Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: BjP5AO84errJCaKnj0vpaILg5ONNPmPjUe7mIv/5nvo=
Subject key identifier: 52:D0:F0:DF:1A:99:02:7E:05:21:EC:A0:13:74:7C:8B:4A:16:8B:28
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 01F353BDFAD0AE22F582E282DD769136662AE98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 036A
Signing time: Mon 10 Aug 2026 13:01:16 +0000
Manifest this update: Mon 10 Aug 2026 12:56:16 +0000
Manifest next update: Tue 11 Aug 2026 14:58:16 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: VFMT6CRlL8CW0UHN48zkjymt4LREqOjEI6GvhUvnWxk=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 14:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f3:53:bd:fa:d0:ae:22:f5:82:e2:82:dd:76:91:36:66:2a:e9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 10 12:56:16 2026 GMT
Not After : Aug 11 14:58:16 2026 GMT
Subject: CN=52D0F0DF1A99027E0521ECA013747C8B4A168B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:5e:fa:43:e6:e1:f4:fb:84:5c:71:28:f3:
e1:ae:88:4a:d4:0a:1c:3a:6e:ac:08:0c:77:c9:48:
fb:68:dc:15:ee:88:38:48:f3:ec:eb:ac:2c:1e:2f:
2b:07:66:a2:a9:61:39:5d:9a:50:9d:28:09:77:e5:
16:b9:74:4b:d2:52:97:60:3a:65:00:97:60:80:c9:
06:60:26:d5:a7:21:1a:40:6f:98:2e:cd:7d:12:07:
3e:16:4f:c6:e5:58:69:a1:ee:3c:d8:20:ab:92:00:
93:32:2d:6f:52:1f:d9:2b:90:7e:eb:6e:99:3a:52:
74:16:28:16:51:44:1b:fc:49:b4:f0:76:d6:1e:c1:
65:52:80:ac:84:1e:a6:bf:39:41:aa:17:4b:1d:ae:
27:57:d3:ed:df:b4:9c:73:7c:55:af:d3:8d:b4:bf:
0e:5d:9d:76:4d:69:e2:85:89:ef:f3:e4:fc:46:8b:
3d:69:35:1b:df:91:91:d1:65:ef:eb:9a:96:4c:89:
56:ce:f4:c3:d9:4a:03:74:46:a7:a6:0a:14:cf:6a:
79:09:78:43:df:be:c9:2c:f1:cc:8b:65:8b:2b:31:
ed:86:1c:ed:38:65:aa:e3:22:95:ae:6d:da:28:f7:
69:5d:68:af:72:59:db:dd:38:e5:6a:fa:6b:ba:ec:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:F0:DF:1A:99:02:7E:05:21:EC:A0:13:74:7C:8B:4A:16:8B:28
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:f5:95:d0:1e:e9:fe:40:05:01:5a:38:58:aa:01:15:25:
21:ae:50:0c:c8:9d:17:ed:8c:ac:e1:2b:a4:ea:44:a5:ec:17:
9b:17:d1:4b:4f:7e:ff:6e:7f:31:86:85:4c:8d:cc:73:be:94:
40:32:95:84:64:53:e0:c3:7d:05:08:7a:ee:a4:85:33:90:ae:
bb:cc:93:89:4b:e8:84:6b:72:03:51:66:6c:69:d5:d1:a8:3d:
e7:93:f4:95:df:e5:08:07:7c:c1:04:d3:59:8c:15:31:69:a8:
3a:30:d7:4e:74:f1:d1:b8:ef:6d:4d:b5:63:44:02:ac:f5:b2:
a3:2d:7c:e8:78:a4:84:74:0b:b0:7e:4f:36:33:ed:a6:30:79:
a3:2a:33:7e:0b:bc:5d:cc:00:ac:1d:a8:94:b5:be:80:7f:6e:
a6:d3:cd:8b:72:fa:96:ef:71:ba:c4:c5:80:22:cb:b9:c3:d7:
f3:bf:90:e8:79:ff:60:e7:1d:ce:b0:05:19:ad:87:68:5f:e1:
87:e6:65:72:31:dc:55:d9:0a:7a:38:b1:8d:e8:14:df:aa:0b:
74:62:fb:40:d5:75:95:cb:6c:a0:b7:94:b1:0a:50:59:36:95:
aa:7f:40:54:62:1d:fd:09:ca:40:85:95:9d:7c:27:22:6b:2f:
f4:06:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 22:40:12 2026 by rpki-client