Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: KjqIP9xqtygAH8qvrv8g+IiIfRI129LaM99uDSIty7Y=
Subject key identifier: 04:BA:C8:D2:FD:A8:DE:13:39:6E:BB:5B:06:B7:D0:60:DB:4C:83:6A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 7E261692D14850A0CDACB572212AC24121345498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03DC
Signing time: Wed 04 Nov 2026 02:17:55 +0000
Manifest this update: Wed 04 Nov 2026 02:12:55 +0000
Manifest next update: Thu 05 Nov 2026 02:39:55 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: /6inl1EvEmbuLifBOFyS3G9a/WLBeGSHqeu67V4cUyE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 02:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:26:16:92:d1:48:50:a0:cd:ac:b5:72:21:2a:c2:41:21:34:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 4 02:12:55 2026 GMT
Not After : Nov 5 02:39:55 2026 GMT
Subject: CN=04BAC8D2FDA8DE13396EBB5B06B7D060DB4C836A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:ec:6f:cb:ff:90:a4:66:82:53:fd:1f:3c:
f5:8f:f3:30:4e:16:d1:e5:65:c3:5a:db:c6:9b:9e:
e5:dd:cd:06:b1:67:c1:85:6f:f0:db:f9:d6:95:0f:
66:31:ef:ef:e5:0f:c6:63:ec:82:b9:54:f6:fb:de:
17:c2:49:ba:4e:07:76:5b:e6:ac:cb:77:3d:08:c6:
18:1e:da:92:dd:47:f6:54:d5:c2:a5:a1:d0:c6:67:
35:18:7e:8d:11:99:c7:66:17:ae:32:c3:ac:cb:22:
b5:e7:b7:93:72:44:47:23:ce:54:71:f5:16:d9:7c:
62:41:e4:ef:2e:e7:d2:31:b3:0b:00:9f:86:3f:6d:
af:c1:78:21:4c:1a:ce:f0:ab:06:04:33:3b:cf:ac:
1c:74:71:e5:38:7f:15:52:48:31:3e:f4:88:35:4d:
23:05:99:9b:32:7c:c9:5d:2e:01:6e:1a:83:60:32:
56:3e:85:a5:8a:7e:63:61:6f:8a:e5:cb:e8:77:ad:
ef:ec:80:0e:05:05:0b:f3:58:db:d3:9e:18:1e:61:
f6:e4:77:64:1a:c3:f6:64:27:60:a3:16:6a:36:dc:
9f:20:c5:9d:3c:29:0c:39:98:26:8a:fc:e9:6a:35:
7f:05:e2:8c:d5:83:90:e7:01:03:2e:de:a0:98:11:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:C8:D2:FD:A8:DE:13:39:6E:BB:5B:06:B7:D0:60:DB:4C:83:6A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:34:d8:89:4e:0a:6d:84:4c:3d:d6:47:36:b1:ee:31:72:2e:
e8:fe:45:5d:7c:45:1b:8d:a5:e7:26:cb:c8:3b:90:e9:64:d4:
55:fc:87:ba:e3:a2:47:77:e8:36:0a:26:a4:48:42:70:07:25:
d6:e2:e7:68:e4:16:24:f2:58:7d:9d:c0:72:38:bc:35:b1:aa:
53:20:28:80:60:41:1d:b5:77:fa:b4:8a:4b:18:0b:c5:7e:ab:
0e:fe:68:8c:fe:2b:1c:35:13:76:42:62:f3:73:13:9d:84:6d:
87:54:72:b4:89:18:5d:5a:92:f4:03:12:8f:6b:03:f2:22:ec:
bc:0e:d7:8e:dd:e7:17:23:3e:2e:0a:9a:6b:7a:25:70:46:35:
fa:58:53:92:c2:fa:af:68:4d:ca:21:0b:67:69:17:fa:1b:d5:
bf:c6:91:3c:7f:f6:45:60:6e:79:60:84:7b:ca:eb:b8:be:59:
75:30:d2:d4:82:82:4f:bd:78:58:d2:fe:e6:70:d6:93:6f:05:
06:63:6a:d9:11:b1:7a:f0:b3:86:27:a1:e7:e9:af:21:e7:59:
67:e0:27:d5:2f:c9:a7:69:82:81:ae:97:b6:2d:02:00:01:42:
ec:ac:da:dd:05:5a:37:69:83:3f:a3:04:ba:76:fa:1c:08:a6:
f2:38:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:15 2026 by rpki-client