0:aa:17:f0:0b:7d:9d:e6:d5:
63:78:75:4e:51:dc:40:c8:c3:4c:8d:bb:3f:cb:29:
48:0f:bc:55:6d:0a:10:50:ad:40:38:70:15:a7:85:
86:d0:6e:fc:3f:94:d2:40:d4:10:05:ac:b5:e9:59:
a6:50:35:ba:d6:12:05:1d:73:a6:a7:3a:bf:4b:be:
64:58:cc:7b:49:73:18:68:af:3c:d0:db:8c:f3:d3:
6b:c0:54:50:26:2a:90:e4:f7:84:02:87:1b:59:d3:
50:16:5b:f1:90:55:55:ff:90:b2:f1:f8:48:01:a4:
3d:a2:7e:09:a5:57:05:14:b4:ff:68:bd:f8:ac:b1:
5e:5b:09:39:5a:b8:1a:11:c5:3a:b0:77:e4:94:1e:
42:6e:78:f5:da:80:7e:cf:23:09:76:a8:c8:3b:9b:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B0:C1:35:9F:F0:45:FC:C1:00:A3:AD:E6:3B:7A:70:83:73:78:E8
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:75:56:53:8b:5f:04:75:36:2c:ac:6a:13:6d:5a:31:da:a0:
9c:88:46:0a:ad:81:f3:3e:7b:ef:6b:25:62:47:f1:22:a4:0d:
a3:fc:18:2f:3e:dc:57:37:0a:48:bd:41:42:eb:e2:1e:49:cd:
49:21:57:08:51:4b:05:f2:4f:1c:0f:75:d7:db:64:7c:1b:30:
d5:b1:5f:f1:58:0e:5f:e4:d0:3e:e1:3d:32:0b:8b:ed:86:0e:
0e:34:a1:8c:02:b7:3d:87:fb:59:ce:24:52:06:a4:48:b9:c8:
ff:97:db:26:50:9a:b5:27:e6:f6:c0:01:bc:80:a5:a1:a2:b6:
7b:a0:b6:f5:f3:d4:af:87:c4:15:70:45:ff:a6:b8:c4:3a:a6:
0b:10:9d:d7:84:01:67:f5:aa:94:57:64:24:47:c2:6d:73:80:
f4:e7:23:06:fe:47:7b:ff:86:21:c0:a7:8e:78:b1:56:66:2e:
72:45:b6:78:e2:ad:a3:e8:05:ea:7e:71:bd:e6:78:3f:40:d2:
34:12:29:18:a2:39:1b:d5:60:98:bf:1c:2f:b6:22:06:7a:c6:
73:bc:7d:9b:38:a6:b4:ea:c8:b4:d3:4f:33:06:8d:13:27:47:
04:0b:d0:77:3a:83:f5:d6:67:89:5a:b0:ff:f4:74:48:2e:4c:
87:75:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 06:45:38 2026 by rpki-client