Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: BMaaqtHSv8d/TUcJ0GWXU8g2kCtTM/jiS/UPSbVmh2I=
Subject key identifier: 5B:86:88:BB:31:99:D4:41:1C:8D:5F:2A:2D:52:FF:59:90:0C:63:16
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 766AC9816E5952DC4F7C93D6411F6024AB48810B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03C3
Signing time: Fri 16 Oct 2026 21:56:23 +0000
Manifest this update: Fri 16 Oct 2026 21:51:23 +0000
Manifest next update: Sat 17 Oct 2026 23:33:23 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: rbvT5AO9uYQRGEr03TUA/xI4hwZI5ABRNY7oxPYQ660=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 23:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6a:c9:81:6e:59:52:dc:4f:7c:93:d6:41:1f:60:24:ab:48:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 16 21:51:23 2026 GMT
Not After : Oct 17 23:33:23 2026 GMT
Subject: CN=5B8688BB3199D4411C8D5F2A2D52FF59900C6316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:60:57:32:48:04:f6:a3:29:e3:8b:14:bf:
92:a7:cb:89:92:12:99:ce:47:46:92:fd:6e:b2:dd:
7f:8c:57:f9:9d:7d:34:47:8d:36:ef:0c:50:a0:99:
36:fc:8a:94:e3:4c:94:44:b3:1f:a8:a8:ee:16:bb:
94:ed:7b:fe:87:75:18:0f:3e:fe:26:01:77:26:e7:
1e:33:01:00:d0:47:97:11:4b:99:75:e5:c0:10:ec:
53:f4:1f:d4:71:7d:6b:91:07:b3:ff:20:0f:50:96:
e2:b4:bc:6e:0e:b0:76:ee:6a:c4:87:8b:4e:49:91:
c5:d8:86:e2:de:f6:a8:2d:04:e7:17:e9:e0:49:ef:
28:f8:60:88:56:83:4b:ad:35:6c:31:6d:37:ae:f8:
19:bb:0e:a2:ba:41:08:37:94:f2:fb:42:f3:85:49:
5a:8a:38:0a:e8:b9:81:17:7b:35:e0:02:60:35:a8:
a2:a6:5e:b2:d5:55:b6:a9:da:99:3c:65:70:90:d6:
bf:71:e1:06:b6:f2:e5:ae:d9:fc:8e:08:02:89:93:
a1:03:1d:cf:9d:d6:94:44:12:5b:b0:f1:17:ba:ff:
77:8d:05:33:ba:85:3f:71:66:35:ba:d3:8c:b1:9c:
a0:27:40:af:76:19:e9:31:fe:d1:41:f5:00:36:a7:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:88:BB:31:99:D4:41:1C:8D:5F:2A:2D:52:FF:59:90:0C:63:16
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5c:b4:c9:3d:f2:a8:7d:90:ef:35:d0:9f:2c:ac:e9:f4:b3:
00:a0:a5:55:e7:a5:dd:99:79:bf:02:86:9d:b4:47:f7:d4:61:
9f:65:da:ca:33:08:b6:da:a0:7f:92:92:a4:22:25:2f:f6:66:
5d:30:1f:0d:ae:bc:98:82:97:81:8d:87:c8:45:8f:09:fb:f2:
a7:33:7b:8c:6a:79:79:c3:38:96:19:1d:45:5a:cc:c7:7d:f9:
f7:32:df:56:8b:16:3b:30:52:8f:f9:af:23:60:01:7a:4e:92:
6d:be:3c:5b:e3:14:6e:7c:50:d3:45:3e:fd:2e:15:7f:ca:f8:
26:0c:25:92:c5:43:2b:d2:6b:f5:a5:b4:b8:d6:c9:36:65:dd:
32:f7:28:5a:d6:71:04:65:94:db:14:2e:5a:5a:01:e1:d0:44:
32:8e:56:ba:d7:77:25:1c:60:4a:d6:b0:ea:75:ba:90:b9:da:
32:36:b1:1d:09:44:03:30:f7:e0:5d:06:c6:cd:9f:6f:d2:0f:
6f:ba:4b:97:4c:98:e7:d0:56:30:a1:87:23:61:5a:a0:26:45:
5a:91:c7:ed:78:e3:f5:98:a9:16:e8:6f:34:98:ad:76:df:b5:
8b:e7:17:97:ca:6d:09:c4:cd:1f:94:8f:fa:d3:bc:49:3e:7c:
a7:d0:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:46:02 2026 by rpki-client