Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: woWaZl5PwolNsE1Rt8nU+7mKXzV4UyEhJB+FCXO5uPM=
Subject key identifier: 86:FA:28:8D:C6:25:CB:86:64:CC:A7:8B:E2:B2:C8:6F:BE:12:EF:3A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 076FF22F39C446BA69A90997F96AA69814B97415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03C0
Signing time: Wed 14 Oct 2026 16:16:13 +0000
Manifest this update: Wed 14 Oct 2026 16:11:13 +0000
Manifest next update: Thu 15 Oct 2026 17:24:13 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: esME/h5mnI7mwbCAtnsva5CAQbmbwPlGG0RCR3NLNbA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 17:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6f:f2:2f:39:c4:46:ba:69:a9:09:97:f9:6a:a6:98:14:b9:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 14 16:11:13 2026 GMT
Not After : Oct 15 17:24:13 2026 GMT
Subject: CN=86FA288DC625CB8664CCA78BE2B2C86FBE12EF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:52:a3:4d:c6:3e:4e:b6:71:0b:50:c2:eb:
37:a2:42:f9:db:6b:1d:bb:37:c3:84:f8:87:3a:68:
50:6d:e4:fa:7b:dd:1c:5c:57:44:4f:79:bb:61:c0:
06:ad:89:02:56:8f:36:29:8b:ed:17:1f:32:10:c5:
5f:a4:80:97:d9:29:58:43:6a:2f:0c:94:87:af:15:
44:18:7b:fc:f2:3f:03:c9:22:83:db:d1:55:16:17:
04:44:57:ee:61:c1:7a:d2:c9:25:5d:3b:48:68:4b:
06:f7:61:9f:8c:3d:cf:28:8c:84:9f:87:6c:ef:d9:
0d:8e:83:65:0f:ea:4f:63:27:6f:83:07:55:00:15:
72:ec:b9:61:7c:57:68:87:1d:c0:ce:20:1c:5b:97:
39:9a:b8:cb:78:1a:30:1a:73:f1:53:9a:58:8c:88:
24:37:20:95:5d:75:08:17:82:33:b7:58:ce:59:35:
cf:ca:0c:04:96:96:59:75:a0:38:73:a5:b6:69:ed:
43:f0:f8:0b:15:71:ac:82:97:e4:6f:d6:64:bb:61:
f2:ca:d4:6b:d5:96:43:78:4f:c5:70:1e:b3:cf:76:
ec:29:23:18:cb:5a:ff:ad:4d:77:6d:84:23:46:e2:
f8:33:28:bd:76:40:51:9c:b0:4a:41:32:fa:a6:04:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:28:8D:C6:25:CB:86:64:CC:A7:8B:E2:B2:C8:6F:BE:12:EF:3A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:68:f4:a3:d7:f5:53:e9:57:de:1f:07:62:da:6c:7e:7d:
24:97:56:13:4d:35:58:39:a8:67:01:21:1e:01:e6:f2:a5:38:
b8:86:c6:16:18:7d:1c:57:a9:fc:a2:ac:98:eb:07:75:c3:8e:
22:16:35:25:b1:1d:3d:74:ea:98:4e:81:db:8b:2f:a6:73:b5:
0a:d2:2f:62:f3:43:66:b3:25:60:69:83:88:2c:2f:23:d1:99:
c1:97:80:77:b0:e3:ab:fc:af:e8:97:b5:cc:50:da:d2:a6:6d:
65:9e:91:9e:c0:90:a2:98:07:bb:e2:b2:31:46:9d:0d:7d:86:
08:65:e2:ee:95:23:0c:74:2f:3f:f3:d0:46:a2:3d:49:a6:47:
07:e5:d6:ce:95:b9:68:b7:17:d8:da:f1:b3:a0:fb:52:df:f4:
9a:49:e6:ef:4e:41:77:dc:3b:80:a1:e3:f5:f5:c7:6b:1f:60:
77:14:8f:0e:84:60:40:03:95:d3:5d:f2:30:61:65:8b:bb:42:
95:60:49:d8:50:e5:6b:e2:7a:c9:d4:4a:b2:31:1f:db:ac:5e:
50:4e:e1:94:86:a7:ed:0d:ce:fd:98:41:20:d3:f6:78:a6:76:
21:62:cc:5f:1f:22:6c:22:69:f0:0c:4f:85:b9:42:2a:e9:37:
e0:15:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:44 2026 by rpki-client