
Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: O4UB9RjGSEJR4JJM+SpnkAVpxcjptYyTyVYCsSyFg1k=
Subject key identifier: 5B:41:3E:0E:D5:52:E0:17:F0:27:88:9B:17:8E:0B:78:F8:2D:C8:D7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 46E165CA46CF53C549A642E2BECA7FAACA7E6EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 037F
Signing time: Wed 26 Aug 2026 08:06:54 +0000
Manifest this update: Wed 26 Aug 2026 08:01:54 +0000
Manifest next update: Thu 27 Aug 2026 08:26:54 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: NkeY8lY0+ROb+BLGJ/BMQGKAK29g5/Sy0B1ZgEFqvL8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e1:65:ca:46:cf:53:c5:49:a6:42:e2:be:ca:7f:aa:ca:7e:6e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 26 08:01:54 2026 GMT
Not After : Aug 27 08:26:54 2026 GMT
Subject: CN=5B413E0ED552E017F027889B178E0B78F82DC8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:25:44:0c:65:22:ab:25:ad:7e:4c:58:ea:
df:e3:76:e8:04:b5:45:a8:12:53:fb:7f:7a:9c:8a:
94:7f:4f:af:7d:73:ae:71:f6:f0:e5:7a:95:e5:5d:
70:1b:42:5c:39:be:e3:29:aa:a1:2f:e8:7a:f7:2b:
49:11:68:d6:5a:12:ac:93:62:20:4f:4f:1d:8d:13:
93:1c:56:7e:82:9a:d2:6f:1f:9f:97:1a:63:9c:23:
45:41:af:13:43:71:8c:8a:95:f0:4d:57:ea:cb:ed:
7a:0d:da:94:92:1f:4a:e4:ad:4e:a2:0b:6e:3d:2b:
de:52:ef:4d:60:da:74:70:91:46:82:e5:41:c0:35:
c8:dd:6a:a7:7e:db:f0:2f:07:57:84:4b:02:26:fb:
a0:37:a2:38:dc:28:27:3e:bb:aa:a8:44:f0:32:9d:
53:ca:5a:c5:4c:c3:6f:60:ec:3e:05:1c:2a:4b:f4:
19:75:b9:cc:c6:84:42:b9:be:c1:dd:f5:80:13:5f:
9a:c5:a4:11:1d:c8:f2:49:1e:8e:55:25:33:c9:8d:
19:99:d1:4f:0f:d1:e5:d8:87:c7:86:b9:51:70:5e:
7e:97:0a:7c:ab:5c:ae:43:e1:18:fc:4a:8c:a8:90:
90:76:6d:b1:a5:70:8e:d8:68:f7:09:22:6f:91:68:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:41:3E:0E:D5:52:E0:17:F0:27:88:9B:17:8E:0B:78:F8:2D:C8:D7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:32:49:ec:38:55:c0:c7:e6:92:d5:b0:e4:78:ba:aa:76:99:
46:59:75:f8:81:d3:d4:a5:0c:43:78:86:18:99:d3:a6:4d:2e:
7e:8b:d4:e8:3c:28:79:c1:c5:3e:8f:6d:ff:09:0e:8f:fe:8d:
1f:2e:6f:72:1a:7f:9f:3c:5e:74:85:47:21:fa:76:92:59:3f:
d8:e2:ca:ba:b7:9a:9b:d0:00:1c:09:41:3d:9e:7c:ee:dc:d2:
6d:35:0f:f6:34:d0:26:be:f5:8a:37:21:e3:e1:33:d4:23:44:
16:3b:26:2b:c2:9a:c5:c5:73:1a:9f:2d:99:c3:be:b3:7b:50:
5b:13:8d:33:be:ec:58:c0:0e:d5:45:47:7e:56:bf:b1:e5:00:
50:9f:bf:03:59:69:d6:cf:a8:3e:20:75:4d:82:f4:69:b4:c8:
de:54:29:e1:38:c6:35:1d:26:cc:13:b1:bd:a1:8c:00:78:c2:
73:51:b8:d0:09:0f:85:93:93:c4:b3:70:ae:4b:8b:c9:19:ab:
78:1c:73:b7:d5:f0:69:30:6a:60:ad:24:25:4b:e2:c9:b7:49:
86:20:55:73:6b:09:bc:77:c2:08:80:09:fe:9b:aa:a4:a4:e4:
03:0c:08:7f:5c:9a:30:80:4d:78:12:48:83:30:ff:ea:c9:64:
56:57:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:06 2026 by rpki-client