Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: MVk3oS+hoQtmqHFnxBIHSOen6QrbkKc5/UimP/CdjtE=
Subject key identifier: 49:7C:52:0F:8D:AA:99:25:E7:59:D2:A6:40:66:53:96:28:24:4E:A8
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 140F2B58EB86957D5094DABA319AF34251C9FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03B6
Signing time: Tue 06 Oct 2026 22:35:25 +0000
Manifest this update: Tue 06 Oct 2026 22:30:25 +0000
Manifest next update: Thu 08 Oct 2026 00:50:25 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: zQqCOqEmWtxpnLFF2yvfRgqWOMIKyZ9ssT+DYn/aul4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0f:2b:58:eb:86:95:7d:50:94:da:ba:31:9a:f3:42:51:c9:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 6 22:30:25 2026 GMT
Not After : Oct 8 00:50:25 2026 GMT
Subject: CN=497C520F8DAA9925E759D2A64066539628244EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:20:2a:04:62:54:9c:9a:02:13:53:2c:0d:
89:fc:54:c2:d3:2e:84:99:c9:8e:e3:2c:31:6c:f1:
35:86:07:d4:29:a4:5f:cb:9e:71:e1:a4:24:6d:e3:
57:d1:b3:cd:0c:bb:ea:e2:dc:75:d9:58:68:b6:7f:
85:d2:31:52:f3:f3:c4:69:79:3c:5d:ed:44:92:00:
42:5b:c1:3d:97:c8:f2:66:70:76:9f:e8:b9:33:c6:
17:18:37:08:11:94:14:31:01:b9:b7:b6:84:98:12:
85:0e:21:49:a8:9d:f6:d2:b0:64:f9:5a:3d:dc:1b:
0c:f2:93:fc:32:58:92:a1:c1:d0:04:fa:fa:5e:14:
09:7c:7f:71:4d:6f:40:17:e8:2e:62:b3:db:d9:39:
9f:77:d4:76:6c:1c:9d:12:1e:7b:32:a3:81:91:87:
1d:e3:f4:52:2d:8a:f2:be:2d:94:3f:42:44:07:03:
e8:8d:01:86:67:d3:d4:1e:cf:ce:ae:34:74:9a:bc:
47:65:5f:67:f1:23:ce:ec:ed:58:68:b7:8d:6b:f1:
f9:f1:ed:5c:58:99:3d:93:1d:84:93:f8:9a:5a:ad:
6e:73:06:2e:6f:da:53:c2:6a:d8:c2:9a:d6:a1:ed:
36:63:32:ae:3f:c0:ef:ce:f6:13:9f:2a:c8:52:51:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:52:0F:8D:AA:99:25:E7:59:D2:A6:40:66:53:96:28:24:4E:A8
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:43:c1:0c:8b:8a:c4:44:c1:a3:5d:af:f2:35:49:29:d2:
23:26:f7:8a:09:9e:e3:5d:78:94:26:f1:31:ca:2d:e7:64:94:
a6:11:5a:62:75:61:ae:00:a5:31:e0:a9:d6:b0:da:e2:92:29:
e1:1e:1e:b7:66:2c:ba:bd:9e:ae:01:7d:12:2a:4b:af:db:b1:
58:be:f9:9c:ef:22:b5:0b:5c:e0:66:ac:ea:41:4a:28:f4:7e:
4a:df:14:3e:d9:1a:95:36:7c:50:aa:9b:b6:c7:07:06:e1:5f:
fc:66:57:22:79:c7:97:a2:70:51:1b:66:0e:7e:ba:ea:93:cb:
75:f6:9d:72:f4:4b:0d:43:34:f5:bf:0c:70:66:5e:87:64:57:
8f:6d:da:e1:44:f9:b5:a1:3a:e0:18:f4:90:09:a2:a9:a3:e3:
84:b2:df:b3:61:4d:ef:03:4a:99:d3:45:c4:9d:43:1f:3d:71:
a8:b3:29:96:91:dc:f6:b3:de:f4:86:0f:25:4a:a3:5c:fa:85:
1b:51:b9:de:21:70:3c:ab:1e:c5:32:93:d3:ea:bf:60:a3:24:
fa:5a:46:47:38:e2:49:83:36:62:d4:5f:d3:54:3d:00:df:54:
f9:c4:0f:37:3b:cd:4f:40:cd:66:cb:e7:f1:92:9e:9b:cc:81:
08:f6:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:20:45 2026 by rpki-client