Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: zG93Ks7tUJTL9LUa4irTtrMIR3Sd0C2Z7Dy5XY77fCo=
Subject key identifier: D8:2A:DF:31:A6:0E:24:4B:6D:B7:A7:7B:4C:04:3A:F3:DB:AA:7D:A6
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 7F8A34356DB902E27B41AED7127EA10D5E11533A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02EB
Signing time: Fri 08 May 2026 08:32:26 +0000
Manifest this update: Fri 08 May 2026 08:27:26 +0000
Manifest next update: Sat 09 May 2026 11:44:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: XTiYHXRxRo50Gr80BVAaJTbJgLUdAeM6dNdQisEqlr8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 07:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8a:34:35:6d:b9:02:e2:7b:41:ae:d7:12:7e:a1:0d:5e:11:53:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 8 08:27:26 2026 GMT
Not After : May 9 11:44:26 2026 GMT
Subject: CN=D82ADF31A60E244B6DB7A77B4C043AF3DBAA7DA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:93:7d:11:08:70:df:85:28:6a:6b:29:c8:
e0:f0:5f:a2:1e:11:95:73:7d:52:0b:d9:16:ee:c9:
b7:f6:a5:a7:b3:cb:b6:06:b3:ba:81:0a:53:eb:0f:
62:75:ce:a4:6c:ed:30:40:f1:cb:0f:55:bd:f0:64:
3c:6f:d1:e9:52:24:d6:57:5f:17:bf:b5:64:09:58:
72:3c:14:e9:36:b2:f0:9b:9f:7a:e4:49:0c:c8:5d:
e7:da:98:03:73:b9:5c:2f:00:2f:48:23:76:93:f1:
24:72:15:3f:c0:61:0b:7c:4f:ec:5f:17:d7:13:62:
97:d8:5c:19:c3:e4:ba:92:05:c5:a5:59:9c:15:ad:
3c:48:21:60:47:ea:8f:ba:64:67:6d:26:44:55:3c:
fe:25:b0:e0:1f:6f:5f:e1:59:41:29:de:56:c7:27:
ad:39:ba:b1:e9:57:fb:b1:7c:ed:b1:7f:59:06:d8:
59:15:31:85:8e:4e:e9:58:ac:12:a6:82:f2:2d:b2:
ba:57:6f:12:0b:85:4f:24:12:4a:96:28:b7:83:4e:
56:26:bd:51:08:a8:b7:c4:e6:7e:4f:fd:f0:e9:f1:
ea:5a:e5:23:b2:de:95:ad:b5:2a:38:87:7d:01:c3:
9e:fd:49:63:dd:b0:d2:98:3e:d8:e9:19:2a:45:f4:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:DF:31:A6:0E:24:4B:6D:B7:A7:7B:4C:04:3A:F3:DB:AA:7D:A6
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:59:33:46:0c:1d:bd:ea:a8:63:20:a7:f1:84:46:bd:c3:e3:
4d:c8:36:48:56:12:2f:ef:1d:d3:d7:05:38:dc:66:01:6a:2f:
a0:1c:b1:f0:fb:5b:63:53:67:c8:00:62:53:71:ad:2d:ed:c2:
87:bb:de:2b:10:3e:e3:b5:57:12:9c:79:bd:f6:fc:29:e3:5c:
88:58:fc:9f:f1:b8:28:1d:14:65:28:98:e8:cd:e8:dc:86:a4:
f7:7f:2a:b1:e4:46:84:aa:9f:15:78:f4:b5:4d:27:50:f1:ac:
33:31:b8:c1:ef:86:f7:c8:6f:01:ee:61:49:22:ba:4f:70:fa:
40:94:ee:28:b7:c8:bb:29:01:8d:8d:31:33:12:bb:8b:fb:f7:
fd:3c:38:fa:04:74:83:fe:09:e1:32:a7:62:d5:56:f9:a3:8d:
3a:99:8a:f7:6e:06:fa:1b:37:8f:41:71:84:b7:2e:d1:2b:3f:
1a:42:9c:65:96:01:27:3d:5d:d1:1c:36:b0:42:aa:18:ab:c6:
a6:a9:4d:40:01:38:e4:96:4c:c9:4d:00:db:3f:9a:b4:5e:af:
4e:a5:d2:90:75:9d:cc:53:f5:e2:f2:ed:b1:d3:b3:10:e1:a7:
2d:99:c2:6e:0f:ae:81:c9:cd:71:2e:c7:72:37:ea:34:f5:66:
85:bc:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 11:09:34 2026 by rpki-client