Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: EMg8tdb9x9oFuMdl/KLwW7MWKWJEkEMluylv+0anxU0=
Subject key identifier: EF:F0:D1:5F:AA:A9:D9:4B:A3:2B:FA:A4:C8:E1:04:3F:36:33:8F:4E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 74F8327E50AE98A54E98AC10B48E5F51F97D4D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0295
Signing time: Wed 04 Mar 2026 08:32:04 +0000
Manifest this update: Wed 04 Mar 2026 08:27:04 +0000
Manifest next update: Thu 05 Mar 2026 10:03:04 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: WI6b6YhsQYPuAkCVTTlr7Bya/SFQJ465jAwc+FwgtKU=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f8:32:7e:50:ae:98:a5:4e:98:ac:10:b4:8e:5f:51:f9:7d:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 4 08:27:04 2026 GMT
Not After : Mar 5 10:03:04 2026 GMT
Subject: CN=EFF0D15FAAA9D94BA32BFAA4C8E1043F36338F4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:0b:ca:3d:1d:7e:6b:57:27:80:34:aa:eb:
39:ab:10:50:92:9e:75:84:c0:5b:95:8b:1c:03:63:
fd:b6:47:c1:ff:43:bd:26:69:bb:4b:63:b7:23:03:
39:4a:34:5d:02:c0:4b:7b:52:9a:e7:bd:b6:44:67:
62:c7:bc:55:84:f4:7d:66:8e:2b:7f:cf:c9:45:d4:
27:58:e0:a0:76:d1:45:53:0b:f6:19:d1:32:56:f2:
a2:e6:f2:37:20:da:ff:de:6c:86:bd:60:a5:75:7f:
ee:af:4c:23:95:7e:ab:30:43:9a:3d:33:92:6f:d9:
b8:b3:50:a8:dc:54:bd:2c:c5:fa:05:c8:01:67:e2:
48:28:68:20:a0:b0:24:76:2e:72:5a:72:43:f1:7c:
46:fd:9a:f2:4c:a0:78:c1:f3:cd:83:00:83:01:3e:
a5:fd:56:b8:c7:3e:77:6e:c4:72:fd:b6:4b:a9:3b:
b3:8f:6f:40:f2:42:85:8c:e8:42:6e:d0:7a:80:f3:
eb:a7:56:b8:54:14:c2:3d:32:37:55:91:ff:35:ed:
31:f3:5b:94:63:dd:8a:dd:2a:0c:80:8a:1e:0c:bf:
ed:a6:19:1f:ce:e5:32:2c:be:0a:36:c8:df:be:b5:
58:a9:f7:46:38:49:ce:69:20:d8:c0:4e:65:1b:e2:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:D1:5F:AA:A9:D9:4B:A3:2B:FA:A4:C8:E1:04:3F:36:33:8F:4E
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:29:93:1d:34:18:9f:7c:48:9b:7c:27:c1:42:fc:b3:37:92:
4d:41:83:43:44:83:10:18:45:d5:f1:18:e7:f0:68:5a:34:7f:
bd:39:7d:2e:98:5e:7d:74:64:cf:23:18:da:9f:69:a3:52:81:
42:54:86:b4:e2:90:77:74:59:aa:60:88:ec:ae:d2:3c:e7:d5:
11:ff:3f:6c:2a:d9:c0:34:bf:9a:f0:ed:70:62:b2:67:fe:2d:
f5:1b:da:a9:ae:62:a9:44:e5:68:6c:bd:3e:16:e2:29:ef:b8:
0f:64:9b:25:ae:25:ed:3c:df:8e:2a:c5:9f:d3:e5:bf:c7:6f:
dd:36:3a:da:38:a7:28:77:71:b0:5b:42:1f:a3:59:42:0d:5e:
cc:31:f7:b8:76:f7:30:e1:51:3b:ba:9f:16:42:67:76:07:3d:
b0:64:0b:93:f0:24:13:f9:16:7f:28:12:4a:47:5f:60:1b:aa:
e6:4b:52:2b:02:27:f8:a4:bb:20:c7:16:ff:05:f9:16:c2:b1:
3e:5f:91:c7:cb:1e:bb:31:dd:51:0e:41:a5:6b:36:df:c3:33:
71:5b:18:a6:29:f0:89:52:02:3b:8b:3c:30:7f:55:7c:cd:24:
13:01:a9:04:66:14:02:3f:35:08:a2:7b:c4:77:59:c6:4a:1f:
57:31:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 00:29:38 2026 by rpki-client