Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: FOtXdN0Dy22Yqe2Es1zjIFq7/n+1Pa3AIHsG7Pzq7eI=
Subject key identifier: 36:A9:A0:36:64:AB:25:72:41:9E:A4:BB:B2:A3:3E:82:61:91:C5:9C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6ECBE637367092A3F293A3882DE92EEE85E26900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02AF
Signing time: Tue 24 Mar 2026 13:33:12 +0000
Manifest this update: Tue 24 Mar 2026 13:28:12 +0000
Manifest next update: Wed 25 Mar 2026 16:22:12 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: AN4QLRs+pjhUIRFlwBNE4j3Upg3veiH3Ks7b2MP3g44=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cb:e6:37:36:70:92:a3:f2:93:a3:88:2d:e9:2e:ee:85:e2:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 24 13:28:12 2026 GMT
Not After : Mar 25 16:22:12 2026 GMT
Subject: CN=36A9A03664AB2572419EA4BBB2A33E826191C59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:4b:ac:e8:c0:0f:6c:f7:47:51:1b:5d:53:
b6:0b:26:c4:e6:39:af:15:eb:23:f8:85:c4:9d:22:
ba:63:84:44:ab:27:9d:cb:2f:69:87:1a:72:c9:2d:
70:15:cf:8c:20:ce:e6:44:04:ba:8c:46:b5:41:dc:
5b:6a:85:35:3c:c4:9c:34:18:e9:39:11:f7:32:f2:
62:6d:a9:68:4c:54:35:c5:79:8f:50:b4:6b:62:68:
b6:72:b8:7d:aa:8e:8c:e5:f8:f2:2b:09:3b:e9:f1:
d2:70:dc:05:0c:36:1b:29:e1:5a:e5:4a:ea:d1:e5:
2c:b7:ad:c9:a3:d7:e3:57:52:18:de:10:3b:b3:56:
fa:9a:6d:63:86:7b:1f:b8:36:54:a4:15:af:5a:e5:
ce:6c:c3:11:3d:6c:cd:76:68:44:4f:35:ff:b8:d5:
26:30:2b:d1:2d:1a:1d:d1:70:62:d3:07:85:be:54:
f4:98:ad:65:ff:3a:dd:16:ef:d5:02:55:97:0f:02:
d6:ee:ca:08:56:7b:30:b0:da:53:c5:c1:3c:3a:b7:
8e:13:ff:5a:25:16:b9:1e:69:9e:75:52:a0:b1:61:
5b:d4:38:5b:2b:bd:5e:ae:fc:93:4a:b1:b2:75:08:
bc:68:0f:fd:8e:c4:04:ed:ca:08:68:e3:12:2a:1a:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:A0:36:64:AB:25:72:41:9E:A4:BB:B2:A3:3E:82:61:91:C5:9C
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:19:6e:90:0a:ef:90:63:b3:ac:3c:c6:82:95:b3:83:10:
21:a8:60:e1:25:56:89:df:78:b4:f9:2d:57:b0:3d:3b:2b:1c:
74:e2:b3:60:ad:7a:27:b1:b9:50:62:93:0b:d4:10:b6:51:8a:
cd:69:12:93:9b:20:e4:58:3b:31:87:a5:30:d2:fa:b2:14:55:
26:91:3b:18:59:ef:19:98:16:51:da:0d:25:30:6d:95:81:1a:
4d:25:2b:d6:75:0b:ae:c7:bd:77:06:5b:99:bc:d9:ee:0d:25:
3f:e7:89:ad:4d:42:f0:b0:d9:8b:4f:f6:3f:4f:6e:30:8a:8e:
57:65:e4:34:c6:6f:b3:ce:f6:56:6f:6c:bb:6a:f8:4d:65:91:
f5:f3:d6:4b:5c:b3:d0:a3:b6:a9:c9:05:4d:b1:e5:5b:d4:20:
93:df:50:86:dc:2d:28:45:e8:9f:1a:00:69:0f:ed:da:12:e6:
44:b0:61:15:8d:63:7e:d4:cf:8d:c0:6b:28:58:b5:54:6a:df:
51:ed:2d:51:57:62:3e:1e:e0:9e:3d:33:2b:9a:72:b2:df:0c:
ca:54:ff:a8:38:4e:94:85:5c:22:42:38:9e:81:08:de:2c:bf:
14:01:95:97:f1:98:33:f3:9e:f6:e1:ff:bb:7d:75:be:3e:9d:
57:33:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 19:11:38 2026 by rpki-client