Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: sU3e7kVP+eRb8y1WtT+cqRULWxZU5Lz5/K/LdCLRUmk=
Subject key identifier: 03:9B:7B:94:E5:9B:D7:D5:AE:57:89:08:54:C0:7A:F5:31:89:B5:35
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 653F8403A254A7260E3AD3D61CF97D849F98954F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02BE
Signing time: Sat 04 Apr 2026 18:19:49 +0000
Manifest this update: Sat 04 Apr 2026 18:14:49 +0000
Manifest next update: Sun 05 Apr 2026 21:00:49 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: W10v+zJuiHDrRwurXaqeBNoTGFXphYie+lmCRQYeOYk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:84:03:a2:54:a7:26:0e:3a:d3:d6:1c:f9:7d:84:9f:98:95:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 4 18:14:49 2026 GMT
Not After : Apr 5 21:00:49 2026 GMT
Subject: CN=039B7B94E59BD7D5AE57890854C07AF53189B535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:61:59:ba:f7:0b:f4:37:f4:79:f4:d8:23:
8f:5f:24:3b:87:8f:46:f2:f2:ac:4d:a6:c7:7a:93:
1a:07:3a:63:30:1c:9b:9c:92:43:aa:d3:c2:e3:10:
74:fa:d4:fd:4e:24:ff:23:69:3b:d5:f5:cd:54:7c:
a0:7c:f2:e7:9f:1a:07:48:59:48:c5:48:47:52:65:
82:9c:02:e2:ce:31:14:73:8f:d2:9a:e2:04:0a:f1:
20:54:be:84:18:64:23:75:e7:16:26:c1:e0:9e:32:
09:ac:96:bd:a2:b4:12:6d:cf:7a:76:e3:a1:be:02:
e3:a8:37:c3:ae:ed:90:86:08:76:ff:3d:0d:f3:d3:
cb:68:4c:83:5d:5e:6a:b9:6d:e6:ce:dd:3e:49:b5:
c1:e3:eb:79:02:af:3c:dc:8d:35:ea:0d:02:ef:50:
61:7b:42:cb:7a:7b:8c:b2:20:83:9e:37:7f:24:fb:
45:74:72:19:00:18:30:19:a2:a5:39:23:c2:a1:23:
83:ac:7a:d6:c9:a9:e9:c8:80:c5:66:bb:2f:52:fb:
a9:fd:1a:7b:00:a1:af:fd:e1:89:19:61:86:fa:d3:
a9:96:64:60:96:02:27:dc:e0:39:70:d6:07:f0:da:
58:e9:df:84:59:57:84:d0:e2:68:06:d8:40:61:05:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:7B:94:E5:9B:D7:D5:AE:57:89:08:54:C0:7A:F5:31:89:B5:35
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:f3:0d:79:3c:10:a0:9b:87:e3:51:0c:e1:08:11:4a:b3:
2c:86:54:27:01:f0:db:be:13:57:f9:7f:c6:9a:c6:42:c4:f2:
ea:c4:da:1e:2e:7b:bd:75:d1:fe:2a:80:85:fe:3a:96:95:c0:
c3:15:f2:4d:b7:8e:ee:fa:df:8d:ee:b6:83:16:bc:a3:cf:7c:
ed:e9:75:7b:bb:bd:aa:c5:bd:2d:83:f7:97:12:bf:70:51:9f:
de:d6:69:00:6e:a9:72:24:79:4b:ae:b7:2f:dc:f4:0f:a5:3e:
d4:3c:e6:f1:3e:7d:12:df:36:8f:fa:0f:f6:79:e5:b4:31:60:
9d:cb:47:34:5b:83:73:04:3d:99:08:eb:5f:1a:b3:3c:d4:32:
3e:08:0f:8a:52:24:ef:53:f8:52:85:90:56:cb:7c:74:7a:53:
53:46:8b:62:d9:62:52:3a:1a:3a:62:b0:67:d2:bc:57:8a:b4:
05:90:d7:a9:a5:c3:ec:2c:fb:0b:fe:d1:08:ad:51:f4:92:bb:
bd:d4:09:e0:fe:78:fc:cf:3a:e2:26:9f:0a:72:7d:27:b4:bb:
65:ee:40:17:24:f5:2e:25:0a:a6:c4:28:88:12:11:4b:99:fd:
9c:da:e4:d2:95:94:4b:8a:68:e8:ec:7a:28:79:ab:80:ab:d9:
53:58:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 05:04:14 2026 by rpki-client