Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Wji1YSUFL+1Ie53OX72tbS1Zi076TYZS/DQLgCC4pCE=
Subject key identifier: 21:2B:6C:77:A8:16:F0:DB:87:22:00:72:2C:69:D6:F2:7E:E0:EF:9B
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 7746D9A524CC6FD826FD08D258F4E4D07115A185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02CF
Signing time: Fri 17 Apr 2026 08:55:47 +0000
Manifest this update: Fri 17 Apr 2026 08:50:47 +0000
Manifest next update: Sat 18 Apr 2026 12:31:47 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: lBjkDKJamHzZ2CoPXc3+CY6WSqjWyz7zOVx+IKb3DYY=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:46:d9:a5:24:cc:6f:d8:26:fd:08:d2:58:f4:e4:d0:71:15:a1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 17 08:50:47 2026 GMT
Not After : Apr 18 12:31:47 2026 GMT
Subject: CN=212B6C77A816F0DB872200722C69D6F27EE0EF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:9d:ff:a3:54:25:d1:f4:b9:1f:8b:6f:26:
eb:c3:3e:30:37:d1:f0:e8:35:80:23:31:61:6d:92:
36:83:15:65:7d:51:d7:82:eb:bd:1a:e8:3b:70:b5:
cd:15:26:1f:fc:9d:57:96:46:d5:20:5a:0d:0b:f9:
b2:26:99:3b:b1:a6:3e:0a:42:a6:34:68:85:d4:4a:
28:4f:4f:15:2f:ec:1f:ed:24:ac:9e:48:27:ab:1a:
e5:56:a3:9b:21:4a:08:b5:0d:d4:10:9e:24:93:4f:
da:8f:b8:0f:d8:ef:af:59:3f:30:ef:52:47:b1:ce:
2c:6f:ea:aa:44:1b:61:5a:ec:25:75:e5:02:10:0b:
db:24:f7:c5:fb:24:a3:fc:2a:2e:98:be:8c:81:0a:
71:ca:37:1f:b6:0d:f6:f5:30:fb:22:1e:2f:58:0c:
59:da:fe:7d:87:38:5b:da:73:65:41:dc:ca:d3:de:
ca:4e:37:21:41:b3:8e:0c:0d:81:b0:13:90:f9:cc:
ab:3b:d5:27:83:98:ed:98:47:96:40:a9:40:cf:90:
44:75:d9:13:c9:8e:aa:e7:34:70:8d:a8:a3:7e:99:
e5:65:f1:8a:78:2d:43:ce:7a:cf:26:41:f0:ed:7f:
66:39:77:84:68:6c:d2:52:42:98:90:62:99:3e:da:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:6C:77:A8:16:F0:DB:87:22:00:72:2C:69:D6:F2:7E:E0:EF:9B
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:74:f0:6f:f3:28:91:be:0f:97:ee:45:33:62:01:53:3e:
39:8a:96:a9:12:2f:93:ce:86:96:54:60:6a:fb:86:09:8a:50:
40:e3:00:6e:0b:dc:e6:03:46:8a:55:c1:af:10:93:4b:68:26:
4c:16:f5:af:27:bf:0a:e9:b4:07:d5:c0:75:75:0a:6d:90:8b:
eb:ab:8c:13:6e:e3:52:43:43:33:e0:8c:29:3e:58:cd:87:88:
33:1c:b1:e7:2a:f7:0b:5b:57:ec:38:f8:f6:4a:ef:68:c4:74:
e5:1d:33:6f:f4:41:8b:d9:8d:1f:81:3a:67:f1:e7:c0:47:51:
bf:b5:dd:38:c9:38:d5:bc:30:02:08:ad:12:39:52:5e:ba:c0:
b6:6a:c0:3a:c5:77:17:4e:21:d3:14:73:12:da:0c:c3:a3:ad:
1e:4e:75:ec:d8:eb:15:74:6b:97:66:85:e8:c7:82:2d:ef:0d:
cd:a9:52:00:fe:13:1a:9c:1b:b4:15:d6:c4:f7:04:da:50:c6:
e7:4d:6f:05:ae:87:4b:97:4f:b4:3a:e3:1f:60:29:3c:5d:50:
8a:7b:cb:a3:1e:81:43:9c:fc:2e:38:29:cc:4b:0b:f3:b6:63:
af:db:66:84:dd:37:29:27:23:27:0a:fd:11:d4:1a:62:b8:39:
17:29:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:32:25 2026 by rpki-client