Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: rz9NxGAQEUaorOkjEHUUlSIvW5ZLpK9q2dGmpIFsmbQ=
Subject key identifier: A7:9B:97:96:3E:36:E2:08:1B:9E:5B:4E:24:D9:BB:F5:E9:EB:D7:4F
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 564906AFF6EE5CDC8527731718088E24823ECDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03D4
Signing time: Thu 29 Oct 2026 18:07:15 +0000
Manifest this update: Thu 29 Oct 2026 18:02:15 +0000
Manifest next update: Fri 30 Oct 2026 21:43:15 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: itKrdcln2ceaKEL9ouuJEXEkWCfVEWs+tTg8J8O8v/s=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:49:06:af:f6:ee:5c:dc:85:27:73:17:18:08:8e:24:82:3e:cd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 29 18:02:15 2026 GMT
Not After : Oct 30 21:43:15 2026 GMT
Subject: CN=A79B97963E36E2081B9E5B4E24D9BBF5E9EBD74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:ae:06:54:a3:02:00:4d:02:d8:d9:c5:4b:
59:a3:72:f4:0e:de:b2:79:26:9a:2c:3b:59:34:75:
e5:9b:9a:a7:1f:9d:5e:d4:dd:7b:1e:f7:c5:a2:c3:
8a:93:9e:cd:7a:6a:dd:1c:3b:b5:09:df:c1:cb:4e:
bd:88:44:7d:6e:73:56:a0:eb:f5:1c:87:f0:3a:68:
41:1c:0a:22:2c:9a:80:c5:bd:4f:db:2e:91:4d:d8:
44:75:65:06:4b:b6:d3:b7:85:d9:15:ed:ec:ca:5e:
4f:f0:2c:90:2b:02:cb:ea:5a:22:3d:f7:7f:2e:c6:
20:42:20:0a:44:8c:51:7e:b9:e9:4f:d5:d0:e8:e5:
50:ac:a8:98:4d:31:af:25:5d:5e:be:47:fd:13:be:
82:37:b2:21:11:49:82:28:f5:98:ff:0a:8a:cc:43:
36:fb:b4:76:89:45:40:2f:43:37:b7:af:3a:42:ae:
6b:6e:e8:4f:6d:17:5d:f2:81:23:aa:23:f5:ec:79:
6f:6c:05:a2:07:6a:2d:3e:71:9f:44:78:62:37:9a:
95:1b:14:ed:0c:cb:b8:66:2a:7c:a0:ea:8d:07:a8:
7e:bd:a5:09:8b:d7:0f:7c:1d:4e:f5:c8:b1:7c:57:
ab:48:ad:7a:7a:b7:21:8f:72:46:69:08:a5:74:62:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:97:96:3E:36:E2:08:1B:9E:5B:4E:24:D9:BB:F5:E9:EB:D7:4F
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4c:47:a8:6d:3e:a7:03:23:c3:5d:59:55:b9:ae:84:0b:04:
07:b5:f6:1e:49:df:06:7a:6c:6b:32:48:da:23:6d:81:f7:b4:
6d:0c:bd:b3:50:df:a9:85:be:22:a6:db:f1:c7:31:e8:c6:e7:
76:68:59:a6:b7:16:c1:5c:77:79:91:5e:64:57:ff:e3:85:36:
96:12:90:c7:21:05:d4:ab:ed:5b:82:62:21:78:a6:a8:92:08:
34:6e:ad:eb:59:e4:88:6b:f0:8f:9f:17:87:f4:17:bc:76:2d:
8d:b3:7b:f9:3d:f9:26:88:14:da:0c:1e:66:40:1d:14:f9:be:
92:cd:59:73:1d:1e:7a:94:f5:d2:4f:79:52:7b:57:7e:c2:95:
ee:09:d1:63:0d:b6:d9:0c:de:0f:8d:00:b1:91:08:a2:d8:ba:
41:e7:0b:e5:47:34:1e:c3:fe:e5:11:8f:8b:8a:f0:7e:1b:24:
e4:e6:31:2c:51:5c:42:5b:48:2f:97:69:d2:2d:27:79:55:3a:
e1:d5:b0:15:52:7c:bd:3e:49:d4:4e:fa:03:07:a4:a3:76:c7:
ed:c2:70:97:7e:9a:00:bb:b5:93:30:15:22:b3:05:5b:b3:72:
26:b3:a2:70:de:ff:52:63:bf:50:04:60:b1:5b:74:5a:18:e1:
bb:e2:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:17 2026 by rpki-client