Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: aQQTIlaGAQ7Hk2/4UbIleRrymFcj74XZJ6AItiQtb3U=
Subject key identifier: 87:C3:EE:07:CB:BD:13:D1:EE:E2:A6:41:C2:04:A1:80:78:DF:11:CA
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 526901B334E122A7FE76F736D6B11DB1B85C453D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03AC
Signing time: Tue 29 Sep 2026 07:14:39 +0000
Manifest this update: Tue 29 Sep 2026 07:09:39 +0000
Manifest next update: Wed 30 Sep 2026 08:29:39 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: iQCTybXb1alVgVyoTaJou7YLoCZNK5pXJp9jhLP4Gxs=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:69:01:b3:34:e1:22:a7:fe:76:f7:36:d6:b1:1d:b1:b8:5c:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 29 07:09:39 2026 GMT
Not After : Sep 30 08:29:39 2026 GMT
Subject: CN=87C3EE07CBBD13D1EEE2A641C204A18078DF11CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:a9:69:63:c5:ef:2e:24:94:e8:ed:9b:96:
46:8e:88:3d:89:8c:4d:04:92:16:e6:da:eb:51:24:
f5:9a:fd:c1:90:dc:45:48:a1:bf:b0:a9:50:72:87:
4c:35:91:2e:6d:af:ab:31:90:ca:15:7f:ed:f9:b2:
bd:f0:e7:df:83:c6:a4:9a:fa:1b:58:c3:20:27:5b:
82:6e:fd:82:ed:4e:fb:a9:d3:25:ac:07:04:67:e1:
44:7f:d3:90:27:34:7c:58:02:16:61:6b:d9:50:63:
c7:72:54:04:84:c8:cd:59:e6:1d:43:d8:a1:1c:1d:
9f:a4:f9:6a:52:b0:09:fc:e8:94:c6:7d:3d:df:ca:
67:8e:4a:86:c2:2d:39:fa:83:b8:5e:8c:88:ca:7c:
e2:5f:d4:50:33:fe:94:00:d4:ec:52:bd:4d:30:a4:
6f:79:3a:6d:01:b9:a1:31:57:21:4a:4b:a5:c8:7d:
8e:eb:15:f0:aa:55:e7:71:61:83:9b:42:46:78:49:
1c:9d:ce:75:06:85:df:80:04:af:99:b6:b3:8e:cd:
20:c5:15:51:fb:71:0e:c5:45:6c:4e:b2:e4:26:fc:
b7:0b:43:6b:86:21:90:c6:db:61:4d:60:ea:81:4f:
52:fa:0a:db:a4:e7:b5:1a:b1:a6:25:a7:2e:26:88:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:EE:07:CB:BD:13:D1:EE:E2:A6:41:C2:04:A1:80:78:DF:11:CA
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a6:83:08:d1:1d:2f:27:cd:f8:3a:2e:69:94:3b:e6:89:b7:
bd:33:b9:3a:30:da:0a:c7:95:09:58:90:22:a7:59:84:a4:9d:
fe:d5:ff:ee:f7:2c:2a:8d:78:7f:fd:ca:00:40:c9:50:de:85:
f1:3b:cf:8a:90:ef:c9:4f:74:65:19:9b:a9:1d:c7:57:73:b6:
81:5d:50:61:07:24:e5:3f:6f:09:40:54:eb:6d:be:e3:33:c1:
26:25:d3:4a:34:47:62:94:ef:ae:8c:95:af:d4:6e:22:a6:46:
4e:f3:67:43:62:cf:15:e7:ba:62:86:e2:44:73:8f:63:ea:07:
93:91:cc:64:84:05:d0:58:88:eb:76:a4:c3:ed:d1:c9:46:33:
b8:12:72:4f:fd:d7:c0:f8:05:1e:05:b1:e7:82:bd:b8:ef:ec:
31:7d:99:22:d1:8c:4b:da:a5:8f:61:5d:52:33:7d:e1:e7:7a:
7a:85:26:8d:78:0d:8b:5a:b1:46:55:49:8a:ee:41:a3:95:f7:
43:53:a9:c2:5c:52:17:d4:ae:33:a4:e7:f2:57:f3:7e:90:5f:
b8:46:c5:19:86:39:02:1e:4c:d2:91:de:62:73:09:c2:50:1a:
97:4d:03:8e:01:fb:97:23:d2:cb:08:f3:bb:ba:c9:36:8b:9e:
c2:81:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:09 2026 by rpki-client