Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: dxOIU91Gtx/d6SvN9cPxjtuJ0IJQy+NQAOjSJcaf/tA=
Subject key identifier: EF:D7:F1:51:EB:23:A5:56:5D:B9:34:FB:80:E6:32:1B:DF:A7:2A:85
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 120D7552E6ED2EA0AD5EBA6E15EAF6F062B33C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02B4
Signing time: Sat 28 Mar 2026 07:19:14 +0000
Manifest this update: Sat 28 Mar 2026 07:14:14 +0000
Manifest next update: Sun 29 Mar 2026 09:27:14 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: tfoxaZBf3BnJxCCRR+aVxtFLa2tVuQzjSjAy7Q2B9Lc=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0d:75:52:e6:ed:2e:a0:ad:5e:ba:6e:15:ea:f6:f0:62:b3:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 28 07:14:14 2026 GMT
Not After : Mar 29 09:27:14 2026 GMT
Subject: CN=EFD7F151EB23A5565DB934FB80E6321BDFA72A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:81:94:f9:0f:45:36:30:9f:a3:28:40:fe:c2:
e4:a2:df:af:27:ae:e4:05:54:39:83:19:0d:9a:03:
11:72:13:5a:67:1f:7e:9c:6c:73:cd:9a:b0:ca:a5:
55:e0:4a:ca:da:e7:a0:d0:68:ba:74:ff:bd:51:bd:
3d:5f:c0:41:e8:cc:aa:0e:e2:b8:e4:94:69:65:01:
ad:11:c9:98:ea:9b:50:a5:4c:8c:2d:37:f0:1d:07:
0c:cc:72:e2:c9:df:13:7d:d6:80:af:7c:18:85:37:
01:2e:dd:7b:d1:e2:3e:f1:8f:c8:ec:01:20:e9:3d:
06:b4:fd:d2:60:46:79:3c:ae:44:50:d0:43:2a:88:
66:5a:86:05:2d:74:93:37:67:bd:fd:f4:fc:dc:a2:
54:e3:5a:96:ca:7f:c9:e5:99:90:10:cb:0b:99:c5:
40:c7:13:bd:3c:68:f8:95:7a:73:b9:bb:14:8d:50:
8b:63:a2:b3:5c:83:e0:5f:36:59:ab:30:6d:49:a5:
c8:3c:ee:83:4d:86:0b:c2:65:0e:c7:14:b5:97:17:
db:4e:66:be:28:9d:27:0f:9a:90:05:14:53:f8:8e:
0c:ee:d0:0a:67:2a:fa:fa:37:24:9d:79:1c:a0:3b:
55:5f:da:42:44:f9:46:0a:b5:86:cc:1d:ca:fb:0d:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:F1:51:EB:23:A5:56:5D:B9:34:FB:80:E6:32:1B:DF:A7:2A:85
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:f7:19:82:d6:42:e7:a2:1c:95:24:64:88:3b:0c:e9:42:
f8:ce:21:cb:06:0d:7d:30:ac:c4:40:48:dc:a9:5c:b7:b3:9c:
26:6a:0d:9d:73:d2:85:ef:8b:22:4d:94:45:df:d4:72:a2:85:
09:0e:18:32:d0:1b:24:6d:da:82:af:93:51:3f:c4:e2:92:0b:
59:78:3a:3f:aa:6b:15:04:31:15:3f:2e:41:2b:47:48:47:2a:
28:7c:63:bb:e6:10:01:13:79:b1:15:6f:a1:54:b1:ad:64:bd:
05:d2:92:84:1c:11:e4:68:87:eb:d4:67:c0:e3:ac:5c:5e:bd:
e3:7b:e4:fe:eb:0f:a4:1f:7d:e9:7a:bb:8c:38:34:7e:52:0e:
f0:e4:a0:e4:fb:6d:af:45:d3:fb:5e:90:d8:ba:27:9c:bc:10:
01:f8:e4:a4:7e:f0:17:ad:05:fb:99:c2:53:b3:39:b8:88:d1:
1b:85:51:10:77:b8:b1:80:4b:f2:94:6d:ff:c6:60:ac:61:0a:
e3:1b:1b:69:69:5e:77:0c:f1:f5:20:30:0d:cb:d9:35:4d:95:
f7:49:83:5f:5a:18:bb:bf:cb:9c:e6:c0:f5:d9:6f:a3:a3:76:
c1:da:a0:d5:c8:e4:52:31:63:c5:c6:85:e0:6a:03:cd:60:17:
a8:a7:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:32:27 2026 by rpki-client