Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: GlFbEj6BkaEOisyy5A+t83iSMjLUjYDfO9kENgXfkPw=
Subject key identifier: D5:50:70:70:F1:68:7C:B1:76:E3:26:25:B7:07:CF:12:A0:A2:02:15
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 74C75682C75D1BE74EEAE246B38EA159CA1110D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02C7
Signing time: Sat 11 Apr 2026 14:45:26 +0000
Manifest this update: Sat 11 Apr 2026 14:40:26 +0000
Manifest next update: Sun 12 Apr 2026 15:50:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: omxBLrJg3RyI7uZ/v2aEzDBm4+FhwxZP/rX9iDfjLpA=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 15:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c7:56:82:c7:5d:1b:e7:4e:ea:e2:46:b3:8e:a1:59:ca:11:10:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 11 14:40:26 2026 GMT
Not After : Apr 12 15:50:26 2026 GMT
Subject: CN=D5507070F1687CB176E32625B707CF12A0A20215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:2f:d4:8e:36:26:f1:01:ad:b4:92:48:30:
90:ba:e1:86:f3:1a:0e:c9:c1:4f:69:c9:a8:16:b1:
82:5a:43:3c:03:eb:2e:56:cf:c3:03:2e:94:94:fc:
48:ca:dc:29:a6:5d:0c:30:0d:76:30:52:b4:12:ce:
95:9f:60:f6:65:7a:2d:47:9b:cc:49:34:49:9c:e9:
c1:f0:b9:f4:3c:8a:cc:ed:31:06:40:e7:20:4e:1c:
18:fe:a0:a8:a3:6c:38:0e:d8:e5:e9:fa:c3:57:c9:
41:83:cb:1b:2d:35:bc:d6:97:80:22:e8:ba:b7:62:
05:10:d9:9b:05:55:1c:86:49:91:52:d5:74:78:d9:
71:9f:93:ad:6e:3b:c3:84:64:61:39:7b:08:03:01:
e5:ba:6d:82:e4:b3:fe:d0:5d:e6:19:b6:70:a3:1a:
8f:f2:b1:8b:85:b9:31:bf:f9:41:94:8a:17:b5:5c:
37:78:86:06:21:eb:e2:2b:15:80:66:ad:e9:a3:4b:
ee:d9:ca:96:65:bf:21:55:55:dd:cb:ab:38:b9:3d:
af:72:39:8c:1c:ae:00:af:43:cf:b3:81:23:5c:56:
30:af:be:9d:23:27:f2:0d:4c:b9:44:4c:4c:10:ca:
3a:79:69:30:c5:d5:0d:c5:70:20:57:5a:d6:47:ec:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:70:70:F1:68:7C:B1:76:E3:26:25:B7:07:CF:12:A0:A2:02:15
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4c:a2:8e:ae:20:11:30:8a:8a:47:90:45:8d:ca:29:72:66:
03:92:5d:b4:a1:e8:16:f4:2c:17:4e:9b:37:f2:b3:38:77:54:
67:a8:38:5d:46:14:f2:e9:f8:2a:4a:10:35:50:96:b1:c5:4a:
ec:3f:1a:bf:2c:db:f6:57:e4:dd:37:09:2e:d3:22:5d:d5:11:
d7:1a:48:1f:b2:a3:b7:db:5f:23:f7:6a:75:37:e1:71:1a:f0:
ae:66:a9:22:15:c3:69:b6:8c:52:86:aa:e9:83:f6:4c:5a:e8:
e5:9d:72:a8:9d:40:a3:f6:8d:c6:1f:0d:56:d3:d4:c6:b8:7b:
1d:1b:00:0d:40:4a:6e:42:40:e8:a9:d5:9c:f8:c6:76:c4:22:
a7:8f:f8:02:b3:20:c6:29:99:90:b5:e0:ad:43:f4:f7:38:8f:
d6:cc:89:4b:f5:93:f5:8f:54:0f:4a:37:cc:8d:bd:65:d2:ca:
cc:0c:53:2f:82:28:cc:47:75:fe:7c:ca:e9:50:4b:f5:64:b5:
f0:69:77:c9:76:39:05:dc:a2:90:9f:de:e7:49:3c:84:88:5d:
43:42:27:61:2b:30:1b:cb:d5:3a:08:22:1a:a2:9a:f2:e1:7a:
c3:5b:2d:63:63:29:83:78:1d:1f:c4:7a:0d:1f:58:3b:a8:64:
dc:12:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 06:22:43 2026 by rpki-client