Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: QHbMFoCnbpNpIcT37OF3CRON4Q5rE7KdbcS+ktvlIQo=
Subject key identifier: 55:90:6C:B9:45:35:02:75:73:53:09:48:75:7A:C5:C8:18:D9:5B:9B
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 42D8383A503C4CB0935CEFA1A752CD54080BACDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 038B
Signing time: Fri 04 Sep 2026 12:07:41 +0000
Manifest this update: Fri 04 Sep 2026 12:02:41 +0000
Manifest next update: Sat 05 Sep 2026 14:33:41 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: RriCfqp4hJ6a60QOb5xCA88IFWqdRW7FMmtJ/l70IVk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d8:38:3a:50:3c:4c:b0:93:5c:ef:a1:a7:52:cd:54:08:0b:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 4 12:02:41 2026 GMT
Not After : Sep 5 14:33:41 2026 GMT
Subject: CN=55906CB94535027573530948757AC5C818D95B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:9d:97:25:07:d7:a1:10:bb:fd:d9:1e:79:
0c:9e:34:20:c4:94:38:f3:67:7c:60:32:8c:a6:82:
c8:4c:9e:05:5b:c6:71:40:30:98:44:1e:21:af:fe:
69:5c:d2:e9:d4:8c:59:04:65:b7:4f:44:42:02:55:
2e:cc:79:56:b0:2c:5b:7c:ed:4f:9b:f8:35:ff:c3:
e9:33:54:12:0f:bf:14:06:ac:47:d6:e5:85:13:61:
d5:09:36:23:56:5e:46:b6:49:0c:ed:b4:83:de:29:
49:14:34:f0:de:c1:46:ca:f8:72:50:bf:c9:eb:cd:
f2:48:e8:07:d1:9e:77:36:0c:94:c0:ff:36:91:16:
79:d3:35:5e:b0:13:34:68:0f:4a:3c:c5:14:99:f6:
16:ae:c0:19:31:cd:80:29:bc:1f:6f:b3:47:28:d8:
de:2b:85:a5:2c:16:b8:36:9f:1d:01:fe:3b:24:ca:
61:b6:0c:be:c8:fa:70:3c:94:02:9d:b4:83:2d:44:
22:e4:b3:a1:4f:5f:b7:a9:dd:09:79:89:b8:06:1a:
51:1b:af:76:5d:b9:ea:10:77:5e:27:1f:79:32:5f:
94:93:1b:04:8b:72:1a:2f:4c:e5:fa:e3:3d:5c:84:
2b:ad:e9:02:24:6c:fe:b1:46:34:51:c3:d9:38:44:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:90:6C:B9:45:35:02:75:73:53:09:48:75:7A:C5:C8:18:D9:5B:9B
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:06:ba:63:8f:84:05:d6:21:c6:17:5b:55:3e:49:31:1b:c2:
be:3e:84:3b:a7:18:bf:e9:4c:7d:a7:ee:13:a5:92:d2:b1:12:
69:5a:00:33:8f:74:d5:2f:66:77:36:20:d4:91:e2:e0:e8:f5:
a9:54:94:6e:f7:de:a9:67:9c:49:4f:11:8c:bf:bb:19:c5:56:
e7:71:09:14:a0:b3:7b:f3:46:ac:c2:3b:7c:81:7d:12:b9:31:
e0:9e:25:88:5a:2b:16:f1:15:15:97:57:d4:28:b9:d4:b4:d1:
51:a7:cd:7e:66:2d:19:ec:ce:d2:a0:f3:e7:d3:61:12:74:74:
5d:cd:42:32:6c:1a:29:1e:7f:d3:3b:ca:ef:4c:ad:34:1c:17:
6f:fb:86:7d:93:1a:cf:9e:42:a7:89:8b:2d:5e:0a:2e:53:90:
7b:93:ee:34:28:d0:cf:d8:85:9a:01:6a:06:bf:86:d3:a1:4b:
b7:e6:17:8f:b9:2e:7e:fb:b1:65:56:f4:68:9c:87:29:11:44:
b8:8e:b0:0a:94:b9:cd:e7:a3:aa:83:8f:5d:5b:24:fb:64:01:
c0:97:86:94:ed:04:0e:3c:5c:88:53:03:5b:14:f1:99:26:52:
10:bd:b8:69:63:04:cd:af:b1:35:9b:d5:43:f0:cf:95:01:18:
e2:50:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:47 2026 by rpki-client