
Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 6RPfsNNLwxfD3zJI9QfPp8wFr9VpU1x5OkaIvQNygVU=
Subject key identifier: 7F:3A:08:BE:16:37:61:CC:FB:A6:23:7F:06:49:07:B1:AA:D2:65:9A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 66FF7FE3969DD4B9D0063928145315E1264E772F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 037A
Signing time: Sat 22 Aug 2026 12:56:48 +0000
Manifest this update: Sat 22 Aug 2026 12:51:48 +0000
Manifest next update: Sun 23 Aug 2026 14:07:48 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: HVeDJA0kzanxakK88mPdRpSPHuLrXWA6RHstV1dA2nM=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ff:7f:e3:96:9d:d4:b9:d0:06:39:28:14:53:15:e1:26:4e:77:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 22 12:51:48 2026 GMT
Not After : Aug 23 14:07:48 2026 GMT
Subject: CN=7F3A08BE163761CCFBA6237F064907B1AAD2659A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:a8:c4:64:ad:e2:36:cc:da:94:2e:68:6d:
7d:9d:1d:05:56:ad:55:83:bc:a3:b6:ac:0c:c4:bb:
4b:8d:a7:ae:5d:f9:dc:77:2c:72:c5:5c:24:6d:83:
dd:fc:9f:50:54:e3:57:a2:73:af:77:90:46:8d:5c:
f7:75:14:ae:23:ca:af:0c:a8:ae:45:0b:16:4c:64:
11:23:ef:2f:4f:cb:40:a0:cf:67:e4:23:37:b0:79:
0e:49:dc:f7:81:a3:83:2a:70:aa:86:83:93:2d:ee:
43:56:92:02:66:24:de:04:27:bb:95:c1:2f:53:0c:
1a:4b:be:a9:96:cc:3a:66:50:f9:ba:33:ce:29:76:
64:d4:80:1c:a3:b4:f6:da:18:bd:4a:4f:ef:e7:2a:
e6:37:89:04:6d:30:78:1c:01:23:a2:b7:25:01:c4:
69:3e:eb:70:78:ea:a2:51:8d:22:38:56:6e:40:a2:
bd:87:ad:0d:51:d8:71:48:39:5e:20:c6:76:19:f8:
83:31:5c:dc:f9:82:52:54:e2:d8:20:60:ed:e5:49:
62:6f:dc:83:d7:8a:ea:d6:c5:c4:e2:aa:ab:21:35:
e2:30:1c:0b:86:df:24:ad:17:78:9d:ca:19:e3:80:
01:5f:be:f0:49:0f:82:d3:69:fe:99:80:08:39:28:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3A:08:BE:16:37:61:CC:FB:A6:23:7F:06:49:07:B1:AA:D2:65:9A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:57:36:80:c7:88:8a:45:bd:11:d6:83:a9:17:db:13:aa:
d9:20:8a:51:64:5a:b1:27:db:c1:ac:22:3b:fc:ce:32:d3:51:
87:bd:1f:5d:f1:ca:e9:e5:5f:f4:be:0a:58:f1:a8:e4:c4:df:
a4:82:08:80:e9:88:47:b1:a8:eb:57:16:01:4f:ce:c9:24:6a:
d5:cd:d3:c8:c9:c3:4a:16:34:c4:e4:08:ef:7d:b9:a6:49:bc:
69:d8:cd:87:75:af:c9:d2:61:90:52:68:75:7f:70:c8:4b:d4:
3d:85:0e:40:64:cc:b8:36:3d:b9:ec:31:4f:92:62:bb:70:c4:
df:31:41:98:e3:ee:8c:8e:8f:fa:76:c8:0d:eb:be:ad:46:8c:
0b:c5:7c:21:31:5b:43:91:75:91:cc:8c:9f:e4:a4:80:5f:00:
42:c9:16:86:22:07:17:4a:09:57:3d:9e:af:19:43:85:74:9e:
7e:59:af:3d:e8:e6:18:cd:98:5d:9f:b3:e2:aa:d7:2f:f0:9c:
a1:7c:da:2e:ab:05:27:c8:d4:17:c1:3a:93:aa:c0:b8:8e:f2:
ca:80:d5:95:9a:d0:3b:f6:4d:38:b4:ef:e0:4f:1c:76:26:72:
62:0f:4c:6e:87:68:01:fa:1f:3e:e1:4f:57:20:66:1f:bb:45:
1d:75:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:16:05 2026 by rpki-client