Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: aXl2M2FHYjx1IZRpoyKtgcZNb8iJe0sMunV2qZFIoNg=
Subject key identifier: 43:97:CE:7F:C2:CE:F1:0D:04:F8:13:2A:13:FD:55:10:ED:04:7C:18
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 7DAD2578B167B03E5009C6EF90C8768BC3704493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0349
Signing time: Fri 17 Jul 2026 02:54:20 +0000
Manifest this update: Fri 17 Jul 2026 02:49:20 +0000
Manifest next update: Sat 18 Jul 2026 03:18:20 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: AT8wbToF1uqYAlm0dbR3gOdnK8dPcbiM3ARrkk97EHY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 03:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ad:25:78:b1:67:b0:3e:50:09:c6:ef:90:c8:76:8b:c3:70:44:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 17 02:49:20 2026 GMT
Not After : Jul 18 03:18:20 2026 GMT
Subject: CN=4397CE7FC2CEF10D04F8132A13FD5510ED047C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:bb:fd:01:0d:4e:65:da:db:e4:26:cc:c6:
5b:27:7a:08:80:fa:ff:a1:d6:76:fc:fe:82:ae:7a:
e6:a1:c8:24:7e:e8:4f:e4:94:54:3c:85:7a:e1:a7:
7a:f2:74:71:23:db:a3:87:62:ad:8c:65:e1:9f:58:
0b:29:66:5f:3d:23:53:7e:6f:88:f7:21:95:bc:c9:
12:a3:7a:f2:47:0a:77:a9:5e:ca:56:06:5f:54:0e:
5e:47:36:f7:c3:94:5a:58:1e:ab:3c:1f:bf:65:83:
92:d9:05:38:12:63:5b:be:0b:e4:ff:c0:c0:fe:f1:
1d:72:c4:68:df:6b:eb:f0:a8:a1:8d:d1:e4:4c:26:
84:9d:23:bf:98:71:cf:e6:2b:c1:1e:80:81:c6:bc:
df:cb:50:c0:ff:32:6a:25:d7:17:5b:f0:00:ce:48:
6f:d7:1c:69:b6:f7:c6:c7:5a:fc:8c:5b:2d:04:d0:
31:88:30:49:71:d9:df:a5:a7:65:24:cb:8a:05:b3:
5d:30:e9:4e:e1:d9:7b:62:a6:6e:c7:20:f9:30:ed:
61:d8:cd:ca:e5:62:48:d2:bc:69:f0:32:71:e5:2d:
4b:3d:af:2b:d1:e3:90:f8:b0:d7:6f:1a:68:32:c5:
17:db:b5:5a:c6:01:5e:e1:97:f7:a2:79:d4:fa:ce:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:CE:7F:C2:CE:F1:0D:04:F8:13:2A:13:FD:55:10:ED:04:7C:18
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1e:ad:b9:f9:20:87:fb:6c:82:e9:ee:6c:a0:2f:b2:27:52:
89:42:bb:3e:a3:ed:3d:b5:1c:35:a8:06:c9:85:cd:8d:bb:fe:
65:38:35:37:14:f1:5f:c8:16:56:0c:2e:58:a9:e8:6b:9d:18:
76:88:c3:bb:ec:c7:f0:f7:97:a0:b5:65:68:db:42:8c:32:fd:
37:19:6c:9c:b4:00:d0:95:bb:e3:a5:d1:02:c5:3d:4e:e1:44:
ee:44:d6:75:c1:c3:14:76:38:f8:1b:e5:d9:63:42:b2:ca:c0:
d4:38:d7:39:c0:54:d7:b8:ab:02:95:48:ac:1f:c4:0e:72:50:
b4:48:45:5d:06:96:5e:e0:66:02:6c:e7:30:2a:fb:59:d0:d8:
56:a2:80:d2:b4:5b:50:31:a4:53:2f:6e:85:85:ee:65:7a:8c:
4d:51:e1:18:fd:3f:53:9d:19:81:08:51:d4:83:13:e3:fd:26:
83:e2:04:df:54:30:ba:28:f0:ca:33:a1:8e:41:26:f1:a6:2c:
3c:96:b4:e8:5c:aa:d3:c8:42:50:29:02:55:b1:ff:9a:62:c1:
6a:5a:c6:f7:f1:e9:a9:92:39:95:96:00:9b:de:35:c0:25:53:
e0:61:4d:6b:cf:9c:33:eb:a5:64:12:a8:c9:ce:21:d8:39:67:
44:ce:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 15:41:35 2026 by rpki-client