Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: kk9AwV7AgLxbO5H9zgofFjOr0hf6xoDLozDqi+G3fUk=
Subject key identifier: B9:90:09:2C:EA:B4:28:48:F6:D1:DB:C2:D0:F0:78:9E:06:34:57:38
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4887EA7F7C0F1417BBD725E4F719E45B427146F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02D8
Signing time: Fri 24 Apr 2026 06:30:57 +0000
Manifest this update: Fri 24 Apr 2026 06:25:57 +0000
Manifest next update: Sat 25 Apr 2026 08:46:57 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: oqJo7hrgNOWZ44ZQZwZ+4U6xyQAjZeJaMNYPDRiyOeA=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:87:ea:7f:7c:0f:14:17:bb:d7:25:e4:f7:19:e4:5b:42:71:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 24 06:25:57 2026 GMT
Not After : Apr 25 08:46:57 2026 GMT
Subject: CN=B990092CEAB42848F6D1DBC2D0F0789E06345738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:a9:43:7d:79:c7:ff:da:11:99:c6:48:94:
57:f7:5f:f0:b0:85:f2:60:cd:4b:6c:a8:09:27:ac:
b2:41:9a:00:70:b0:a4:8d:83:d5:1e:e6:c7:04:8a:
c4:ca:1f:55:0c:f9:c4:52:4e:bb:d2:2b:45:d2:63:
83:ff:0e:c3:18:49:bc:89:72:cb:ba:d4:2d:31:c4:
ef:0b:df:f6:a9:dd:52:9d:09:17:d2:bf:71:44:b4:
ff:2d:0e:7b:32:27:94:58:c4:08:df:b1:8f:3f:62:
b2:c8:40:5f:dc:4a:e7:21:d2:c2:e4:54:ba:34:b2:
0d:2d:1a:b3:82:74:82:2d:c8:29:54:d4:84:4d:b7:
b4:92:49:81:0d:cb:39:dc:c1:c4:d7:c3:c4:b6:cb:
f6:05:a9:69:48:08:f9:16:68:ac:a6:88:38:ef:52:
2b:9b:0b:bf:f8:69:1f:6d:20:65:25:01:b1:68:9f:
99:dd:52:c0:5e:37:f8:d7:35:c5:c8:f8:b3:78:21:
2a:89:39:6e:58:57:f3:60:4a:00:8d:9c:97:cc:41:
44:c5:24:81:9e:31:41:5b:e9:09:2b:43:2a:d6:92:
24:d8:65:50:df:b5:04:0f:2b:3f:41:29:45:12:bf:
30:11:ad:ba:d4:02:0c:61:b4:54:57:81:05:e1:9e:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:09:2C:EA:B4:28:48:F6:D1:DB:C2:D0:F0:78:9E:06:34:57:38
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:04:c8:c3:dd:40:a4:72:a8:a6:90:42:9c:66:1f:69:f1:
af:10:d6:52:a5:dc:1e:8a:0e:6a:c8:46:bc:11:db:25:cd:99:
dd:da:68:ed:d6:43:80:5c:99:0e:35:25:b5:af:8c:48:4c:b5:
b9:23:88:71:36:c2:72:b3:e2:65:a7:eb:7c:d5:12:73:c9:b2:
c4:08:2c:06:f7:c5:a9:17:4e:11:fb:f2:a9:f4:ce:a1:53:26:
f6:c3:e6:6b:65:7e:01:83:7b:5d:fc:4e:84:f1:52:52:d1:fd:
cb:7b:96:8a:7b:79:cc:38:17:98:f8:97:0b:2c:4d:bc:58:ad:
48:0a:46:0d:92:9e:de:e8:e4:1b:8f:bd:ab:2c:8b:d6:d2:54:
c8:ef:75:c5:e7:d7:b1:3f:cb:c1:08:00:25:f7:df:41:c5:20:
8d:0e:a3:65:60:e4:e1:ba:bd:40:44:42:98:a6:3d:d2:08:79:
3a:35:ea:bb:fc:44:f5:23:46:9f:e6:42:e6:61:35:ef:92:82:
ac:03:8c:ea:e3:12:0b:9f:9c:e0:8b:e7:97:ce:68:83:4f:60:
1e:78:87:e7:a9:7f:f5:79:7c:40:d8:cb:fc:a1:d1:7c:c4:d1:
9e:cb:8b:11:5b:df:d9:72:8d:d0:59:99:d6:e6:24:77:43:e3:
e6:c0:e6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 16:47:31 2026 by rpki-client