Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: B9Wl5NktCTokdtNnBWmdJ6zTHdKZBGKoRBxago2dpiM=
Subject key identifier: 55:FF:02:5B:C3:B3:19:83:11:60:90:B2:4F:49:7B:85:89:F6:90:7D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 53FE9A51B4FE7E7B16C17D5E8BB80C2FE8F15C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03D7
Signing time: Sun 01 Nov 2026 00:57:35 +0000
Manifest this update: Sun 01 Nov 2026 00:52:35 +0000
Manifest next update: Mon 02 Nov 2026 04:11:35 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: EdzWEMLGddLb46l/jatTuwpLyPtEKfrajPHHJwPhpeg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fe:9a:51:b4:fe:7e:7b:16:c1:7d:5e:8b:b8:0c:2f:e8:f1:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 1 00:52:35 2026 GMT
Not After : Nov 2 04:11:35 2026 GMT
Subject: CN=55FF025BC3B31983116090B24F497B8589F6907D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:dd:4e:90:09:77:b5:d0:22:4a:b2:ff:81:
08:61:44:63:17:6f:71:a7:f0:91:85:04:ce:22:5f:
4c:d2:52:97:27:97:6d:b3:d4:e0:92:65:06:2a:7a:
51:e0:3e:a0:31:02:5c:47:8a:60:a6:f2:21:a9:81:
3e:7b:48:52:28:84:47:67:9b:55:7d:18:25:2c:79:
77:4e:58:eb:ae:5e:86:28:1e:39:1b:30:68:68:23:
0e:f8:85:dc:c5:8a:04:fa:5d:1a:ff:f8:3e:d9:b3:
e8:df:2e:af:37:bc:0d:78:d6:af:a4:41:18:e4:c2:
25:26:57:06:ec:b3:e6:23:24:d7:30:23:e0:07:3a:
58:96:a3:72:c6:83:0a:bb:e1:33:8a:41:c1:f2:13:
27:9f:fa:ec:5a:3c:cd:d0:17:8b:f0:00:d9:9b:c3:
80:02:bb:08:48:ee:e1:9c:0f:f6:88:ec:0f:7d:b0:
ad:f9:99:49:8f:e7:79:44:18:13:f5:bf:5d:95:b9:
ec:9c:78:4c:c6:73:0d:75:78:bd:1c:d2:60:67:19:
a4:bf:24:8e:a6:48:c8:c0:8b:18:d1:1a:10:c1:81:
01:09:00:a4:26:c9:03:c0:90:b9:07:b6:0a:4d:d4:
8d:9e:e7:0a:9b:bb:69:f0:56:75:e8:a9:b9:22:a6:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:02:5B:C3:B3:19:83:11:60:90:B2:4F:49:7B:85:89:F6:90:7D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5d:b1:bf:b3:43:dc:92:91:8d:c6:19:82:10:08:57:2e:90:
4f:f5:ab:9b:08:61:f1:04:3a:b6:c1:9d:1b:5a:72:67:74:01:
d7:26:0a:b7:21:51:ac:d0:60:04:b1:d4:1a:b2:b7:a3:91:77:
67:3d:3a:0d:24:59:7a:2a:d7:e4:62:5c:87:bb:87:43:53:46:
a2:d0:6f:c6:52:65:40:01:ac:6f:70:a0:10:54:72:ac:22:53:
c9:79:cb:6e:f0:5e:70:ca:d6:d4:c0:c7:0c:0a:10:a5:8c:61:
7d:c4:d9:ca:8d:a5:9b:4e:68:f0:bd:46:b1:02:ec:12:40:83:
27:47:00:3a:72:ff:5c:91:e5:e6:0b:3c:bd:8e:54:92:f7:f3:
87:c2:69:dd:7c:7c:18:7d:0c:33:19:4d:e3:2f:50:e5:b9:0d:
4f:ad:cf:3e:f0:52:77:9d:d5:67:47:aa:aa:fe:fe:e3:5b:ad:
4f:ad:c5:c0:20:c0:f6:22:48:c6:1f:e7:c0:91:29:0f:75:be:
fc:bd:cc:21:26:88:60:b2:33:ab:36:da:bd:90:3d:1a:a9:ad:
31:bf:17:d2:fc:7d:09:6c:3c:68:08:06:d2:0a:48:cd:c5:5c:
65:4a:36:f2:b8:bd:e7:19:d6:a5:16:7b:78:f2:f4:d4:ce:8c:
29:1f:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:01 2026 by rpki-client