Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: wxibw5q5sv/iF3JUYuEnNjevGyB+St3GBcAQzDXqqTo=
Subject key identifier: F5:A3:F1:0D:74:DD:7E:61:36:10:8F:65:57:BB:BA:07:C2:3E:AF:BE
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 37714825131B1FC94747C2A1EAE8AE7E2578DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A4
Signing time: Mon 16 Mar 2026 11:17:39 +0000
Manifest this update: Mon 16 Mar 2026 11:12:39 +0000
Manifest next update: Tue 17 Mar 2026 12:05:39 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Y2t3TUGD4Fpqxxo/fZdCLrz/A4Xh2N8UVoUf1NF0X04=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 12:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:71:48:25:13:1b:1f:c9:47:47:c2:a1:ea:e8:ae:7e:25:78:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 16 11:12:39 2026 GMT
Not After : Mar 17 12:05:39 2026 GMT
Subject: CN=F5A3F10D74DD7E6136108F6557BBBA07C23EAFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:a9:58:38:a7:47:9b:21:14:ec:10:df:f1:
e8:bd:12:c6:3f:11:a8:c3:96:70:16:d0:cd:7f:5f:
ec:b1:6a:69:19:c7:37:d2:79:82:73:dd:e2:fd:b0:
db:07:aa:d3:fa:ba:18:8e:60:54:63:14:67:fe:18:
fa:fd:c5:cf:41:5b:d4:72:0f:13:44:51:26:73:a7:
da:e0:7c:af:e2:12:31:fe:70:27:a1:9b:57:de:be:
1f:99:f9:cb:0a:e8:89:7e:fd:88:84:3f:f1:14:d5:
25:40:d6:0c:5c:49:fc:49:f1:d0:8e:75:6b:70:08:
bc:e8:56:fa:84:ad:5f:4d:6c:a1:2c:b3:13:a3:9d:
46:f4:55:21:36:60:23:eb:4e:ca:f6:9d:4d:f0:c8:
0f:df:22:70:72:bb:af:7d:6d:b6:ba:ac:e0:68:cc:
57:ec:f3:10:6e:24:b6:88:22:29:8d:ad:eb:37:12:
25:72:72:5e:8a:38:3a:d2:b8:6a:07:0f:76:91:3f:
23:ff:da:2f:65:1f:36:e4:75:05:02:17:52:e3:a0:
3c:25:43:69:50:58:58:58:a1:f1:30:a3:61:7a:5f:
9e:9d:a7:9f:02:1e:9b:57:fa:24:53:da:33:55:7b:
2c:08:18:61:00:69:cd:8f:26:b2:1f:3d:4d:36:96:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:F1:0D:74:DD:7E:61:36:10:8F:65:57:BB:BA:07:C2:3E:AF:BE
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:30:07:d2:4f:0a:9b:e2:bc:4e:6e:d8:2d:df:1f:b5:ac:37:
2d:9d:16:c6:7f:76:62:a6:52:bf:b0:c1:4e:09:ad:4f:5e:8e:
ba:11:6c:4e:2d:18:5b:e4:e4:a4:be:ef:0d:ae:6f:41:5b:42:
54:c6:96:fa:90:d1:78:3a:63:07:06:c2:81:c6:39:d3:56:e4:
19:20:41:f8:a8:b9:43:96:7d:79:e4:0b:cd:18:cd:bf:27:c1:
a9:31:6b:58:b5:e1:99:e1:aa:99:9a:77:66:de:dd:c9:43:62:
3a:71:b9:fb:c8:b1:3d:f5:35:d8:04:bf:94:e7:1c:18:13:c3:
f3:68:44:61:0f:26:2e:af:32:2a:d2:28:ab:06:7a:4b:63:0c:
21:c1:78:39:b2:4e:b4:2e:a1:f0:94:40:83:27:a2:c7:29:50:
fd:13:6a:5b:9d:38:a9:39:9c:24:a6:69:bd:d8:68:05:1c:50:
0a:64:68:81:58:67:8b:99:2f:d6:41:59:03:5e:00:4f:d4:e1:
d8:57:8c:3f:de:72:a0:59:e5:20:db:8f:58:83:77:4f:c1:fc:
fa:79:00:6a:b8:1c:45:19:78:2f:79:21:ad:5f:d2:b1:4b:04:
8a:e8:ff:3c:9a:38:b7:2c:3b:77:bd:6d:be:79:2a:43:2c:ee:
da:32:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 22:29:30 2026 by rpki-client