Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: OPcOcMRsHsMOZfZfbaOCpGBmT4flScqYRCgknnUx5ig=
Subject key identifier: 97:EC:C1:3D:FC:CB:F7:E0:B2:AC:FD:75:DA:CB:29:09:7D:5D:B5:5F
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 37B21C85AF72049F5240AE30B121C803EFD1E9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0329
Signing time: Tue 23 Jun 2026 04:39:53 +0000
Manifest this update: Tue 23 Jun 2026 04:34:53 +0000
Manifest next update: Wed 24 Jun 2026 04:43:53 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: fmrJ9jmBms2ay+IuCt3dfFSNLTihAk/IPNj/ASKk2c0=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 04:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b2:1c:85:af:72:04:9f:52:40:ae:30:b1:21:c8:03:ef:d1:e9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 23 04:34:53 2026 GMT
Not After : Jun 24 04:43:53 2026 GMT
Subject: CN=97ECC13DFCCBF7E0B2ACFD75DACB29097D5DB55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:70:48:71:96:64:5a:6d:fc:d0:b8:7e:d0:
ca:6b:44:fe:13:12:77:89:8e:df:0a:43:59:f8:85:
09:e6:cb:a9:58:13:00:b6:36:80:7e:d6:ae:a8:40:
fe:c8:f4:74:01:ff:a2:ac:6c:36:03:d8:a2:69:65:
c0:0a:9c:b0:36:34:b8:16:9a:d8:01:42:a8:3a:46:
19:88:c0:61:86:9c:1a:9b:63:4a:e5:be:7e:83:a0:
43:e4:43:47:7f:d4:08:72:f2:ac:d0:88:16:7e:34:
cb:49:76:a8:87:35:3b:6c:92:47:7d:2a:c0:16:e8:
16:08:a6:2c:92:6c:c5:6d:b8:48:f3:9e:8b:77:fb:
87:4b:46:f7:2b:84:85:12:ca:42:6d:e2:a2:aa:1b:
dd:9c:3e:17:77:02:d4:44:55:39:07:e8:8b:67:98:
fe:6b:6c:34:49:41:f6:35:f4:ce:82:bd:f8:ac:08:
b9:7a:57:86:cb:31:7e:d8:a6:ab:e0:36:15:13:97:
97:56:1e:54:64:ae:02:16:89:d7:fd:48:7b:88:7c:
57:3f:dd:67:b5:53:55:65:56:5c:0b:85:37:85:24:
5e:14:60:b4:2e:f2:56:0a:07:87:b1:32:18:af:cf:
cb:88:b9:15:44:92:be:6f:a6:78:52:c8:71:2b:af:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:C1:3D:FC:CB:F7:E0:B2:AC:FD:75:DA:CB:29:09:7D:5D:B5:5F
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:1a:49:82:4c:9c:fe:57:cb:52:30:7b:25:19:97:29:e6:
73:37:58:9c:10:38:74:16:5d:cd:f4:1c:43:f6:b2:21:07:49:
8e:c8:23:72:29:e8:77:9e:b8:4a:ed:33:84:f0:53:94:c4:4b:
5f:c3:c5:3c:af:a3:2d:b1:fe:54:28:6f:ab:d3:8a:4c:5f:ab:
3b:af:e2:f2:6d:c2:b0:21:a9:fb:a4:e7:3a:59:ed:6d:c4:b3:
6a:d5:fc:46:c7:2a:a1:15:db:e1:7c:c1:c3:41:11:e3:6f:6e:
57:ba:c3:8e:1b:c4:7f:da:d1:4a:17:ac:1a:05:3a:ac:b0:1f:
bc:bd:85:6a:bd:2e:0e:a2:82:43:2e:4f:ed:1a:85:cf:36:e3:
ea:d8:40:bb:79:c4:1b:c5:50:81:b0:cf:79:f0:49:f0:fc:76:
21:7f:12:44:30:46:ea:10:68:98:f8:20:67:f9:97:43:d3:5b:
4e:ab:5b:b6:80:5f:68:ab:2a:d6:20:1d:3a:d3:9e:81:78:8b:
a7:f5:0a:6b:af:1f:1f:08:a7:41:c3:a0:6b:72:d1:5c:f3:dc:
11:dc:5d:04:00:9a:79:3a:e3:84:6f:56:80:0d:26:16:68:9c:
1e:e6:b6:76:4e:80:2c:42:6c:96:36:6c:f5:a5:61:76:4b:3c:
79:ee:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 08:43:29 2026 by rpki-client