Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 1QnnNKB3binzTKE0musUzbkiqnlSrmxAm1kcZU+LH9Y=
Subject key identifier: 98:C6:6F:B9:1C:F1:B4:DA:82:F8:6A:6B:D4:F4:AB:D2:B9:4F:7F:05
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 402011AFA8B2EEB47B9F97D374B1FB6F0C116DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03A2
Signing time: Mon 21 Sep 2026 23:08:38 +0000
Manifest this update: Mon 21 Sep 2026 23:03:38 +0000
Manifest next update: Wed 23 Sep 2026 01:20:38 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: qB+QwlmqFtqkOUT265NMOWJnl9/RRd8mPYxMYLFEl4g=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:20:11:af:a8:b2:ee:b4:7b:9f:97:d3:74:b1:fb:6f:0c:11:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 21 23:03:38 2026 GMT
Not After : Sep 23 01:20:38 2026 GMT
Subject: CN=98C66FB91CF1B4DA82F86A6BD4F4ABD2B94F7F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:27:45:93:07:96:07:bc:87:7c:16:5b:43:
1a:38:34:fb:38:a3:3c:10:f2:0f:67:62:f8:e8:a4:
e0:cf:bd:bd:f9:4f:90:e0:ac:fd:46:b6:f4:38:8c:
2c:e7:45:b9:d2:54:af:1f:68:64:0d:77:68:d7:60:
61:be:3f:be:c2:60:77:27:b6:b0:8e:15:33:da:67:
2e:b0:33:25:b9:72:60:22:cb:02:ac:09:d2:d0:9b:
6f:65:90:b4:a4:72:74:cb:72:6f:58:9b:e1:51:40:
ee:c0:5a:fc:4c:20:08:8f:9c:06:d4:11:b7:cf:d6:
2b:48:7b:23:c7:86:b9:4d:58:95:ee:45:12:b4:cc:
ad:85:f4:38:58:42:a3:bd:25:cd:f6:84:5e:5c:84:
29:47:54:10:10:9a:66:b6:92:ca:75:62:19:f6:92:
2b:3d:10:1b:b4:22:f7:5a:bb:e7:11:23:5e:69:54:
1b:73:2e:37:73:91:04:c8:95:b8:7e:91:e8:c7:9a:
f5:6c:fe:c5:93:49:1f:c1:76:78:5d:6b:e0:b1:31:
45:85:3b:e2:98:72:a5:b1:4c:90:32:fd:4b:1d:8d:
5c:07:f7:34:7c:b5:81:26:f2:99:14:8a:d2:64:f7:
29:6e:70:08:14:5e:fc:4f:26:8d:f4:b4:ff:95:9c:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:6F:B9:1C:F1:B4:DA:82:F8:6A:6B:D4:F4:AB:D2:B9:4F:7F:05
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:b6:54:00:8d:ed:63:2f:33:e3:16:be:34:80:83:71:16:
b4:47:44:47:fd:3c:1e:15:db:19:83:88:f7:9a:61:f5:77:07:
fd:69:b2:68:e8:bc:fc:64:74:bd:da:5f:49:1a:ff:b9:c5:de:
88:b4:54:a8:86:ee:be:2e:23:11:39:51:fb:b0:1a:e8:1b:10:
41:bf:ee:b7:a8:c3:d0:9a:86:2c:29:5e:36:10:f1:47:ea:2b:
82:cd:c5:7e:b2:13:61:98:06:24:a4:80:28:57:93:b7:01:f7:
35:bc:41:89:4d:eb:a3:11:c2:76:a7:7c:14:b7:1f:48:86:96:
cf:0a:5c:ed:ce:86:98:8e:f6:9b:40:a9:a0:2c:7a:06:8c:8d:
98:ee:10:e3:4d:9a:0b:53:ca:d0:b3:41:7b:5e:19:c2:73:06:
fd:a4:37:2b:c1:7e:10:ac:77:5c:6f:bc:99:35:8c:e2:02:ea:
79:d4:53:1b:b7:31:c8:75:c4:ee:e3:a7:48:32:97:fe:3b:ea:
fe:27:18:51:1e:94:ae:db:3e:8f:88:c0:fb:dd:82:74:e9:cc:
7f:bf:02:05:07:2b:bc:f7:47:57:10:bc:7c:eb:16:b8:af:85:
65:15:f2:9d:48:c4:c0:39:de:ed:21:aa:82:e2:7f:a2:af:f8:
0b:9f:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:32:34 2026 by rpki-client