Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: FaGCH2NCOWNH3DOaChpLQQYdVAOA4lFVQvvZlpdBW8E=
Subject key identifier: DE:DC:C9:6A:78:F6:8C:8F:69:00:00:2A:48:46:C3:CD:54:6B:FE:93
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 48EDA02F39923E44D6FE00A9114423A5B00BE48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A2
Signing time: Sun 15 Mar 2026 01:37:39 +0000
Manifest this update: Sun 15 Mar 2026 01:32:39 +0000
Manifest next update: Mon 16 Mar 2026 02:27:39 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 2TyqoyMhsdGA4QpMATNlBBauS3bXT7FG5COkud8Vor8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 02:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ed:a0:2f:39:92:3e:44:d6:fe:00:a9:11:44:23:a5:b0:0b:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 15 01:32:39 2026 GMT
Not After : Mar 16 02:27:39 2026 GMT
Subject: CN=DEDCC96A78F68C8F6900002A4846C3CD546BFE93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:89:5a:60:1a:7e:0d:b1:03:3a:c4:9e:63:
68:e3:a4:28:c7:50:57:e0:7a:10:40:61:fc:ae:fe:
df:79:e9:d2:51:81:a2:72:59:a1:4f:7d:7d:b2:85:
e9:8e:2e:88:96:7b:f8:a0:4d:95:5b:db:0d:9d:a7:
5f:d7:0c:08:be:79:78:32:5c:8a:31:b0:28:61:b1:
c5:6a:9b:0a:90:89:0f:b7:2c:f1:68:8e:75:14:15:
5e:8f:a4:11:66:47:4e:5d:01:f2:fc:67:df:18:53:
1a:79:4c:60:0f:5e:5b:3d:97:9f:7b:c7:85:52:6a:
24:15:d1:87:41:10:95:60:4e:5d:e1:1d:f1:33:85:
e3:66:93:4e:54:e5:59:d4:27:49:01:9a:12:74:76:
3c:91:bd:41:d8:92:2e:5c:01:0a:fd:62:38:d6:3c:
32:b5:fa:58:71:cf:a9:d3:81:ce:3a:80:0f:a9:9f:
85:e6:97:e3:c1:c6:a7:d0:64:2b:0e:d4:ae:0d:0c:
96:12:4b:e7:3f:cf:35:6f:1d:88:c9:8f:82:6d:49:
3c:77:64:92:cc:1b:e2:2f:6d:c2:0f:a8:b0:4a:60:
69:13:1d:14:84:f7:c8:d8:09:be:06:e1:3b:0f:47:
35:28:c3:90:57:75:ba:30:94:d3:88:61:4f:25:28:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DC:C9:6A:78:F6:8C:8F:69:00:00:2A:48:46:C3:CD:54:6B:FE:93
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:03:8c:bc:7f:79:00:6f:25:7e:3b:9f:a6:4d:a0:5f:0d:81:
a6:86:af:19:fb:06:62:74:88:d7:9f:7d:af:2d:bc:f3:45:88:
2d:74:3b:55:0e:48:02:88:7b:16:3a:1d:04:84:53:7c:15:ce:
ec:3b:20:05:05:b5:84:20:b6:1c:f6:01:86:c6:b8:56:d7:72:
15:eb:1a:82:8e:e4:a3:6f:6a:b7:e7:8e:07:0c:7c:86:a6:40:
0f:51:6c:01:58:02:3e:16:62:0f:e6:62:4a:2f:ee:d1:3f:6d:
f5:98:62:09:b6:69:af:a2:a2:c0:77:b7:15:d7:c6:64:11:3d:
ef:2e:d1:25:a1:bf:0e:97:3f:d0:bc:ad:4e:e2:95:37:75:58:
7b:4e:bb:b2:1c:5c:66:61:a0:9a:26:6d:37:5c:54:8d:1a:0e:
13:2e:29:e0:05:70:48:d5:f1:3e:cf:14:3c:b9:f5:bb:06:aa:
38:6c:63:35:fb:03:b3:38:86:69:ea:05:60:c4:75:e0:80:0c:
cc:c9:28:cd:94:b9:3a:5a:7c:3e:8c:e7:ed:a1:ea:99:5b:cd:
92:a9:99:9f:81:4d:dc:f5:2c:de:48:57:e6:ac:95:31:0d:33:
36:e7:90:18:e9:20:8c:94:eb:a4:22:4d:90:3d:fd:77:aa:5e:
d6:0f:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 19:22:43 2026 by rpki-client