Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: aqDbFpzwV7GnEFsJfer/nDq/CXbiszlPZFmk6A37jHQ=
Subject key identifier: 42:F4:89:57:5D:CE:13:76:72:78:EC:B5:63:81:7B:6D:C8:80:47:15
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 42FC51DBA27C9F50E2AF57C4C6F6602E3574E390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02F4
Signing time: Fri 15 May 2026 04:23:00 +0000
Manifest this update: Fri 15 May 2026 04:18:00 +0000
Manifest next update: Sat 16 May 2026 07:25:00 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: v1W4MBTV3/cJcMynynfrY3rwfzrBjK+UgCJj93SZnCc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fc:51:db:a2:7c:9f:50:e2:af:57:c4:c6:f6:60:2e:35:74:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 15 04:18:00 2026 GMT
Not After : May 16 07:25:00 2026 GMT
Subject: CN=42F489575DCE13767278ECB563817B6DC8804715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:78:20:7d:bf:ff:66:dd:43:4a:85:c2:7e:
21:d7:3a:a3:30:e7:52:30:7d:13:a8:dc:41:34:58:
2e:f1:75:2b:c0:0e:0b:ab:55:d9:eb:56:a8:1c:0a:
aa:43:e0:90:c2:49:ee:49:d2:74:b8:b6:76:8a:f9:
9a:b3:24:ad:19:41:ef:d4:4a:ff:70:26:cf:79:6a:
32:02:cc:63:0a:bc:80:80:a2:71:c5:66:15:2c:69:
6c:4c:ee:53:de:58:be:6b:88:c1:a0:33:49:bd:c9:
18:1d:a9:d6:a9:44:27:73:f0:d0:d2:4e:71:67:64:
9a:a9:72:92:59:61:ac:c0:29:83:1f:98:43:2c:dd:
11:01:c4:8e:b3:ca:25:54:93:bc:a5:a5:7f:86:ab:
5a:c4:2c:05:26:62:e9:62:c9:27:fa:e9:b0:61:7a:
af:9f:b0:f1:13:1a:00:60:cb:ce:f4:76:3f:57:39:
f2:c9:e2:d7:cd:07:89:0c:ce:67:16:01:ec:7f:f4:
12:0d:ab:0f:ab:8a:a8:15:81:f4:0b:55:a8:c5:bb:
41:e1:1d:3f:b7:94:c1:49:67:4d:2d:31:45:2d:55:
b9:5d:44:ac:91:05:e2:ab:b9:9b:da:fb:93:95:5b:
e4:7f:cb:bb:54:35:64:d7:9b:6c:a0:32:1a:c3:de:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:89:57:5D:CE:13:76:72:78:EC:B5:63:81:7B:6D:C8:80:47:15
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:a9:6f:f7:40:1f:90:27:77:b1:be:17:45:9d:c9:8d:5f:
9a:1b:48:86:2b:a7:e1:f5:ae:73:70:d5:85:57:ca:8b:9e:fd:
ac:6b:7a:f8:19:40:83:42:42:bc:86:9c:41:41:32:11:d6:94:
11:47:3e:26:4d:e5:cf:7b:68:f8:27:fc:15:99:04:58:76:78:
f6:f1:a7:10:48:0a:e5:ed:dd:d5:26:78:de:97:2f:64:3a:56:
05:95:16:e5:b7:87:eb:12:d1:21:38:27:70:66:70:6b:84:bf:
00:59:f7:46:ec:8a:11:aa:47:68:69:9f:8c:4f:ff:24:b8:2e:
74:9d:13:be:75:17:b3:cf:ad:c3:fa:7f:35:33:00:b1:0c:d0:
bf:01:03:50:55:f2:52:01:3a:51:c9:9e:c3:ec:9d:06:26:1e:
85:e0:9a:1d:cd:bb:d6:66:18:5f:e6:57:e3:95:cf:3f:b8:3e:
98:0d:b0:75:ab:42:fa:7c:0d:85:33:d7:66:9f:ab:23:63:74:
f3:15:e9:22:45:38:f9:77:be:3d:cb:89:53:1a:4c:d4:bc:af:
e8:b6:1c:10:a4:5d:95:7c:6f:ba:bb:a2:cb:d8:c0:ea:84:d2:
13:19:80:a8:e4:2c:94:f0:30:e3:55:4b:7b:8d:0c:93:26:4e:
cd:f2:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:07 2026 by rpki-client