Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: s1eGf71s2Eief1IZidnQRccSiS7NxLmmmMCazI6WfeQ=
Subject key identifier: 44:32:59:6D:E2:E8:76:E4:AF:74:16:5C:21:06:A6:4C:FD:6F:13:F5
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3D77977862AE76C14FFF749C01A97C030274675B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A5
Signing time: Tue 17 Mar 2026 04:07:39 +0000
Manifest this update: Tue 17 Mar 2026 04:02:39 +0000
Manifest next update: Wed 18 Mar 2026 06:46:39 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 75acKwbCtmZS4r9PWUd1HTZ07c4qZzmeI/NXF7bpvoM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 06:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:77:97:78:62:ae:76:c1:4f:ff:74:9c:01:a9:7c:03:02:74:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 17 04:02:39 2026 GMT
Not After : Mar 18 06:46:39 2026 GMT
Subject: CN=4432596DE2E876E4AF74165C2106A64CFD6F13F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:17:e8:c1:a2:35:ca:ef:61:01:31:17:6b:
b1:d0:fe:07:4b:e4:d9:c5:3f:e2:5f:17:e1:3d:b2:
f1:4c:eb:70:a9:d8:35:21:aa:60:70:1f:ce:e2:57:
83:67:5b:f8:3c:47:f3:18:79:23:0a:d7:f4:f7:b7:
9e:61:74:0d:90:6a:75:24:77:a9:8b:9a:d5:ee:5b:
34:11:7c:34:0b:a6:a7:d8:2f:23:e2:fe:81:38:c0:
6c:4d:f2:cd:e1:55:ca:9a:0b:07:4d:c7:49:31:30:
8e:a4:af:e1:79:46:14:09:14:9d:9a:d9:29:2b:88:
49:22:d9:33:65:81:24:e9:ed:02:f1:bb:ed:a5:df:
f4:de:81:94:5c:14:6f:a3:a1:1c:49:3e:59:09:65:
92:ae:34:b4:49:39:4a:ee:f1:d0:3f:fe:ba:fc:e8:
0a:53:7c:1e:0f:2e:a3:1a:e7:66:82:c8:23:05:aa:
26:06:3f:a3:03:3a:1e:39:b3:d5:95:2c:07:df:af:
15:6f:b2:94:10:a8:d6:14:c9:ed:e2:d1:ff:a3:48:
a5:04:d4:e9:02:b0:36:2f:3c:3b:1b:a5:6c:e0:dd:
22:68:29:87:ba:ce:20:16:9c:a3:cf:b1:c1:1f:85:
98:ca:78:a0:e1:e1:92:5c:47:1d:81:e5:c8:e4:b4:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:59:6D:E2:E8:76:E4:AF:74:16:5C:21:06:A6:4C:FD:6F:13:F5
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:76:3b:fd:f5:5b:26:02:c2:68:be:3b:9f:6f:93:86:91:
66:46:92:f8:83:a3:e2:1b:00:64:53:62:c3:b7:5d:9b:15:3c:
cf:8a:f2:73:82:d4:f9:cf:92:84:ab:25:b1:ed:bd:f1:e1:82:
eb:4b:90:50:10:d8:0b:bb:1f:4b:1e:15:32:7f:f8:3b:ae:55:
02:51:90:31:f6:10:1b:d3:e6:50:5c:1e:18:61:63:a2:b3:d7:
a4:e6:8e:8e:a4:e6:12:39:96:b0:39:e2:e6:9f:67:32:3c:2f:
09:5b:e6:94:45:cb:26:27:d9:47:39:01:0b:23:78:99:7a:f0:
8e:37:60:cd:73:94:57:3a:2c:ae:61:b1:5a:1d:c5:a0:e0:70:
2d:3b:10:f2:6e:ac:a3:4e:15:c2:39:f2:15:0f:3b:9e:93:02:
2f:8e:1f:9f:c0:15:a5:3e:60:50:0d:97:ed:e2:db:44:b1:7d:
bf:fa:92:61:0e:78:0a:d6:70:e5:f4:f9:f7:12:d5:d6:65:54:
1c:d8:c1:a8:fa:41:a4:ea:9d:97:71:1c:f9:c9:2b:6e:ed:e4:
24:2a:93:8d:bc:c6:0f:47:b5:4d:50:2d:12:4c:e8:3b:1f:36:
b2:06:c2:ff:1a:44:59:63:f5:82:e6:e1:1a:4b:8d:50:de:06:
cb:a3:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 11:59:09 2026 by rpki-client