Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: tvyMWSGcBU1uuRdrT6AaG3sMNp8c/Hak3J1ALxEYtjc=
Subject key identifier: AE:74:F1:D9:6C:1E:D9:58:E5:35:02:E3:4B:B9:E7:60:9A:FB:D7:A2
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3107F2318414D7A7466592EB00D3413906D2A08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02FC
Signing time: Thu 21 May 2026 14:28:10 +0000
Manifest this update: Thu 21 May 2026 14:23:10 +0000
Manifest next update: Fri 22 May 2026 17:53:10 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ms2Kw6TWflqBTwcMXBJtJVHcYU6MrIT8O3CKfCO3LtU=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:07:f2:31:84:14:d7:a7:46:65:92:eb:00:d3:41:39:06:d2:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 21 14:23:10 2026 GMT
Not After : May 22 17:53:10 2026 GMT
Subject: CN=AE74F1D96C1ED958E53502E34BB9E7609AFBD7A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:a8:b0:e5:d5:72:1f:af:5e:b1:c9:3c:95:
9c:e1:f0:cf:d2:99:36:f5:0e:85:1e:7c:b5:67:44:
de:7c:86:eb:73:01:9f:4f:d0:67:0a:51:77:fb:ff:
ed:3b:c0:e3:31:38:7c:07:9f:2d:59:ad:e5:3e:89:
1d:58:ae:53:82:6d:f9:31:24:e1:01:db:12:a1:d6:
23:8f:d2:ac:41:43:96:21:69:50:b3:8d:83:8b:b3:
cc:6a:9d:e2:f7:83:c2:be:ba:95:a7:4d:dc:19:4d:
f7:a4:ca:40:c6:af:0c:3d:11:50:89:6c:bb:9a:ba:
45:8c:05:48:cf:d0:48:b9:37:b0:cc:d7:b1:d5:81:
da:2e:31:dc:b7:2c:87:66:f7:8c:63:22:e3:f0:d3:
18:d9:b0:4d:cc:9f:94:f1:08:b7:fb:7b:78:3b:20:
34:6b:32:ab:54:4d:67:79:c4:9d:8b:df:05:f2:49:
0a:af:11:23:54:f7:56:8c:ba:29:04:70:fb:da:f2:
ee:43:bb:7e:2d:b7:6d:1e:2d:50:0b:38:ba:45:8a:
3a:5b:b6:66:bd:82:59:73:93:68:9b:e8:2a:1e:6d:
8d:91:bd:b0:1f:39:22:30:37:4f:f6:6e:43:c9:7e:
12:3f:c0:bf:7c:6e:a5:f8:22:0a:25:9e:eb:61:33:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:F1:D9:6C:1E:D9:58:E5:35:02:E3:4B:B9:E7:60:9A:FB:D7:A2
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:7c:45:a0:ee:33:f9:e9:4b:10:e7:90:c0:9a:f2:5a:b9:
71:28:4d:14:bb:57:21:28:8a:e9:6e:65:c7:c8:f2:c2:4c:f2:
69:0c:94:c2:57:78:50:e5:ac:e6:51:53:b1:95:d0:95:bc:26:
07:d1:be:2e:c9:36:a5:d4:d9:0b:43:62:46:6c:07:54:b5:aa:
0c:d4:86:0b:b7:46:63:53:63:58:a9:f4:dc:5c:55:ec:2e:87:
5b:93:9f:a4:86:f3:03:34:f8:cd:c2:ff:e0:4c:cf:20:3c:7d:
18:5d:ab:d5:fe:d8:1d:9c:c6:b6:4f:36:e7:61:ae:8a:16:0a:
39:d9:25:f2:1a:2a:cf:3c:f3:0b:a2:a1:3d:b2:36:70:a7:bf:
30:26:ef:86:dd:e5:01:32:2c:6e:e4:c4:5f:0c:0b:65:0a:2f:
1b:f7:8d:95:ed:e9:67:fb:c5:76:4b:6d:9a:68:c6:9a:11:d3:
b0:3e:aa:dc:73:95:d5:3e:91:9e:7d:8e:ba:d9:50:70:d6:c9:
f1:1f:c4:75:a8:e1:a2:ba:a7:53:dc:03:46:fa:12:b3:66:6b:
1f:2f:d3:e9:24:8e:8f:e3:83:e9:7e:50:02:8a:1e:bd:ec:d1:
f9:5c:bb:3a:04:5e:66:17:88:92:4c:62:48:d0:8b:ea:a1:a6:
b7:42:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 02:59:10 2026 by rpki-client