Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: qDmgS/znJO/6z0QTGhUuHMki3HPKyLLdCKABVt3xMx4=
Subject key identifier: 60:08:6F:1C:B7:86:65:B3:7F:81:CB:3E:29:71:E6:FF:52:DF:DB:DA
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 354FEEF5F28437A7A8717EEE8FACAAA15AC2C5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0386
Signing time: Mon 31 Aug 2026 17:42:35 +0000
Manifest this update: Mon 31 Aug 2026 17:37:35 +0000
Manifest next update: Tue 01 Sep 2026 21:35:35 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: NGCYeLR9p8ay1OggOQ82yqk0L77C2bLC1bsp7wEzZwA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4f:ee:f5:f2:84:37:a7:a8:71:7e:ee:8f:ac:aa:a1:5a:c2:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 31 17:37:35 2026 GMT
Not After : Sep 1 21:35:35 2026 GMT
Subject: CN=60086F1CB78665B37F81CB3E2971E6FF52DFDBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:59:8a:25:d8:72:91:a8:bb:2c:be:5f:ce:
d5:87:04:9a:c8:87:fe:de:97:94:01:dd:cf:cc:c9:
3c:80:23:54:66:81:0a:a2:2e:7d:4f:ae:96:96:33:
c6:1f:e2:4d:75:23:59:7b:fc:55:16:61:1e:69:cd:
99:44:e4:e8:95:91:d0:de:8b:90:da:3d:9b:a5:de:
4b:fc:39:2d:16:2a:c9:fb:dc:80:9b:f3:cd:b2:5d:
0b:3e:72:2c:1a:2b:73:5a:44:f0:6f:37:fe:67:ea:
94:0a:05:86:84:53:06:03:d4:c9:13:70:fd:b8:24:
7a:a7:a8:6b:32:c5:b1:2a:b4:de:ca:e7:80:e1:de:
85:a0:4f:99:2f:df:eb:fa:f6:ea:80:83:1a:33:3f:
91:4d:32:8a:c6:6b:f2:9c:7a:d9:43:c3:b8:a9:2f:
f8:30:dd:8c:75:3e:4c:4a:83:b0:de:f5:23:5e:6b:
d8:b3:e7:11:a3:04:48:d8:03:84:98:a6:cf:f3:c6:
80:5b:35:40:ab:f9:d3:9a:0c:ed:c1:30:fa:05:73:
bb:2a:cd:9c:1a:57:1e:1d:86:7b:04:fd:18:0f:4f:
34:dc:25:4d:34:0f:a8:18:af:78:a7:c6:6f:71:73:
56:96:07:0f:3d:5c:26:7b:d0:75:b5:7a:43:15:59:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:6F:1C:B7:86:65:B3:7F:81:CB:3E:29:71:E6:FF:52:DF:DB:DA
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:bb:32:84:4f:5c:be:f2:3b:b1:70:b5:3c:53:b3:bc:0a:
ba:0a:38:2d:3e:f5:9c:4f:84:71:a2:14:45:f1:b6:c5:4d:8f:
32:11:78:c4:08:98:26:e8:06:60:24:c2:64:f1:77:ca:44:8b:
27:60:e3:5b:ed:7a:43:15:c9:0c:e3:ac:90:37:fb:68:88:03:
32:9c:0e:ac:1d:d0:93:73:b1:62:23:4b:5a:17:77:16:f8:4a:
17:85:15:89:00:f6:e7:c5:48:38:ab:9c:6d:cd:7b:32:01:66:
a7:f6:55:9a:3e:e6:62:f6:39:b4:73:c5:5e:ee:6f:01:2a:bd:
36:bc:d1:15:d9:1d:71:1d:d1:ea:bd:ce:6a:81:52:60:bc:99:
99:35:f7:f0:44:e0:f0:cd:6d:f8:3f:e9:9f:f9:83:cc:d7:ec:
39:5d:9e:3d:43:dd:52:e2:e2:88:d0:63:a7:ec:f6:d6:25:c4:
e8:58:bc:8d:48:20:af:1b:ac:5b:30:da:05:97:43:4f:97:03:
cf:7a:99:42:b4:69:bc:3f:40:17:5e:83:83:c6:37:30:d8:2e:
3e:ea:a1:d4:af:4f:dc:a2:74:12:d5:12:1d:a0:2b:24:01:63:
33:43:3b:6b:0d:41:05:ef:49:ea:ec:61:d0:d2:ec:ce:d4:09:
6d:d8:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:28:48 2026 by rpki-client