Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 1tt6b/3mM13TKAtBqQ7MLtK3oJMIF35sfUOihX9n3ZU=
Subject key identifier: 2D:6F:0F:76:BF:1C:AF:04:E2:04:05:8D:1D:C5:3B:21:96:51:58:E7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 22BC5FA2613D0A63711D109A669EEB88BAF9257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02CE
Signing time: Thu 16 Apr 2026 13:50:46 +0000
Manifest this update: Thu 16 Apr 2026 13:45:46 +0000
Manifest next update: Fri 17 Apr 2026 16:52:46 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: aJar6jEqQPSHydNsrF7kRcjol8+DgfpvlbsT2ocQ8dk=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 16:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:bc:5f:a2:61:3d:0a:63:71:1d:10:9a:66:9e:eb:88:ba:f9:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 16 13:45:46 2026 GMT
Not After : Apr 17 16:52:46 2026 GMT
Subject: CN=2D6F0F76BF1CAF04E204058D1DC53B21965158E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:fb:b0:a3:f5:08:a6:66:3d:46:2d:8d:ff:
04:e5:6a:9f:44:cf:08:3b:d9:0a:5b:94:ac:bc:05:
22:5e:be:41:86:b5:9b:69:bc:a5:a9:69:c6:fe:60:
e8:f5:f3:6b:63:23:07:c9:a1:5e:e2:2f:7b:71:c7:
bb:ce:88:0b:a6:72:9f:cf:89:be:e1:c5:16:3b:a2:
a9:56:b9:f1:d8:2a:bd:6c:3b:79:72:66:33:93:c1:
6e:2d:c1:7f:7e:6a:94:08:cf:5d:13:ac:2b:34:f2:
00:ab:58:f7:58:35:13:b7:7a:4d:d3:31:03:f3:39:
56:43:80:11:41:65:e7:14:81:f1:8b:04:16:0d:c6:
99:d1:f4:64:22:17:fc:8d:b3:f5:df:e0:bc:74:25:
b1:d2:16:44:60:7e:78:54:72:a6:61:6f:67:68:ff:
f5:e9:84:5a:54:62:26:7c:bf:3a:fd:2a:cc:1e:0a:
7e:f5:0e:bf:78:3d:1c:aa:16:5f:78:3d:f6:3b:a0:
bd:50:d5:c0:0c:79:01:61:ff:7a:82:e8:e7:1b:f2:
6a:44:a9:a1:34:27:54:5f:b3:05:12:19:4d:ed:62:
1e:5b:bb:d1:1b:ba:f6:06:03:80:93:82:45:5e:44:
05:ba:66:a8:9d:db:c9:2a:49:1a:42:52:f5:11:9c:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:0F:76:BF:1C:AF:04:E2:04:05:8D:1D:C5:3B:21:96:51:58:E7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d0:80:6b:e9:95:91:ee:07:30:6a:82:8a:df:75:f0:f5:bb:
8c:c6:4f:70:b1:3c:54:d6:4a:07:6c:e3:ab:3c:1e:24:e4:f2:
bb:e4:c1:97:6c:09:f7:f9:48:10:b6:01:63:7f:85:d7:f1:42:
64:b8:dd:c8:c2:57:59:40:9e:60:2b:67:cb:6c:77:3c:5a:ed:
de:26:ee:58:67:16:f3:3f:bb:a8:0b:6b:74:53:a7:48:8b:31:
fc:b1:8b:b7:62:5b:69:3b:db:47:7e:0d:f1:79:c7:a0:92:a5:
d3:0f:15:8f:80:89:83:36:64:77:af:7a:86:f8:af:f9:1e:88:
6d:1a:20:5a:78:8d:e2:36:3e:c6:56:f2:aa:8e:e3:69:ef:ca:
77:71:18:c0:0a:2d:a4:11:ae:48:35:3f:fc:08:41:4e:6d:c3:
24:82:c2:35:74:b3:7c:00:95:c9:d2:73:10:45:a6:b2:dc:01:
a0:7b:ec:ba:24:ba:ef:4e:9d:98:cf:0e:6d:d7:e2:0d:27:80:
57:c8:ad:a9:18:eb:5d:f7:4f:ff:71:62:70:04:5b:89:6f:fe:
37:1d:65:dc:04:b2:07:d3:8d:93:0b:ad:a1:36:dc:ed:da:0b:
9c:43:d6:19:6d:c9:85:01:6c:ed:8d:7d:bd:aa:f1:27:73:2d:
22:8a:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:45:38 2026 by rpki-client