Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: au0xBYFC4hsAw1AuXV3IOzIFtRKyjPmZ0GW6hUyqTLU=
Subject key identifier: 2B:26:FF:37:58:90:9E:3C:13:22:EF:18:3C:CE:C3:D4:ED:B2:FE:96
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 25B315F2A1A3632439907D416503E0A810C213C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03CF
Signing time: Mon 26 Oct 2026 00:06:50 +0000
Manifest this update: Mon 26 Oct 2026 00:01:50 +0000
Manifest next update: Tue 27 Oct 2026 02:01:50 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: VBEt40pJneZbkpEX0oWYuPLQS32WMECsc73pivBj+Ko=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b3:15:f2:a1:a3:63:24:39:90:7d:41:65:03:e0:a8:10:c2:13:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 26 00:01:50 2026 GMT
Not After : Oct 27 02:01:50 2026 GMT
Subject: CN=2B26FF3758909E3C1322EF183CCEC3D4EDB2FE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:19:2b:79:cc:c1:25:58:5d:5f:fb:da:3e:
2c:15:b0:e8:0b:bb:d9:c9:17:5f:71:b8:a7:8a:44:
8e:e5:f0:ef:c6:21:7a:cc:dc:25:1a:fd:15:3a:12:
d0:47:2f:51:9f:b0:6d:53:f7:62:dc:fa:43:38:95:
3c:42:f1:31:e8:de:83:35:01:7b:0c:ef:60:35:16:
a4:4a:58:9c:5c:fa:8c:b4:19:55:6b:12:e5:f0:5a:
f8:29:e2:a9:cc:ac:26:d3:b6:14:51:89:21:00:78:
ac:40:5c:d0:08:bd:0d:db:ee:7e:e4:b9:30:ef:1f:
dd:e7:c9:63:a1:27:d0:43:fd:01:14:ce:79:42:56:
f5:76:78:bf:bd:f3:e0:f1:77:19:d1:e3:0d:96:a9:
3a:a8:8a:d9:9a:70:4d:5b:d9:e3:2f:25:65:b2:4f:
7d:96:b7:15:85:f8:bb:16:58:b9:f7:13:96:60:a1:
1d:eb:a2:18:24:6c:df:2c:7e:1e:92:2f:11:0f:54:
89:89:d1:84:6d:7e:f4:66:a3:73:65:cd:11:41:77:
7b:a2:05:9a:4f:14:db:6c:16:5c:02:5a:f6:6e:d8:
0d:e7:fb:e5:04:6d:75:29:3c:23:31:8d:82:6c:aa:
f2:5a:99:cc:9a:34:7a:c0:7d:ce:ef:c0:45:4d:b9:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:FF:37:58:90:9E:3C:13:22:EF:18:3C:CE:C3:D4:ED:B2:FE:96
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a0:61:13:83:67:a9:73:1c:bd:25:02:e0:63:f5:5b:bb:36:
ef:0d:73:51:67:cb:8b:06:0c:30:c6:44:18:67:00:d1:31:dd:
83:3b:1a:86:45:90:60:65:f7:cc:af:79:31:f8:66:6c:56:91:
d9:4f:d5:23:da:b7:1b:34:6b:68:2f:6e:67:98:b8:d3:13:f1:
3f:87:33:6d:51:d9:d1:73:32:78:e4:c5:fe:4e:7c:b5:90:18:
da:9a:76:96:b7:03:b1:9b:6e:e2:7f:50:91:de:5d:02:38:f7:
7b:22:57:b0:ae:96:5b:42:42:41:e2:9e:6a:0e:89:39:33:2a:
28:28:47:b6:a5:8f:18:e5:34:b7:be:0c:de:b4:f7:fc:af:eb:
e3:fd:3b:38:5e:71:f3:18:d8:82:8d:91:8d:d5:60:34:86:8f:
a2:c7:dd:8e:55:08:24:36:9c:d8:ef:43:bc:d2:3f:68:aa:9c:
6e:44:d4:ff:74:9f:9e:70:7b:67:28:30:4d:a5:6c:70:87:24:
3d:d6:33:b2:ad:90:ba:5a:2f:cb:bb:77:d3:5b:60:d9:15:1f:
a4:4d:f2:6a:ad:c4:7d:92:a1:6f:16:79:9f:85:b5:57:46:1c:
91:4e:2e:60:15:d1:ee:c8:f2:d2:48:5b:54:11:f6:0b:58:f5:
a0:90:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:20:56 2026 by rpki-client