Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: fRHd65G6Ig5oaj6j7JKluuf60862ESco5QPhmvMOPMY=
Subject key identifier: CA:97:98:D0:9F:10:35:62:18:55:7D:CF:95:0E:8B:59:9E:15:B9:67
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 753A35E3A7408E21549E9C1FD1258048F4D87AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02CB
Signing time: Tue 14 Apr 2026 09:45:36 +0000
Manifest this update: Tue 14 Apr 2026 09:40:36 +0000
Manifest next update: Wed 15 Apr 2026 10:35:36 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: WwAaZt2Qk/9+/k76rTvi/iZxcAv7f3dzpK57a8pybxc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 10:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3a:35:e3:a7:40:8e:21:54:9e:9c:1f:d1:25:80:48:f4:d8:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 14 09:40:36 2026 GMT
Not After : Apr 15 10:35:36 2026 GMT
Subject: CN=CA9798D09F10356218557DCF950E8B599E15B967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:5c:a2:09:ca:36:e2:ee:c7:a8:8e:af:fe:
e5:d1:20:9f:56:c0:33:49:d4:37:d0:fc:aa:4a:b6:
ef:dd:9f:12:a5:cf:3c:15:82:60:2c:1b:e9:7a:68:
0e:2f:6f:dd:86:08:b9:37:78:81:47:d7:70:68:c5:
91:34:51:d0:79:8c:40:ee:43:29:6a:47:f3:90:67:
5a:95:d0:48:69:f8:fe:51:de:e0:d0:da:41:29:50:
70:8e:5f:98:8a:54:03:da:fe:e5:0a:ee:7e:47:b3:
70:33:ed:38:1f:a2:55:29:4c:21:89:60:b5:a3:8a:
67:68:2f:63:10:92:2f:5b:4c:19:5a:80:9a:99:85:
26:3c:94:08:0c:57:1b:e2:37:cd:6f:a8:e3:0d:08:
68:b7:82:dc:db:fb:fb:09:c7:67:9a:14:fd:3f:fe:
21:aa:80:83:6a:07:e0:96:92:fe:42:87:8d:24:56:
28:95:e2:97:97:6b:29:67:24:8a:1f:58:c0:09:55:
4a:61:34:06:31:21:a3:f0:c3:f4:0a:18:76:00:12:
81:f3:e7:d1:d8:cd:c8:64:e2:cc:40:39:e0:5f:42:
52:2e:ff:fe:78:1e:10:a9:87:8b:05:76:45:69:85:
9b:78:46:cc:cb:be:b9:e9:a1:80:bc:63:68:dc:96:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:98:D0:9F:10:35:62:18:55:7D:CF:95:0E:8B:59:9E:15:B9:67
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:45:b3:3e:89:46:a1:a3:36:3b:7d:06:59:6a:4f:c0:b1:
c1:26:2e:3e:61:38:26:d8:26:71:0b:03:5f:39:a9:c1:88:c4:
9b:93:a0:11:ea:ca:b8:b0:ea:af:ba:92:df:9a:a1:b3:b2:ee:
03:25:a3:19:55:7f:06:c2:84:c3:63:ad:48:f8:86:3f:3f:6a:
4f:ce:d5:e2:be:cc:a8:d7:76:f4:9c:88:94:ac:28:60:a8:ec:
7c:fe:b1:f3:e6:bb:bf:45:9f:2b:05:d9:ca:22:08:f8:66:bc:
de:27:d4:97:09:cf:88:b3:86:d7:41:ad:a1:3d:76:f4:fb:7f:
18:d8:25:e9:9f:61:da:86:42:35:34:74:d1:cd:4b:82:aa:d1:
64:70:39:43:4a:62:a9:ca:0b:e2:91:5c:b9:39:13:29:95:06:
81:89:79:40:b6:e5:b3:eb:3f:b6:c3:df:81:59:52:03:a3:9e:
9b:fa:8d:8c:ad:5b:de:75:b3:94:59:23:58:77:59:9f:0a:00:
f8:37:c9:13:d4:69:87:65:8b:16:ba:4a:de:c0:16:75:1b:d5:
4b:ee:3e:11:05:98:01:11:be:d5:a9:54:47:9e:a8:aa:a5:62:
f1:db:84:e4:3b:b0:72:3c:81:92:2b:a5:c4:45:2f:38:9a:0b:
07:2b:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 21:20:15 2026 by rpki-client