Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: mO24+40TFXVRRm8+Zl4/VSUJfS+MfQMIxbvVWlxU41Q=
Subject key identifier: A8:2E:DC:C1:7B:AF:72:E2:61:A8:6C:3D:92:C0:08:8D:90:C2:9D:02
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 7571444E6C9E51B371D10B6D6B39A691EF791EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02B2
Signing time: Thu 26 Mar 2026 20:18:53 +0000
Manifest this update: Thu 26 Mar 2026 20:13:53 +0000
Manifest next update: Fri 27 Mar 2026 22:33:53 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: JPtyd5h4V97HcWGhKXmAqAoCD3qmzH/rBKHgoJFCOJs=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 22:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:71:44:4e:6c:9e:51:b3:71:d1:0b:6d:6b:39:a6:91:ef:79:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 26 20:13:53 2026 GMT
Not After : Mar 27 22:33:53 2026 GMT
Subject: CN=A82EDCC17BAF72E261A86C3D92C0088D90C29D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:77:71:75:06:c6:9b:67:5e:73:6b:f0:b5:
7f:2c:68:23:e6:17:4d:86:34:f5:d4:c5:6a:e2:ec:
8a:7c:cc:cc:81:dd:ff:bb:bf:82:89:49:22:40:63:
4c:54:f8:5a:5c:e4:22:48:ef:8b:06:25:38:b1:01:
5b:f6:f2:d2:99:42:56:b7:8c:8d:eb:91:ca:9b:d7:
3c:53:4f:ad:29:18:0b:31:90:c3:9c:1b:d4:32:18:
72:85:75:3a:6f:4f:44:2f:9f:3a:8f:b2:8f:c5:b7:
c4:d6:d9:65:bd:54:7d:cb:fd:47:0b:71:37:e9:f9:
ce:ad:f1:c2:a7:53:fe:8b:9b:43:2c:d6:66:8b:45:
ba:df:c4:62:e3:7b:5a:56:2e:44:21:c7:30:0e:7e:
c5:0f:01:3a:6d:17:88:cb:d5:cb:31:0d:70:b3:7c:
02:e8:bb:8f:6e:55:7d:0e:83:19:00:9e:d5:7e:d5:
f8:f4:95:49:f9:97:c8:94:66:cb:b4:7f:03:60:b0:
c8:9f:1b:c7:37:65:b7:c8:d7:86:d2:2c:cf:1e:36:
4b:21:1e:76:95:dc:4f:dc:3e:c1:11:6d:02:88:1f:
94:6b:16:e3:6b:3d:56:bb:b5:2f:20:71:2d:5c:b0:
1a:fc:ba:89:0b:7e:d7:36:1a:de:cd:98:88:b7:53:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:DC:C1:7B:AF:72:E2:61:A8:6C:3D:92:C0:08:8D:90:C2:9D:02
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d8:e5:64:b3:da:fa:a4:ed:5d:8f:40:3c:28:c5:e3:47:81:
f1:f5:60:cc:1a:f3:eb:57:27:41:dd:f0:11:2f:c5:d4:57:77:
b2:20:29:6c:f2:82:e7:dd:9a:1c:a3:7c:b2:92:e3:d4:9b:0b:
9e:9b:08:b0:e7:b3:4e:ec:d6:c6:6b:3f:46:0b:5c:77:db:e3:
d4:49:fa:29:05:d4:c7:51:ee:05:51:54:1f:8d:04:0f:a9:84:
24:11:62:80:11:ee:eb:24:5d:18:0c:f8:10:79:cd:0e:fa:c8:
f3:14:a2:5e:4c:d6:e4:c8:67:91:17:57:c1:43:10:45:ee:8a:
13:39:3b:1a:aa:c3:2d:0e:98:9c:bd:ef:20:ea:af:a8:ee:ee:
94:98:4b:1a:51:d9:8e:76:65:e6:ac:3a:06:24:f6:68:5d:1f:
e7:e5:5c:6c:33:8c:6d:6b:98:82:f2:3f:a3:9b:ed:0b:b8:a1:
ff:e1:2f:c0:ac:95:c6:31:a1:7d:2b:97:3c:99:46:7b:48:2f:
a8:dd:30:0f:06:ef:89:7c:1b:5c:e8:a8:1c:80:3e:4c:87:14:
ec:57:7a:47:04:e1:31:6d:a7:c8:e2:58:76:33:4e:cc:a3:08:
4b:f5:5a:c0:2a:ab:7a:51:cc:33:56:53:01:eb:d6:0c:5a:06:
74:6a:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 10:50:58 2026 by rpki-client