Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 3ZC6G1Biq8qeVvk6YWdQOcGQ2MYrhgp+GoCZmFkfp28=
Subject key identifier: 5C:2B:5D:46:D9:7A:02:20:CD:AC:C1:88:B4:09:CE:0F:3E:E5:4E:1A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 63564DD0ED4EB345E6DED22AB587FCE158246E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0309
Signing time: Sat 30 May 2026 12:52:08 +0000
Manifest this update: Sat 30 May 2026 12:47:07 +0000
Manifest next update: Sun 31 May 2026 13:43:07 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: lXbGzrzbki1bOdQnxCZ4Zluy0wAzGvms3q93PuQzQao=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:56:4d:d0:ed:4e:b3:45:e6:de:d2:2a:b5:87:fc:e1:58:24:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 30 12:47:07 2026 GMT
Not After : May 31 13:43:07 2026 GMT
Subject: CN=5C2B5D46D97A0220CDACC188B409CE0F3EE54E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:5a:36:8b:20:c7:39:fe:d4:98:83:33:2e:
5e:39:1c:eb:fc:80:e8:8e:5e:7e:8a:22:84:17:c2:
41:e4:1e:e9:7a:ef:70:85:38:8c:70:ae:92:b0:31:
ce:c0:11:d5:9e:d6:dd:71:a4:74:93:08:ab:99:25:
55:91:e7:92:b7:15:0c:e3:c6:f8:4a:91:ff:c7:4d:
11:12:ef:53:58:8b:2e:e6:af:5b:10:ef:68:0d:51:
64:96:ed:12:6c:f9:5b:4f:bd:0b:d3:85:56:2c:62:
96:99:6f:dc:3a:78:ab:85:15:ec:e5:63:fc:6b:db:
8e:17:49:58:45:04:88:31:7e:bf:3a:e5:93:0e:68:
17:56:98:db:02:8e:d6:fd:5c:af:8e:56:bc:b8:1c:
89:4b:d9:57:7f:65:42:e6:2d:e0:4a:b3:ed:7c:a0:
e7:c8:ee:97:e2:5a:2c:fa:a7:32:79:70:16:24:4b:
39:34:14:6a:d6:fb:97:a7:a4:90:57:95:b9:1f:fd:
49:96:ea:05:ac:ec:bf:3b:c2:f7:2d:b4:67:a2:0e:
1a:89:78:24:2f:a0:f5:30:f5:b3:12:d3:47:ed:90:
57:2b:bf:1d:87:2a:05:f2:e0:5c:b5:44:d7:0f:a9:
5c:eb:19:2f:91:45:1f:83:41:9e:12:73:cd:32:e8:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:5D:46:D9:7A:02:20:CD:AC:C1:88:B4:09:CE:0F:3E:E5:4E:1A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:85:8d:35:2b:d2:4c:c1:fe:3f:0f:83:4a:0f:d7:30:d2:
72:3c:04:b5:a3:06:24:63:4a:2d:1a:5f:af:a9:a3:c6:c8:d8:
23:69:a4:98:85:48:a8:e5:15:6a:bd:ed:90:c7:87:16:f1:3e:
bb:42:1b:c9:c0:e6:00:1f:74:f3:dd:53:79:3b:81:9a:d8:01:
3e:d8:27:cd:87:d6:87:d5:f4:9b:34:19:9f:1f:f4:92:bf:d3:
75:c3:1d:0a:15:31:1d:e2:1c:14:0e:f5:42:22:24:3c:26:52:
51:e6:41:7b:cf:6c:69:90:37:eb:d5:d5:1a:6b:5a:b1:7e:57:
d6:c9:06:74:be:e1:a9:5f:dc:f5:1a:28:2b:54:0b:32:dd:65:
b9:dd:9c:6e:f3:11:2a:96:f5:13:f1:dd:6a:b0:9e:f7:f7:2c:
65:7a:f1:aa:5f:a8:55:c3:dc:ba:ba:40:8c:92:55:e1:b2:d3:
a4:d3:10:7d:36:6e:42:bb:9c:4c:17:9a:ac:55:4b:4a:c8:14:
ce:b8:52:c4:e0:5a:9c:be:5a:94:28:2c:a5:6e:f5:ee:cc:77:
43:ef:06:fc:6d:7b:fd:03:77:54:04:b6:a9:e2:16:c5:4a:fa:
eb:fe:8f:a2:88:eb:cf:47:bf:cb:13:f9:35:06:39:6f:18:a5:
49:e1:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 20:06:57 2026 by rpki-client