Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: yDUQF/BryHSpCZSifb1nOCrKN4HEhtNm8TuuAoZa7NY=
Subject key identifier: 43:05:46:99:F0:C3:25:3B:BC:65:8A:34:06:99:86:E6:D6:A0:0C:C7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 780D908991719F7E10C5B1BA6BE2F33E82C8B9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0311
Signing time: Fri 05 Jun 2026 07:28:41 +0000
Manifest this update: Fri 05 Jun 2026 07:23:41 +0000
Manifest next update: Sat 06 Jun 2026 09:37:41 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: rN1Rd7wiZxkcfTEi1hSP/UmhHIYIhghs7UmsY9Wy+9w=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 09:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0d:90:89:91:71:9f:7e:10:c5:b1:ba:6b:e2:f3:3e:82:c8:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 5 07:23:41 2026 GMT
Not After : Jun 6 09:37:41 2026 GMT
Subject: CN=43054699F0C3253BBC658A34069986E6D6A00CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:0c:f6:e4:98:da:61:3b:67:bd:7e:14:aa:
e5:63:5e:1e:bd:34:e9:8f:79:58:7e:d9:da:ac:ac:
e2:de:72:75:18:1a:f3:dd:da:b8:6c:43:92:93:c4:
0b:c3:e7:14:6a:47:41:db:91:86:f0:03:a6:35:a2:
97:15:9f:03:92:bf:5c:9d:12:5b:0e:a2:ed:25:7b:
49:55:20:9b:08:69:9f:8f:15:ec:e3:26:66:75:52:
a8:fe:e9:cc:c0:7d:5c:92:83:19:54:c4:4a:fe:8b:
13:d0:0e:6d:16:2e:0e:81:38:e6:3d:8f:6c:cf:50:
30:11:cf:60:d9:a2:cc:4d:55:18:ed:de:61:ec:ae:
35:c8:bb:4b:71:0d:6f:68:7a:80:b7:fe:b1:8d:95:
aa:87:60:4a:55:cc:5d:13:2a:ed:3f:f5:b4:86:01:
0a:b8:8a:dc:7f:33:7d:6b:2e:93:ea:ae:50:75:e3:
f6:2e:fd:db:dc:68:64:d5:45:11:00:92:1c:67:7f:
2c:70:4b:4b:1d:34:b2:35:d6:34:2d:0a:33:d9:80:
73:48:91:25:d4:c7:03:c0:23:ec:96:18:dc:d5:e3:
44:f0:a4:fd:34:a7:bb:2f:14:2f:0a:27:e6:03:50:
a4:0e:39:ad:46:87:40:62:82:db:ac:7c:15:12:f0:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:46:99:F0:C3:25:3B:BC:65:8A:34:06:99:86:E6:D6:A0:0C:C7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:01:8e:ab:a4:88:df:a5:e2:d7:e2:b7:72:9d:d8:11:b0:20:
70:84:93:59:28:61:aa:ce:35:ea:ef:4e:1b:a3:af:e6:1f:29:
da:a8:a0:33:a0:75:55:0e:7f:0c:8a:e1:a9:54:b2:f8:99:77:
f7:4d:b6:ef:76:9a:39:a0:ea:ea:9e:2d:a5:15:8f:0d:62:a0:
81:a9:bb:86:8a:a9:0a:dc:51:0d:80:00:4c:db:df:eb:fc:ab:
77:20:0e:ad:a5:2a:a5:f1:86:e2:1c:7a:72:39:d7:8b:91:d5:
06:d3:d0:51:c0:2c:a5:97:c4:17:50:c5:ec:e4:2b:e2:f7:8b:
05:04:3f:1b:22:2e:70:92:e3:fe:46:de:c8:37:3c:96:a6:9f:
5f:94:45:49:3d:cf:9c:47:c2:c0:2c:51:ca:ec:bb:31:3f:18:
36:73:68:1b:f6:0e:ce:41:85:3f:2f:e0:37:d7:b2:23:5f:97:
4e:ee:17:ef:d4:ed:cb:d1:ad:b1:6e:01:1d:90:fa:01:da:84:
f7:6b:d6:4e:8d:ff:3f:54:ff:7d:52:61:7f:16:47:5b:f7:38:
26:30:2c:c6:5f:3a:59:4f:37:6b:f2:f8:1f:33:9d:37:e9:79:
e4:76:ec:f7:cb:44:3f:1f:15:2f:4d:df:a6:4c:01:05:e6:c8:
e4:e0:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:43:05 2026 by rpki-client