Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 4mz3dZFvL1GtRwVIG5t5F20OXkzQGEuPURYqeBjrkE8=
Subject key identifier: 87:C2:53:A0:0E:19:71:F4:42:75:F8:0A:5D:00:30:16:DA:22:3B:E7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3C8FBEE56B96803A190D18C25A6520D75F73DA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02D4
Signing time: Tue 21 Apr 2026 05:00:57 +0000
Manifest this update: Tue 21 Apr 2026 04:55:57 +0000
Manifest next update: Wed 22 Apr 2026 07:08:57 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: bmVZD4tsz/p4bwJ/8Pa7/50+iFCBhpUiWk5H9yQbaqg=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8f:be:e5:6b:96:80:3a:19:0d:18:c2:5a:65:20:d7:5f:73:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 21 04:55:57 2026 GMT
Not After : Apr 22 07:08:57 2026 GMT
Subject: CN=87C253A00E1971F44275F80A5D003016DA223BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:bd:85:e6:c6:a2:48:91:18:65:66:d2:8e:
95:2b:d8:27:32:98:5d:61:ea:ae:ee:b3:06:19:0e:
bf:30:29:78:c0:34:e5:59:79:d9:4c:83:bc:d0:ba:
4d:3c:d7:70:f2:15:df:f2:1c:9f:50:f9:9b:ff:5a:
54:29:47:d0:f5:0b:ab:73:6e:3f:f3:2b:48:5d:5b:
42:cd:9e:e8:34:55:96:40:4d:54:67:a7:9c:e1:89:
5a:67:50:df:a1:0a:55:9d:02:6b:2a:da:40:ba:bd:
ad:79:92:71:8a:c4:8d:23:95:14:34:76:2e:4b:a1:
29:a4:d4:eb:c1:85:5b:58:ab:8c:8b:0a:a5:bd:40:
43:3e:bf:67:07:8e:91:cd:93:f1:db:89:06:6d:4c:
df:f6:9e:62:75:07:39:6e:a0:e0:94:1b:e1:46:f5:
4f:66:8c:1d:f2:92:6c:1a:81:4b:e7:90:7e:31:99:
f9:0d:12:81:85:4d:ff:31:67:1f:78:56:5a:dd:2e:
9e:f8:e9:13:3d:a8:13:20:30:81:42:fa:e0:e6:86:
79:ce:41:36:fe:0c:50:8b:68:dd:a0:a8:a2:1c:e4:
4a:04:a1:16:3f:60:32:10:67:40:fe:ff:77:71:09:
76:2f:61:29:35:f7:2b:ac:25:60:a3:c8:e2:2d:fd:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:53:A0:0E:19:71:F4:42:75:F8:0A:5D:00:30:16:DA:22:3B:E7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d4:99:08:48:d8:42:8f:ac:3f:00:e5:09:3d:9e:fa:5d:de:
b9:0a:ec:5c:88:2a:40:08:87:9a:90:9e:4e:71:b1:7e:13:fe:
f1:60:66:a7:2f:e1:55:e3:e6:17:76:5d:36:b8:2f:f7:8a:98:
9f:d8:e5:e1:0c:65:49:cc:0b:42:78:26:07:51:26:c8:ce:27:
aa:67:67:74:d8:78:cc:c2:3e:e3:ee:ae:4f:ff:62:10:e4:55:
81:79:64:f0:22:0e:ad:25:e4:d0:41:0d:1c:90:6e:35:eb:3c:
a8:34:9b:03:e8:70:02:d9:f8:f2:3d:cc:cf:ed:50:44:a4:e8:
25:67:fa:c7:8c:04:4d:5d:57:40:24:d6:60:7f:e1:f3:63:60:
fa:93:d4:fc:dd:75:31:28:79:b1:06:83:60:37:54:75:00:51:
99:ab:27:dc:3d:7f:5c:b6:b1:4f:7f:1d:b8:47:ad:fa:52:25:
63:95:47:cf:bb:1f:b7:d2:67:c2:ee:0a:8f:f0:c9:83:1d:2e:
22:6e:c3:54:7d:67:a2:19:9a:0c:e9:cc:06:23:03:b5:33:db:
72:ca:f9:80:87:54:18:78:20:f0:3e:dd:32:d8:4c:00:76:3f:
d2:c7:a2:80:58:3b:87:c3:23:3b:52:e2:3d:11:59:f2:6a:45:
9a:64:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:30:53 2026 by rpki-client