
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 7QzRWsOZ2b1ikTg6hPf/j82q23C5Y97Nd58fgi7bIpM=
Subject key identifier: 22:8A:29:7D:16:45:66:93:83:00:44:14:13:E1:32:B8:92:52:E7:84
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5E2B836F48B844E0D6B8FBCB44E41CDE65FDD2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0306
Signing time: Fri 29 May 2026 04:53:16 +0000
Manifest this update: Fri 29 May 2026 04:48:16 +0000
Manifest next update: Sat 30 May 2026 06:33:16 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: xgYehektqtD2niDMgykSdGiMAb0/m00wDqIW8gHhMSI=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 06:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2b:83:6f:48:b8:44:e0:d6:b8:fb:cb:44:e4:1c:de:65:fd:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 29 04:48:16 2026 GMT
Not After : May 30 06:33:16 2026 GMT
Subject: CN=228A297D164566938300441413E132B89252E784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:10:a2:e8:a7:66:2a:0f:a4:e5:26:f6:6c:
2f:74:f4:8c:17:0b:1f:bb:b0:8c:c1:33:63:12:da:
69:7d:bd:7b:9b:e7:57:d7:54:70:14:a2:22:b9:a3:
58:24:7a:c6:c5:81:b3:61:c5:c4:c1:33:5d:4e:91:
1b:f8:9d:85:62:93:78:a8:9e:a4:13:57:5a:2b:51:
ac:b2:d9:66:69:4e:51:dd:8d:9d:f4:de:c5:9a:84:
02:66:03:80:a2:44:5c:6e:86:80:4d:f8:6e:6e:54:
4a:e3:22:82:6c:c4:96:a7:f0:41:cc:6e:05:b8:04:
88:c1:43:a7:c2:dc:0b:41:20:21:5a:b8:4b:7a:f5:
91:87:26:9d:cc:2e:72:0a:22:09:4d:84:51:5b:96:
51:89:79:0e:f8:e7:bd:ed:0c:a2:15:30:69:66:c9:
bb:e1:ce:cb:13:2f:83:7e:65:3f:c8:d3:4e:8e:c7:
65:f5:f2:06:45:05:31:c5:cd:87:72:f4:be:23:d9:
28:2a:e0:cc:40:d1:ad:e5:87:36:81:e0:88:26:2c:
93:ee:04:45:2f:bb:5d:c8:45:5b:c8:31:71:3e:83:
12:8c:8a:d5:61:7b:eb:0b:61:ef:e5:67:6b:17:3e:
cd:4a:2f:38:ee:18:09:83:20:b5:1f:84:5c:c4:de:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:29:7D:16:45:66:93:83:00:44:14:13:E1:32:B8:92:52:E7:84
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:87:05:fb:39:bf:35:86:4d:77:35:25:1d:f8:16:d3:23:
3d:6b:75:ab:f5:c5:d9:c8:ff:2d:dc:8e:d1:c3:e7:b4:4d:d8:
79:d1:38:cf:04:06:ff:16:89:d6:04:34:26:a9:70:90:cf:4c:
f6:2e:8d:02:e2:1e:83:75:09:a4:0a:9b:22:67:9c:96:14:a9:
d2:14:a1:e1:e7:49:3e:6d:c4:cc:c6:fe:f0:95:20:df:25:9d:
cd:c3:23:1b:f0:40:2b:b0:f4:8c:58:80:0e:e0:49:68:54:49:
b9:5c:15:58:18:be:1c:71:fd:2e:4c:c7:5f:4a:ab:7c:e6:f3:
ef:fb:3e:b5:b1:8a:15:2c:a9:cd:b5:ec:d3:79:fb:86:16:6c:
28:d7:8b:6b:03:ab:6e:e1:16:0f:60:87:aa:bf:9c:a9:97:c1:
01:ac:54:e9:cc:2a:e2:97:6c:5d:e5:7c:9c:27:dd:cc:8e:d8:
08:09:33:3c:29:ad:67:ed:5d:7f:a2:de:bc:ff:98:97:7f:dc:
54:75:a1:1d:4c:23:09:fb:d4:c8:92:55:76:10:e4:d7:2d:e2:
0b:1f:7f:3d:4c:e3:92:0a:fb:85:5f:e8:e8:c6:47:e6:70:77:
7c:36:f0:60:9f:ce:44:eb:00:98:1d:38:0a:91:e4:32:5f:89:
60:ce:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 18:59:53 2026 by rpki-client